Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a6360b38-e4dd-3872-b580-e2244159f918.roa
File:                     a6360b38-e4dd-3872-b580-e2244159f918.roa (raw, json)
Hash identifier:          IFsJhEcujteWqUEFYDhqFec6DBOgm76Xez++ljl/088=
Subject key identifier:   02:74:7F:4B:E4:CE:0C:F8:DA:8C:EE:AB:5C:68:FE:B1:C1:17:A2:00
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16695B2E8F2
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a6360b38-e4dd-3872-b580-e2244159f918.roa
Signing time:             Sun 21 Oct 2018 08:17:02 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     38895
IP address blocks:        52.92.60.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b2:e8:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=7986c85d-16b3-424a-81bd-fa6b6df4eb1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3e:ce:0b:ad:b7:36:07:6c:33:9f:ef:7a:c7:
                    52:74:24:54:00:c7:80:92:26:3b:dd:b5:22:f1:75:
                    44:8e:75:31:16:64:ee:52:11:ff:8e:11:5f:52:0d:
                    16:0b:ae:2d:fa:70:00:0f:4b:89:75:ec:0a:a4:35:
                    4d:60:cd:7e:0e:03:c5:9e:97:d5:4e:4e:bd:ca:65:
                    02:eb:67:f6:43:21:98:2f:ae:02:0e:d6:5e:63:34:
                    86:b4:43:f1:be:00:4b:6d:ff:54:5a:4a:44:12:05:
                    24:7f:3a:6a:88:0a:b2:e7:7c:aa:c4:f8:16:76:69:
                    ac:0a:c6:d6:6f:24:97:2c:5c:55:7b:af:72:cd:a6:
                    5d:78:a0:7d:37:3a:2e:00:52:48:0e:f4:3e:75:17:
                    ee:c1:93:2a:91:09:4a:a7:b0:79:4e:a8:c4:ac:04:
                    72:2f:db:a8:6d:9b:9f:b5:4e:50:6e:b0:4f:e1:73:
                    a6:09:e1:61:83:6a:9a:25:a8:2a:32:e1:c4:53:17:
                    d6:49:a7:e0:29:b7:1d:52:8c:d6:38:ac:90:b9:ed:
                    c3:b9:7d:0e:a2:f2:f2:ad:5a:c2:48:45:a6:bd:5d:
                    8f:76:a7:e9:b0:12:bc:01:6a:40:44:fe:97:8e:e5:
                    84:d1:ed:55:ed:65:70:a6:b3:45:3a:e9:d4:14:ab:
                    6b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:74:7F:4B:E4:CE:0C:F8:DA:8C:EE:AB:5C:68:FE:B1:C1:17:A2:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a6360b38-e4dd-3872-b580-e2244159f918.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.92.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:0f:93:75:87:04:1f:2c:a5:44:e9:f9:6d:ad:95:19:4c:00:
         2f:18:4e:e2:fe:e5:bb:07:dd:ea:f5:04:32:66:1a:32:97:83:
         95:b6:e2:1a:87:fe:58:c9:a2:4f:a3:9a:db:6a:ea:41:4c:19:
         fc:5e:59:8b:b3:54:b1:e9:f2:4a:9f:b9:86:96:0a:4b:a7:ab:
         f9:3c:e7:0d:16:df:34:26:35:cd:3a:e7:6d:e2:f2:84:76:47:
         a8:c6:69:60:65:fb:1f:fb:a0:d5:98:b0:94:41:14:e3:12:4f:
         58:0f:24:4c:44:a1:01:7f:2c:a3:fd:34:74:05:55:7e:7b:56:
         32:30:fd:74:89:00:dd:38:68:37:ef:21:4d:06:88:da:89:2d:
         95:dc:03:27:6e:b9:46:ec:ce:ce:6a:ec:e3:24:61:3e:9f:25:
         45:3b:fd:25:c5:7c:81:20:cc:52:5e:64:06:c1:51:8e:4e:ba:
         98:f6:41:9a:92:b5:63:dd:4e:c1:f1:ac:60:69:6f:96:90:7b:
         06:77:23:a7:df:31:0c:b7:7d:12:66:b5:16:9c:13:b2:73:e4:
         d7:84:d2:e4:38:8b:d0:b1:fd:f7:1a:65:73:4a:72:7b:62:22:
         f0:18:b9:a1:5a:e3:8b:05:6c:9f:69:48:9b:75:09:a7:98:ff:
         bf:b0:8a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:20:22 2025 by rpki-client