Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/24d3f074-ff22-369a-be17-0d45b262c744.roa
File:                     24d3f074-ff22-369a-be17-0d45b262c744.roa (raw, json)
Hash identifier:          cuf58KBCFo1VEKwzULTCLflEShevuBT0Ojilxi4PK8c=
Subject key identifier:   29:5F:43:E2:85:78:3F:50:03:5C:91:17:3E:B7:43:D5:31:B7:42:DE
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D59F9452CEA195DB3D2725940
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/24d3f074-ff22-369a-be17-0d45b262c744.roa
Signing time:             Fri 25 Mar 2022 04:00:00 +0000
ROA not before:           Fri 25 Mar 2022 04:00:00 +0000
ROA not after:            Fri 29 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        52.222.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:59:f9:45:2c:ea:19:5d:b3:d2:72:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Mar 25 04:00:00 2022 GMT
            Not After : Apr 29 04:00:00 2022 GMT
        Subject: CN=c9168a6b-0c0c-4487-88c5-72b5cddafece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cb:1c:0a:1b:95:9a:8e:85:db:d9:c6:67:ea:
                    62:6e:4c:fd:f7:7b:87:19:0d:ec:9e:f8:57:ad:ae:
                    34:41:7a:19:b2:20:d4:9b:de:8f:cd:2e:b0:85:e3:
                    84:1f:fc:70:05:9c:59:1a:ac:fa:19:c9:4c:ef:f6:
                    84:5f:c0:72:9c:f5:ff:b8:5f:b4:40:a7:c1:b5:81:
                    cf:70:ce:c8:30:13:fa:a7:cf:49:87:29:fa:44:8d:
                    88:81:43:21:71:c1:4c:44:3c:7c:7a:ea:30:de:30:
                    b5:3e:90:03:f4:5f:4b:76:16:54:4a:95:20:6d:3a:
                    bc:b7:4f:a4:c1:e5:8d:10:80:8a:0b:89:a4:96:79:
                    11:7c:85:90:13:9d:b8:9d:e0:7d:d1:9c:62:fb:ed:
                    b9:f0:2b:0e:1f:13:c0:91:28:be:c7:68:07:4c:9f:
                    d7:83:c0:fa:14:7c:3a:39:a4:64:82:b2:a0:07:6d:
                    80:85:e2:2f:18:f9:be:41:e3:0a:18:fd:35:3b:9a:
                    4d:d8:1b:60:7c:5b:0c:28:96:77:be:9f:05:4b:b5:
                    c9:65:ce:b0:9d:69:4e:63:1d:6a:d5:b6:e4:b1:f3:
                    14:8d:47:96:68:24:6e:7c:d0:87:9d:fa:e3:40:68:
                    bb:04:8e:c0:23:88:74:43:67:bb:ab:40:36:51:e1:
                    2d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:5F:43:E2:85:78:3F:50:03:5C:91:17:3E:B7:43:D5:31:B7:42:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/24d3f074-ff22-369a-be17-0d45b262c744.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.222.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:00:26:c2:ed:5e:7d:07:8e:63:6f:14:7f:49:b4:ba:33:6d:
         05:1d:ef:4c:50:86:e9:39:5a:c5:86:86:08:ee:df:03:18:08:
         2e:3f:bc:11:23:59:08:a5:e1:7d:07:04:8c:df:d5:6e:6b:7a:
         b9:c8:3b:01:60:92:c9:51:f1:d1:3b:c0:b7:3d:03:25:69:01:
         98:00:a8:78:5b:55:f9:b6:b0:d8:f6:f8:6e:d9:0f:ca:2e:b5:
         fc:63:64:b9:8e:74:7f:c4:b0:05:33:77:5e:9a:6c:47:67:dd:
         8e:79:a0:0e:6b:f4:97:ac:40:91:ac:99:11:f5:af:0c:cd:09:
         cc:82:07:d9:bd:7d:1c:b1:b4:1e:07:84:f4:2c:3d:ad:e4:98:
         28:78:76:9c:01:1e:0b:66:8b:c7:3e:62:6e:d3:cc:f5:6b:4e:
         5e:97:d8:b0:f8:f1:21:ea:c2:fa:c5:f7:60:82:31:9b:3c:7e:
         b2:dd:1b:73:9f:9e:5a:b3:36:43:00:03:98:d5:04:e5:15:88:
         49:39:b4:6b:49:23:1e:65:80:b0:ca:e9:19:56:ea:51:aa:f7:
         2a:74:8f:38:b6:fe:5f:df:3f:32:32:ca:18:ea:ad:bf:47:d4:
         e5:66:07:62:e4:fa:ec:af:f8:12:d5:e0:b0:a9:d3:84:3b:c4:
         06:87:d6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:05:33 2025 by rpki-client