Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c3195ca3-ba9b-373f-af42-8267efb46ef6.roa
File:                     c3195ca3-ba9b-373f-af42-8267efb46ef6.roa (raw, json)
Hash identifier:          thiZIHbowvooJWEP9QgZv6xxRinA6DjfAsDsGnhqoVA=
Subject key identifier:   5B:C9:4C:82:0F:DD:93:4E:55:01:AB:FA:D8:21:F1:29:F3:8B:D6:B2
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E96398775FF7FD87F0C869780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c3195ca3-ba9b-373f-af42-8267efb46ef6.roa
Signing time:             Fri 15 Jul 2022 12:00:00 +0000
ROA not before:           Fri 15 Jul 2022 12:00:00 +0000
ROA not after:            Sat 20 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        52.84.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:96:39:87:75:ff:7f:d8:7f:0c:86:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul 15 12:00:00 2022 GMT
            Not After : Aug 20 04:00:00 2022 GMT
        Subject: CN=44cbc67d-ce3b-48f8-8006-bfdc878f0d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c2:d0:5a:5e:c1:7f:f8:d9:50:37:69:31:90:
                    ab:2a:6e:fe:d5:c9:45:b6:fc:10:59:b5:55:ce:79:
                    80:06:42:cb:f2:25:35:a0:9f:a0:9b:55:53:43:d7:
                    1e:9a:41:24:2a:94:24:95:f4:aa:2a:13:60:fb:12:
                    af:23:c8:64:53:60:8e:0f:75:ff:ee:11:9e:35:d5:
                    20:30:d3:9d:dc:41:0a:50:49:b0:f3:02:56:c5:53:
                    3e:b0:23:d1:73:71:fb:ee:a3:76:45:42:f2:24:c8:
                    7e:4b:8f:e1:17:ef:dd:0f:17:15:21:63:d4:fd:1e:
                    0c:47:f3:5f:49:c3:1e:6c:7b:30:13:e9:ae:0c:24:
                    03:81:20:65:a0:c0:d1:a3:e2:44:ee:f3:5c:32:71:
                    0d:c3:4d:15:8e:da:f9:54:cf:9c:92:ea:15:8b:81:
                    01:2c:66:ec:2f:47:62:c6:94:19:29:68:8b:3e:91:
                    cd:2d:fc:db:b0:10:c6:77:04:28:56:48:c0:9c:80:
                    3f:47:fe:85:6a:91:cd:c0:81:c3:6e:57:c3:7f:cf:
                    72:6b:55:d2:20:38:72:96:37:4c:10:31:16:08:da:
                    14:24:f5:f6:aa:6c:13:ec:ce:50:48:12:8d:a1:16:
                    bc:09:3a:8f:56:98:76:b1:b7:d0:9b:da:73:d2:2d:
                    6e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C9:4C:82:0F:DD:93:4E:55:01:AB:FA:D8:21:F1:29:F3:8B:D6:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c3195ca3-ba9b-373f-af42-8267efb46ef6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.84.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:31:8d:e1:16:0c:48:d9:31:a3:be:d3:f2:d3:82:68:cd:72:
         a2:00:8d:a2:85:78:13:fe:6d:7c:f3:9f:e7:1b:bb:c7:96:40:
         d9:d5:3b:41:bb:61:67:de:51:d2:c4:6c:65:8f:1b:e8:b3:16:
         b8:12:35:16:58:c3:57:60:d2:c7:32:72:09:ff:a8:67:ea:36:
         0c:0a:36:61:09:b3:c2:09:29:31:95:50:01:54:7a:c8:0b:fa:
         c2:c5:fa:ff:ca:a6:31:51:68:38:65:3f:f8:4d:0c:05:15:0d:
         91:b2:a9:06:7b:65:ca:64:cc:8e:e6:3c:97:5a:1e:97:4d:7e:
         86:0d:37:ff:fa:85:d7:65:ea:c6:1a:53:75:8b:f7:42:20:7d:
         e4:fe:51:d7:46:f4:e8:81:d4:7d:bc:e4:14:d1:76:c5:02:1a:
         d1:5f:04:5e:aa:91:a2:b9:33:57:12:b2:81:2b:dd:48:8f:36:
         65:94:4c:c8:0a:45:0e:e6:9f:c7:ea:92:65:2b:6f:ce:9e:82:
         cd:56:4c:9f:d7:04:da:38:30:a6:c1:12:d8:fe:2c:09:4a:54:
         4a:f4:82:bb:61:c8:1d:e4:de:de:8b:ce:42:e6:d2:f3:25:d9:
         e9:93:a1:56:ce:39:ec:35:18:7a:69:d7:a6:52:0f:3d:18:6a:
         f5:30:9d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:50:09 2025 by rpki-client