Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2820344a-c4e5-3a57-8647-442497b8b27a.roa
File:                     2820344a-c4e5-3a57-8647-442497b8b27a.roa (raw, json)
Hash identifier:          lsjhsceLmlPSow6uIMGuVOVMlfKgKmmBPQ1cUOKopKI=
Subject key identifier:   93:BD:21:11:DF:19:3F:60:8D:1E:67:FB:66:0E:6B:DC:66:4B:9B:AB
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16A2C057FA8
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2820344a-c4e5-3a57-8647-442497b8b27a.roa
Signing time:             Wed 17 Apr 2019 15:58:39 +0000
ROA not before:           Wed 14 Mar 2018 04:00:00 +0000
ROA not after:            Tue 14 Mar 2028 04:00:00 +0000
asID:                     38895
IP address blocks:        52.95.226.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6a:2c:05:7f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Mar 14 04:00:00 2018 GMT
            Not After : Mar 14 04:00:00 2028 GMT
        Subject: CN=1b1e2757-b1e7-4f2c-a8bc-eb84f522962b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:90:51:e4:38:ea:b0:8d:c4:93:8f:9d:61:96:
                    04:f3:40:44:27:5e:91:99:c4:fe:24:dc:fe:e9:3f:
                    a6:2d:05:30:71:1f:3b:bf:1e:f5:15:c5:f3:c8:3b:
                    00:85:ca:9f:af:a4:a2:d7:29:c4:0e:97:13:63:2c:
                    0b:d8:07:71:3c:ac:5f:be:80:a7:50:e6:b3:37:fe:
                    2e:6b:8b:38:b6:af:20:66:6c:dd:12:f7:52:95:7c:
                    54:f2:e2:e5:de:ca:2a:95:47:9c:de:57:e2:0b:18:
                    bd:2d:7a:31:65:cb:55:b5:b1:96:87:80:e2:65:f9:
                    23:19:67:a2:1d:10:76:e7:10:8a:43:68:5d:1d:4f:
                    54:80:55:b8:ef:27:c2:b9:dd:83:29:11:3d:cc:f6:
                    68:42:b1:1a:4c:c8:56:54:72:20:fc:80:3f:a6:3c:
                    5d:ef:75:f3:e9:25:59:7f:c0:21:11:df:d7:bb:81:
                    0f:85:91:a6:84:ef:98:3c:11:37:9f:bc:97:98:02:
                    52:1b:44:17:27:a5:4c:10:7d:80:02:d8:89:eb:c5:
                    e8:99:0f:99:be:4a:71:8b:58:a1:60:40:cd:88:f0:
                    ea:f8:95:d3:38:a3:fa:7a:8d:36:4e:65:51:a4:5b:
                    94:c3:1a:a6:e9:5d:bd:7f:44:37:14:cf:b4:11:38:
                    c7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:BD:21:11:DF:19:3F:60:8D:1E:67:FB:66:0E:6B:DC:66:4B:9B:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2820344a-c4e5-3a57-8647-442497b8b27a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.95.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:0f:58:09:fa:1a:f4:1b:c5:15:ee:06:79:d0:fc:37:7d:00:
         73:68:6c:78:91:88:05:30:17:e7:7d:37:f9:4b:d6:52:7e:84:
         05:e6:f8:d8:49:b6:36:7b:51:05:71:24:ae:1b:02:e7:40:5c:
         e5:9b:06:d6:7f:7e:c8:75:42:1c:8c:98:10:db:85:0c:76:89:
         64:ad:8f:05:fb:fc:a4:9e:2b:b2:e7:55:96:01:f5:a5:25:09:
         2a:36:0e:3c:de:01:3b:84:dc:c6:f9:21:46:c2:59:0d:5f:52:
         2d:15:b6:9c:15:b6:f2:b5:2e:f5:2d:72:18:d2:9f:6b:6e:43:
         67:44:f8:9a:a8:63:0f:72:7a:c7:14:e2:95:12:ff:77:5a:3f:
         26:ea:0a:d7:da:d6:50:94:f4:c2:48:f7:12:31:9c:d3:64:bf:
         44:19:29:74:17:9a:5c:8a:80:db:48:55:db:3e:e1:60:7c:19:
         f7:61:ab:11:db:62:99:98:76:9b:05:72:61:61:9a:d9:85:4f:
         93:fa:99:1e:a8:4d:21:f1:90:80:e3:b3:71:36:3c:46:06:cc:
         2a:e3:a6:28:87:8c:2d:90:60:bd:1d:38:1c:94:cd:18:03:ae:
         09:c6:e3:9d:fb:51:7e:ea:4d:f6:9d:e5:84:7b:de:c8:0e:82:
         6c:cf:3a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:46:20 2025 by rpki-client