Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9f18326a-8dd7-3afb-94c3-173e30147924.roa
File:                     9f18326a-8dd7-3afb-94c3-173e30147924.roa (raw, json)
Hash identifier:          kZp6hMmIdNOmksHSVu23DuHNe/5p4L9bJ4OzF6GQlAk=
Subject key identifier:   20:EA:E5:F9:EC:AB:AE:AE:A9:03:77:89:23:BE:50:D8:F4:18:B7:C1
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16695B4ADA5
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9f18326a-8dd7-3afb-94c3-173e30147924.roa
Signing time:             Sun 21 Oct 2018 08:18:58 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     38895
IP address blocks:        54.231.224.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b4:ad:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=fe59fd0e-5a87-4126-80eb-ad47ea98ef83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:46:82:dc:c0:5d:f3:ea:41:95:b5:ba:16:72:
                    50:2c:81:8c:9b:89:b8:67:62:b8:fa:30:62:54:f2:
                    27:13:a5:ae:39:e3:0e:c8:60:14:ce:2b:e3:83:ff:
                    07:90:80:d1:6f:b2:39:86:5c:7d:7c:9f:67:ae:23:
                    c9:b6:63:62:56:ac:fd:71:bd:aa:ce:10:96:ff:a6:
                    79:6c:9c:fb:a4:4b:0e:98:3a:e3:4b:4d:c1:49:f6:
                    11:95:f6:e8:9c:34:a9:6b:7d:cd:46:e9:bf:11:3b:
                    2a:c0:21:34:80:ed:52:c0:a7:8b:fb:62:b4:c3:a2:
                    fc:27:7b:0c:bc:9b:2f:a1:9d:24:fe:3e:22:cb:e1:
                    90:ec:02:64:d0:0f:b4:a4:03:56:11:10:e2:12:b5:
                    80:45:4f:ae:5a:d5:0b:54:f9:07:ca:1c:64:05:df:
                    14:6e:9a:4a:2c:75:f1:31:cf:5f:b9:03:9e:6e:7b:
                    33:95:24:05:e1:e5:f9:df:8b:e7:d1:d6:b7:f4:11:
                    d6:17:cd:5b:9f:34:ce:4f:78:e6:fa:fc:53:af:7c:
                    13:c1:38:8f:b5:7a:bb:f2:64:67:7c:aa:0a:96:34:
                    d3:0e:20:9f:56:ab:48:5c:af:91:88:f6:21:0b:6f:
                    24:52:c3:fd:7c:ac:98:25:18:67:6c:31:cf:01:61:
                    55:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:EA:E5:F9:EC:AB:AE:AE:A9:03:77:89:23:BE:50:D8:F4:18:B7:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9f18326a-8dd7-3afb-94c3-173e30147924.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.231.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:d2:ef:94:15:62:fe:44:4f:7a:2b:c8:16:65:ef:ac:01:0e:
         fd:fe:6e:8a:98:cc:dd:2a:53:8a:62:04:aa:0e:ae:75:8a:10:
         9f:99:f5:5b:8a:95:c9:46:17:ee:1c:5d:d3:3b:49:3d:bb:3f:
         f1:46:f4:53:6d:b6:df:b7:4d:e5:c9:ca:2e:24:79:25:a2:34:
         52:25:0b:50:c6:35:2a:06:57:e3:95:17:56:4a:47:21:ac:7c:
         78:3a:57:3a:e6:c9:1a:85:71:7f:25:b9:88:8e:28:78:f1:26:
         b3:33:c4:c1:68:f3:9a:a2:2d:6f:23:7d:4d:e4:57:5e:1f:76:
         e1:8d:7f:82:19:64:f0:74:60:0c:c4:2a:a5:24:a9:2e:e7:83:
         d1:4c:d6:01:1b:93:31:a6:4d:1f:b7:c2:f6:12:1c:56:ef:21:
         9f:54:8b:f7:f2:b4:88:3c:c5:11:0f:f5:5f:a3:1f:8c:19:81:
         9d:56:61:d6:d1:d1:a0:6a:a4:e0:8b:c3:52:48:b7:68:b7:d3:
         3c:22:d8:82:1e:bd:9a:ab:92:f1:83:24:35:0d:fe:85:b4:72:
         66:86:6b:2a:b4:13:79:ff:6c:44:7a:fe:35:13:f1:45:52:5c:
         19:61:5c:7c:4d:39:03:dd:9c:65:d4:28:9d:c1:99:a3:f8:4e:
         6d:76:1d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:24:03 2025 by rpki-client