Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/15ace10c-203b-373b-a7af-73c827bf127a.roa
File:                     15ace10c-203b-373b-a7af-73c827bf127a.roa (raw, json)
Hash identifier:          BN/93K0xZGzWgh37oAY4UTsAVZdH2XSCbnqS7bPBNsI=
Subject key identifier:   03:B3:39:E1:2A:48:74:26:39:2F:7F:D4:D1:58:60:19:A6:C9:DE:42
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C4693EAC
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/15ace10c-203b-373b-a7af-73c827bf127a.roa
Signing time:             Wed 19 Dec 2018 03:01:30 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.218.198.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:69:3e:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=ff3226e5-bfde-4d9c-80ff-11d0b6951a00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6b:cb:e7:b2:a1:af:76:c2:0c:00:9d:91:9a:
                    60:68:8d:f5:54:28:91:e9:3f:4b:81:f4:f9:df:8d:
                    4a:4d:97:e0:96:db:d0:97:7c:a8:c8:06:d4:f7:28:
                    a1:18:3a:8d:1c:37:97:73:4f:9c:fb:5b:66:47:c5:
                    b3:5d:63:fd:13:c2:e4:f0:c9:76:87:36:57:c5:9d:
                    c9:f3:58:c6:b4:2a:7d:d0:e0:fd:97:7c:93:ea:ec:
                    da:dc:d8:4c:35:18:15:47:9d:8c:f2:6a:2d:db:49:
                    d4:81:41:ef:fa:ee:62:d6:f2:42:7e:e4:42:af:03:
                    e4:e7:63:3c:3e:06:04:62:88:5a:62:88:d4:55:ff:
                    17:ef:ea:8d:ed:ee:cc:59:f4:36:94:22:d4:dc:92:
                    e8:29:63:46:e3:20:8d:13:c0:57:52:37:c7:55:20:
                    57:6c:57:0b:99:16:01:76:b4:c6:46:c1:b5:ef:4e:
                    a9:7b:c6:e1:ac:c3:9d:2d:2f:2d:c9:61:93:fb:85:
                    41:b2:d8:e1:e0:6f:10:a5:8a:2b:a6:8f:89:c3:29:
                    84:17:8d:a8:fe:b5:18:0f:85:69:91:df:d0:4f:a5:
                    98:f0:fd:5b:66:fe:dd:c2:99:75:3a:07:07:64:ea:
                    19:5a:7f:c9:64:cb:56:30:3a:94:f8:45:bd:6a:b0:
                    31:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B3:39:E1:2A:48:74:26:39:2F:7F:D4:D1:58:60:19:A6:C9:DE:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/15ace10c-203b-373b-a7af-73c827bf127a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.218.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:6e:ce:f8:cf:77:57:40:5f:b9:1c:da:35:60:07:dd:e0:f6:
         d7:5d:61:10:48:00:fd:de:86:b2:be:c0:06:00:b5:2e:7f:cc:
         fc:f4:b7:b8:b4:38:95:eb:c2:4d:13:1c:cb:44:94:1b:fa:34:
         e8:b6:0f:f0:33:42:a3:98:2a:ea:a5:a5:f5:f2:bf:aa:a1:76:
         e0:14:1d:57:27:38:05:36:0d:1c:23:13:ca:8c:32:81:5f:47:
         b3:07:4c:d5:d6:d7:a9:34:05:80:44:5d:31:64:75:dc:2e:65:
         d0:08:4a:4b:df:a3:76:ff:f6:08:9b:db:a6:c0:0b:9e:36:a6:
         1f:43:dc:86:81:69:e9:db:50:e7:2b:a8:d8:a4:a5:78:81:c4:
         cf:2c:69:99:c3:a3:7b:21:05:d8:4d:9d:21:5a:db:2b:6b:24:
         8f:f6:40:2d:aa:07:de:fe:16:3d:2f:30:9c:92:1d:5f:b1:84:
         f5:dc:8c:1d:fc:8d:30:cc:bc:0d:01:97:fc:60:5b:3f:37:51:
         e6:59:cb:81:2b:63:c1:71:8c:e6:89:b5:aa:73:ef:b9:cd:4c:
         84:d0:24:5b:90:ae:7a:1b:33:57:16:67:41:4e:57:67:08:d0:
         d6:14:54:c3:7f:7f:c4:0a:e3:96:df:39:a2:88:b7:e4:03:f9:
         10:82:f7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:10:36 2025 by rpki-client