Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1ff5c444-c1f0-3a43-9b9a-6e77fdacfabc.roa
File:                     1ff5c444-c1f0-3a43-9b9a-6e77fdacfabc.roa (raw, json)
Hash identifier:          UqRX6CtaSloRHIqR2kMXf9A1r9bh9BdLWLcnZGcuPS0=
Subject key identifier:   ED:3C:F9:99:EA:76:3E:D6:38:46:4D:52:11:B2:0A:06:63:C6:3B:56
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665B6976CF
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1ff5c444-c1f0-3a43-9b9a-6e77fdacfabc.roa
Signing time:             Wed 10 Oct 2018 00:38:50 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.219.24.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5b:69:76:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=8f1e84a2-5ae6-425e-9312-0f62856cd55b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0c:13:9a:d0:db:9c:b7:7b:dd:ff:74:b4:7c:
                    cc:34:c6:74:b3:32:1e:9f:1f:17:cc:d5:81:55:fb:
                    42:07:2a:db:4f:dc:84:9b:4d:69:60:d6:7f:15:51:
                    42:82:95:e4:bc:d0:62:b8:98:47:19:09:21:c0:a4:
                    4b:17:0a:53:cf:1e:59:fd:03:37:03:1c:0f:65:b0:
                    d7:06:35:8d:b7:03:b4:aa:54:fe:39:ee:0c:3b:8c:
                    20:9e:4c:26:b9:79:ed:70:9e:43:0b:80:75:76:b2:
                    2f:ed:4b:9a:1a:47:89:8f:8a:81:3a:52:5c:51:8b:
                    c3:eb:97:1f:80:89:f0:aa:c9:51:50:50:8a:a0:f0:
                    dd:d2:a2:cb:74:ac:1e:c2:4a:89:a8:a8:a6:e3:d1:
                    c1:6f:2f:41:f1:7e:56:e1:56:89:d5:b2:79:26:fc:
                    d1:f8:0d:5f:3a:60:ea:ba:6e:3a:25:fa:53:0f:2f:
                    cb:40:28:db:68:99:91:cd:87:a6:5f:01:18:27:55:
                    25:e7:ed:da:ae:0b:bb:1e:af:52:8c:75:8d:99:a4:
                    a9:c3:2d:e1:3a:3a:45:5d:24:00:9e:5f:29:aa:6f:
                    b7:83:c7:69:4e:97:a2:d4:25:43:cf:34:f8:79:0c:
                    c3:e2:cc:d9:e4:14:43:9a:25:2e:c6:77:c6:05:a8:
                    c9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3C:F9:99:EA:76:3E:D6:38:46:4D:52:11:B2:0A:06:63:C6:3B:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1ff5c444-c1f0-3a43-9b9a-6e77fdacfabc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.219.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:2d:1f:8c:30:db:30:d0:24:2a:71:d1:e9:5f:f6:4b:7a:23:
         df:ad:51:0d:39:c9:87:b9:fd:b6:b9:0f:c5:8d:0e:1f:39:5c:
         d3:1e:8c:d6:7f:fb:a8:01:5a:7c:29:3b:a3:6f:20:63:d2:b6:
         8d:1a:85:0b:db:b9:2e:30:a0:ff:58:34:8e:6a:19:29:ca:83:
         90:18:5c:da:06:1a:57:57:b4:48:84:f2:f5:f8:b1:ce:61:4c:
         26:0f:3a:b8:6b:2d:b3:c4:89:c5:0f:b3:35:07:60:a9:09:27:
         77:db:6d:d9:e8:d4:5d:02:09:f4:7e:74:e2:82:95:9e:5e:58:
         81:15:07:03:f0:d5:28:b3:86:00:fb:f1:e7:dd:08:b5:e7:b6:
         f9:25:27:6e:b7:09:5c:c2:c0:45:ed:5f:9d:bd:85:87:bd:b2:
         3e:ed:9a:0c:ba:6b:84:82:fa:ba:75:25:c1:aa:ec:01:0d:e1:
         c0:d5:70:17:95:bc:58:05:55:75:68:26:84:ee:0f:ae:7c:15:
         d5:d8:d7:1a:15:d1:53:22:33:45:6a:7c:45:b2:2e:36:0e:84:
         be:dc:61:5f:37:f1:30:82:ab:b4:37:b1:f7:9f:ad:dd:32:03:
         fa:f4:e6:32:87:85:a9:e8:d4:03:b6:5e:cc:fc:69:64:3c:5a:
         cf:94:40:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:45:06 2025 by rpki-client