Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/52bf2b93-5e25-3801-af77-85077906d338.roa
File:                     52bf2b93-5e25-3801-af77-85077906d338.roa (raw, json)
Hash identifier:          FPiHh4FBQH3AMUEH38ZnD2PoonVTbKzRVxqk89mXk5U=
Subject key identifier:   64:B8:1B:BE:FA:C8:D2:46:EF:43:EB:01:A8:94:2A:88:C8:18:61:9D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F8360A01B3DEDC3643078C5C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/52bf2b93-5e25-3801-af77-85077906d338.roa
Signing time:             Sat 08 Oct 2022 12:00:00 +0000
ROA not before:           Sat 08 Oct 2022 12:00:00 +0000
ROA not after:            Sun 13 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        35.176.0.0/13 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:83:60:a0:1b:3d:ed:c3:64:30:78:c5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct  8 12:00:00 2022 GMT
            Not After : Nov 13 05:00:00 2022 GMT
        Subject: CN=eeb9d786-30b3-432f-b460-0a5e5b97a1a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:87:04:fa:70:81:4d:1a:d1:85:e2:64:6e:c7:
                    4b:93:8c:a5:fb:f7:ce:0d:60:0a:a5:51:87:f7:d2:
                    d8:ff:33:25:ac:18:bf:99:d9:c5:e0:fc:9f:ce:21:
                    ce:5d:84:49:72:ae:39:b9:a8:87:d0:b1:fe:1d:f0:
                    63:e4:5a:0b:18:3b:ed:8c:82:9e:f9:f2:6a:40:c6:
                    ab:0e:7a:53:29:b8:2c:9b:6b:bb:42:a3:df:fa:d8:
                    64:f0:cf:74:d4:f3:1c:40:6b:1f:cc:7e:6b:73:1a:
                    81:ec:fd:0b:71:1f:b0:71:58:ae:42:3e:cb:19:c1:
                    03:43:25:58:ce:b5:b7:35:43:20:bc:28:7d:6a:e7:
                    47:a8:87:c0:56:88:64:59:fe:24:32:8d:b4:b6:13:
                    9d:0f:99:20:0c:e2:4c:b8:c5:ef:7c:cd:d3:5e:a8:
                    cc:d7:e0:0d:fc:47:31:54:12:eb:ff:b6:8f:9d:f1:
                    10:e7:69:d7:b1:d1:63:76:48:4b:37:da:f9:af:a8:
                    c9:df:14:54:16:ac:7b:f8:af:4a:e3:80:54:4f:2a:
                    f9:a4:76:7c:f1:0a:f9:ad:3d:2d:18:42:54:f3:db:
                    98:95:a1:20:4b:58:41:c6:f0:fb:3b:22:74:64:36:
                    5e:e9:55:43:5b:e0:85:54:a7:64:6f:b0:0b:43:42:
                    af:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B8:1B:BE:FA:C8:D2:46:EF:43:EB:01:A8:94:2A:88:C8:18:61:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/52bf2b93-5e25-3801-af77-85077906d338.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.176.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:33:94:8f:f0:45:92:c2:7c:47:f2:68:4d:71:33:7e:ef:50:
         ad:59:7b:cf:0e:44:b3:64:c1:15:d6:b8:3d:82:48:c3:2f:5a:
         37:d2:f1:39:9e:11:04:78:ce:2b:54:de:32:3e:ef:c7:9f:4a:
         3b:c9:5e:f3:d6:79:3f:21:fa:2a:b2:97:19:63:0a:72:82:ec:
         b7:b0:cc:21:bb:c9:e9:92:18:e4:74:2f:6d:1d:0d:6f:ac:bb:
         58:6a:02:0d:6f:a8:75:1c:3b:d7:a0:c5:40:5f:e5:24:d9:d7:
         2d:e5:9c:99:5c:9a:b2:13:26:1d:c3:12:68:17:7f:ff:2c:35:
         d0:6e:14:64:74:17:a8:16:87:01:d0:00:40:10:c8:df:6c:b3:
         7e:89:80:aa:4f:fd:fe:3e:66:57:b1:3a:47:ad:2e:2c:e1:82:
         07:72:43:19:1b:f5:a0:07:1c:d4:2e:a2:23:67:23:14:bc:1c:
         df:63:28:ef:29:56:f4:c7:7f:f6:bd:9e:59:ce:8b:3b:cf:08:
         c8:bb:09:92:86:02:d0:9c:67:cf:34:03:fe:6e:c9:d0:dc:54:
         c3:c5:6e:7a:34:2f:65:3e:ef:fb:55:6a:f9:c8:7b:84:b9:d2:
         97:9b:17:ef:e6:63:56:c4:1b:dc:7d:e5:11:7f:da:d3:a6:5b:
         aa:a2:5a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 06:07:13 2025 by rpki-client