Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5664fdc8-2c1e-3155-81c1-6e409ad84a44.roa
File:                     5664fdc8-2c1e-3155-81c1-6e409ad84a44.roa (raw, json)
Hash identifier:          4O3qZW12OeHpzhcFG04Y5RLIyQWHENJEDgHgUR+sn/U=
Subject key identifier:   A2:36:76:32:68:E7:7A:03:4A:38:E9:5C:7C:03:B7:CD:38:AF:11:1C
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C50AC039
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5664fdc8-2c1e-3155-81c1-6e409ad84a44.roa
Signing time:             Wed 19 Dec 2018 05:57:55 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     38895
IP address blocks:        52.219.19.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c5:0a:c0:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=81df9335-6851-4291-b913-d78ed97428b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:16:ff:c7:d9:d4:1c:55:6d:e3:99:24:91:0d:
                    c2:ae:0e:97:97:72:ed:9d:33:d8:bd:d1:a5:eb:70:
                    54:58:71:9a:95:d3:a6:03:37:82:02:ce:f1:9e:a9:
                    84:f7:c7:af:48:ee:b3:db:9b:54:8d:e5:ee:54:8e:
                    79:e0:c5:8d:84:2a:40:c1:b0:06:fb:67:36:04:ed:
                    e4:e5:76:06:3b:ba:30:d2:b8:ad:66:b6:28:93:f7:
                    b6:af:ef:01:59:3f:58:14:b3:7a:ae:c0:5b:49:f8:
                    56:a3:0e:14:39:02:dc:6c:a8:27:04:39:d2:85:46:
                    f4:34:0e:69:3a:aa:30:74:f3:ab:a5:9a:b9:09:92:
                    ea:dc:33:cd:ba:39:a8:2e:fd:44:db:34:2b:20:9f:
                    8a:ca:2b:f0:25:96:cb:f0:00:d4:b1:49:7e:63:ad:
                    2e:1b:04:ff:ab:d7:b6:20:51:0d:15:ef:26:75:0a:
                    d9:20:bd:28:a1:f4:19:ca:a1:2e:31:68:be:8f:d3:
                    19:fb:fe:c3:37:98:f5:cb:fa:18:25:3f:f2:46:bf:
                    23:61:aa:e8:f8:1c:48:7d:4f:9f:46:da:a9:df:be:
                    d1:fd:f8:e5:c5:e6:98:f9:e8:b7:29:b3:8c:1f:86:
                    cf:5c:3b:1a:57:04:1a:54:d4:9d:ce:4d:71:45:86:
                    c5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:36:76:32:68:E7:7A:03:4A:38:E9:5C:7C:03:B7:CD:38:AF:11:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5664fdc8-2c1e-3155-81c1-6e409ad84a44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.219.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:3f:9d:2c:e3:67:89:51:76:f1:8f:c7:1f:29:e4:06:c5:b1:
         68:a2:79:1c:53:f3:d7:a5:f1:a5:ce:10:d6:58:b0:09:64:d3:
         ca:4b:ff:8e:57:cf:a4:c0:2f:c2:4c:4c:fe:9d:6d:de:45:33:
         2b:56:2f:74:27:e5:bc:33:84:72:7f:7b:29:f3:e8:20:9b:1c:
         44:bb:2e:81:dc:a0:f2:38:8e:f0:9f:b8:71:ce:ee:ec:91:36:
         f4:fb:a3:77:b7:2f:2b:b1:e3:ee:fe:2f:3f:8a:f2:e1:c4:7d:
         48:91:d4:92:b1:f9:95:a0:66:1b:41:39:81:8f:b9:ea:f4:ec:
         c1:f0:fe:a3:60:bf:32:73:86:73:e1:98:67:a3:8e:c5:de:af:
         e4:65:01:cf:10:6f:ba:70:91:68:3a:e7:45:64:12:76:d4:af:
         d2:94:2d:2a:4e:74:f6:28:1d:6e:31:74:54:03:f2:f6:ac:0f:
         4d:e3:0d:b6:b9:e7:d5:0c:85:48:4f:46:18:69:2f:5d:7c:53:
         29:61:53:58:24:41:b2:ed:91:84:f4:c8:af:48:08:50:15:0e:
         e1:e0:51:eb:48:0b:8c:02:51:23:b3:35:3e:a5:24:c3:4b:85:
         95:3e:ca:b9:15:ea:d5:ac:df:9d:ba:11:e0:52:19:20:b7:1d:
         9b:ba:56:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:23:25 2025 by rpki-client