Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ebc39a2c-d604-3c79-b7cb-ba76cda6dea2.roa
File:                     ebc39a2c-d604-3c79-b7cb-ba76cda6dea2.roa (raw, json)
Hash identifier:          1NjloAtstm/OShhqD3GFJjc3RPlgUynZa4QIV+raRVY=
Subject key identifier:   13:59:77:4F:45:D3:D0:70:D1:ED:C1:FB:E5:54:C1:D4:EA:15:FB:7D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F9B6D57FDEC09013A69576C00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ebc39a2c-d604-3c79-b7cb-ba76cda6dea2.roa
Signing time:             Mon 17 Oct 2022 12:00:00 +0000
ROA not before:           Mon 17 Oct 2022 12:00:00 +0000
ROA not after:            Tue 22 Nov 2022 05:00:00 +0000
asID:                     22394
IP address blocks:        155.146.64.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:9b:6d:57:fd:ec:09:01:3a:69:57:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 17 12:00:00 2022 GMT
            Not After : Nov 22 05:00:00 2022 GMT
        Subject: CN=b2fa4927-0083-43db-b1f9-09491d70e1d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ef:c3:68:bc:44:73:58:67:32:59:ec:25:23:
                    68:55:e4:17:db:b8:e3:32:92:7b:23:52:32:31:db:
                    4d:aa:67:d5:88:af:23:72:52:a2:d5:fc:d7:94:35:
                    77:ac:1e:b7:4e:98:48:98:05:80:73:8c:ac:c2:76:
                    c8:90:f5:83:6b:12:43:e9:19:49:8e:fc:c5:76:aa:
                    5a:98:83:6a:0c:e8:82:26:7d:fd:41:10:5b:3b:72:
                    c4:7e:55:30:b9:1d:8e:6b:82:03:d2:6b:d0:61:8b:
                    7c:af:81:ab:62:33:9f:32:57:13:d4:b8:d3:77:09:
                    8d:5d:04:82:90:ee:67:a7:01:ea:1b:1e:ae:67:9d:
                    ee:cb:e0:17:99:e8:ae:28:8b:4d:4f:d2:91:fc:2c:
                    96:4b:ff:ba:a3:ba:25:1a:6c:96:38:5c:d3:79:ab:
                    2f:26:05:86:3c:8d:c2:f9:5a:64:44:39:8d:5a:5d:
                    9c:ee:2e:92:3d:9f:5d:f5:94:c2:66:6a:b3:41:2e:
                    db:c0:94:a7:d3:39:d2:11:a5:e9:3a:8c:73:ee:12:
                    08:f8:f6:89:36:85:cc:ee:2b:04:e0:46:89:bb:28:
                    ab:1c:01:05:53:20:b8:80:5f:9c:64:00:0d:b4:b2:
                    de:88:d6:fe:f9:46:fd:d4:a0:00:66:85:f4:ee:60:
                    9d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:59:77:4F:45:D3:D0:70:D1:ED:C1:FB:E5:54:C1:D4:EA:15:FB:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ebc39a2c-d604-3c79-b7cb-ba76cda6dea2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.146.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:39:08:f0:17:cb:bd:8b:cf:81:2c:92:64:54:2d:e5:07:e0:
         3d:0d:ac:db:70:52:75:18:48:a3:a9:c1:b4:81:e0:c1:b5:c2:
         41:1b:23:ea:ef:f9:b2:db:db:25:65:0f:af:da:e6:80:3c:57:
         a9:30:b0:1d:e2:d5:6b:d8:d8:95:a2:7f:66:81:72:5c:2a:bb:
         0e:5e:95:1e:1d:86:fd:89:2d:68:30:0f:8a:0a:19:84:e6:cd:
         bd:69:7c:07:ea:cf:ab:5b:45:a4:1c:7c:65:fb:3f:d9:2c:38:
         6e:36:c3:16:69:bb:98:7f:17:c1:e5:49:4b:3b:30:05:a3:b1:
         51:31:e4:3d:3d:1e:60:62:93:8b:ff:cb:79:a6:b4:44:0c:46:
         ff:60:e6:f3:88:e0:18:d3:32:01:b1:a9:9a:de:6c:50:67:27:
         71:aa:f9:d7:3c:55:14:e4:ef:40:28:69:51:0f:6c:b2:a3:72:
         88:04:0d:94:f1:a0:ad:8e:54:cd:40:00:9e:3f:ae:c5:78:71:
         b5:dc:3b:84:d9:46:71:6c:bb:67:16:9a:8a:81:b4:c7:ab:16:
         c4:29:90:c3:01:e0:d2:ca:bd:9c:8e:5d:03:3f:9a:f3:bb:9c:
         4a:97:68:ea:2c:0c:dd:46:ee:f1:4c:0b:fc:cd:f5:dc:26:6d:
         1c:72:fc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:29:09 2025 by rpki-client