Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/082455ed-7f4c-3006-8625-c1566df7fac8.roa
File:                     082455ed-7f4c-3006-8625-c1566df7fac8.roa (raw, json)
Hash identifier:          VRwI2xcArQpCvsWLmku0ynSm/cpb+fGxkGlkNYozJm0=
Subject key identifier:   9B:7C:15:E8:FC:55:07:0B:E7:8C:6F:2A:63:14:F3:B5:89:97:59:5E
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583CE4A27A93E562CE555766F600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/082455ed-7f4c-3006-8625-c1566df7fac8.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        52.216.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e4:a2:7a:93:e5:62:ce:55:57:66:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=4d0994cf-6dfb-43ff-ac30-830a2acce26f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f6:ef:6d:0f:39:c6:2b:b8:ae:89:7c:fd:00:
                    fd:62:9c:fd:71:02:79:c0:01:79:0b:f3:82:69:3a:
                    a5:bb:3a:57:bb:d7:d7:23:51:8a:44:39:c1:78:72:
                    c2:a8:24:a9:42:f8:43:db:ae:69:29:01:0e:5d:cd:
                    80:f1:4c:25:57:72:45:c0:c1:aa:05:56:6e:74:48:
                    c2:82:f6:c6:2f:ed:9b:fa:fa:93:d4:87:f8:6f:e3:
                    f2:7f:64:80:76:ca:17:25:7e:e5:5d:29:8a:63:31:
                    5a:dd:de:57:3a:ed:c9:82:c7:56:4b:f3:73:91:52:
                    46:35:37:f5:f5:9a:f1:3d:2c:59:b5:ab:be:7b:69:
                    89:21:fa:20:0f:91:88:bd:8c:e5:7f:1e:06:88:fc:
                    05:6e:05:a9:2d:6c:6a:5b:62:1d:67:c1:9a:08:88:
                    56:65:6a:84:85:28:8b:87:d7:30:89:97:02:5b:ae:
                    93:5e:8c:6b:61:9b:b3:7f:52:f0:8e:4d:6c:52:4f:
                    50:a0:76:6a:17:d8:15:fe:4d:f3:06:96:c2:07:bb:
                    c9:f8:dd:b1:d1:9b:a5:d1:19:db:0d:8d:6f:bb:84:
                    8e:9e:3e:99:61:1f:a2:43:0e:bb:f5:48:37:cc:32:
                    31:a2:67:c9:92:a5:bd:bd:69:ce:b9:3c:70:d1:45:
                    17:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7C:15:E8:FC:55:07:0B:E7:8C:6F:2A:63:14:F3:B5:89:97:59:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/082455ed-7f4c-3006-8625-c1566df7fac8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.216.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:00:39:fa:30:70:ea:7a:61:f4:fb:44:ef:1d:10:10:be:a7:
         2d:24:4f:47:fe:c1:2b:8e:57:e7:a1:3b:77:e3:61:5a:56:70:
         a4:e2:5f:da:41:37:39:6b:47:f1:07:d7:5e:b3:00:89:03:75:
         5a:53:c9:6d:b1:80:3c:3a:9d:92:bb:ec:31:89:7e:a4:78:24:
         f0:bb:10:c0:91:3b:87:51:2a:67:b8:fc:ae:0b:87:5e:6e:dd:
         9f:d1:43:e1:c1:12:c9:1c:78:3c:11:80:b6:af:03:73:bd:96:
         6b:45:c6:7e:8e:18:b7:51:64:9b:dd:a5:cb:21:f4:02:9b:89:
         92:95:d5:85:1f:70:a5:fb:0d:54:54:fc:98:e9:36:5d:1c:75:
         76:dc:bc:74:f7:ee:86:0d:00:5e:2f:15:07:67:8b:6b:23:aa:
         2f:91:01:78:d7:af:74:2b:2d:a5:bd:43:57:5b:7b:3a:31:30:
         7d:9b:a0:6f:9e:c9:63:5d:1d:5d:b1:cb:73:da:81:ee:39:bf:
         0c:77:67:d7:7e:53:06:bd:e4:3e:4c:8a:23:79:89:5c:0c:65:
         18:44:ed:2d:db:9e:5b:36:4a:d5:5f:b9:6a:90:95:7e:73:01:
         5d:6d:d3:73:69:61:1e:5d:cf:9f:1d:29:19:d1:be:09:80:e3:
         ac:b9:83:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:20:51 2025 by rpki-client