Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/738ce87c-06c3-3084-83da-cb68a1d30a82.roa
File:                     738ce87c-06c3-3084-83da-cb68a1d30a82.roa (raw, json)
Hash identifier:          a4tvclsGS8QeAlN4GPFXtimhilHJ7jEkTTqwDOX1TVU=
Subject key identifier:   52:43:12:DA:A4:07:EC:AA:CD:3D:FB:7E:C1:1F:B3:AC:41:A3:FA:A7
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C50AA6D4
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/738ce87c-06c3-3084-83da-cb68a1d30a82.roa
Signing time:             Wed 19 Dec 2018 05:57:48 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     38895
IP address blocks:        52.219.16.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c5:0a:a6:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=b4b95f55-98b5-430a-a52b-68d890428caa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2a:34:83:0a:6d:5c:d4:2a:7f:e0:52:ec:83:
                    00:37:2e:8f:9c:80:57:23:b0:96:9b:0f:b6:eb:84:
                    b3:c5:90:dc:19:73:32:b5:e1:b9:4d:a8:10:32:68:
                    a2:b3:85:5d:de:34:7e:2d:8c:0b:35:c8:87:68:22:
                    e2:12:f6:0e:d5:21:bb:3a:fb:17:34:24:db:fe:83:
                    52:35:01:8d:b9:e5:73:06:3e:87:e7:86:2b:6a:70:
                    28:9c:b0:5d:7a:2e:db:d0:b5:ad:f0:40:cd:ae:97:
                    1f:13:55:7e:aa:88:02:ac:49:8c:80:1b:6b:bd:9f:
                    d2:cd:41:48:ab:ef:74:12:c9:ea:4c:c4:49:49:e7:
                    c6:be:5e:e3:ca:74:17:cb:15:8e:30:83:5a:91:b5:
                    aa:5e:66:b8:6f:1a:ee:af:bb:b4:29:9e:84:24:92:
                    10:f8:41:0a:51:24:06:d8:78:85:78:ca:9b:38:29:
                    28:23:3a:e8:6c:e7:57:16:68:2c:53:2e:72:e0:fb:
                    9f:76:f1:ad:53:a3:a1:e4:4e:76:82:30:db:d7:63:
                    a4:14:f6:e4:3f:5c:70:d4:1c:8b:9e:5a:40:22:a4:
                    75:cc:e3:8f:68:00:92:4e:cb:2f:fd:17:cd:4e:4e:
                    a7:60:9d:8d:8b:e8:c7:20:10:2a:04:bc:ea:3d:db:
                    e0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:43:12:DA:A4:07:EC:AA:CD:3D:FB:7E:C1:1F:B3:AC:41:A3:FA:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/738ce87c-06c3-3084-83da-cb68a1d30a82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.219.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:c4:5e:2d:a2:82:9b:7c:15:04:a3:fa:32:59:2a:48:ba:15:
         33:4d:56:35:14:46:42:67:86:6c:2c:b2:f5:61:33:6d:96:c0:
         fa:b6:83:73:04:97:5d:ff:11:bf:27:15:5d:36:2e:57:9e:3f:
         4f:87:ce:3e:3f:41:da:8d:ff:c6:ef:12:f7:09:d9:f3:22:b4:
         19:6a:2e:80:91:72:07:fd:20:34:5a:17:aa:88:81:36:b6:05:
         f1:d7:c8:fb:2e:39:18:30:8d:c4:d4:48:e5:61:ef:0c:97:70:
         e1:3d:0a:53:c7:30:8e:c2:f8:d3:0f:c6:f7:a6:8e:02:be:55:
         9f:44:24:76:6a:1c:fb:77:0d:c2:1b:6a:74:5c:06:d4:8a:75:
         b6:ba:49:26:be:9a:9e:b8:50:fa:72:b9:6d:c1:f4:66:b4:b8:
         fa:34:27:da:37:71:5f:04:c4:0b:38:5c:d9:62:ff:52:20:49:
         07:91:3c:5d:4d:cf:f1:14:0a:1b:ab:85:69:40:8a:1d:7b:41:
         11:68:79:c2:4f:ee:93:ec:da:1c:21:00:03:43:a7:95:69:d0:
         aa:84:5c:cf:83:ff:e5:90:16:3b:3e:d9:ee:b0:81:09:68:be:
         bc:19:41:af:66:71:f3:dc:26:40:6f:43:d8:56:37:bb:4c:fa:
         2a:94:ff:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:52:52 2025 by rpki-client