Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c540894d-2dd3-3b73-835d-c99d2f5425ca.roa
File:                     c540894d-2dd3-3b73-835d-c99d2f5425ca.roa (raw, json)
Hash identifier:          K75xjfxflRDvj0PzsKf7RrBxuhr6pG9aO++R2ChM0DY=
Subject key identifier:   85:B1:B0:73:51:07:04:8D:B7:D3:F1:87:6F:10:71:7A:51:DC:E2:17
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C4A6E376
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c540894d-2dd3-3b73-835d-c99d2f5425ca.roa
Signing time:             Wed 19 Dec 2018 04:08:50 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.219.39.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:a6:e3:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=2558ca68-4827-4750-8f87-9b6c2bd746b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:09:06:6f:9c:a8:7a:e3:50:67:9e:91:91:0f:
                    3c:3a:3c:ac:51:0a:81:f9:bd:b8:39:34:d2:f4:07:
                    f2:f2:d1:a8:19:b1:82:c3:2e:77:1b:f4:8e:a2:f9:
                    b8:ec:89:2b:d3:d2:2b:d3:81:95:a5:fa:e6:d0:e8:
                    c5:2e:f4:0d:57:3d:e3:92:86:49:61:cd:63:b9:ae:
                    52:85:84:a1:29:a4:a6:29:71:77:60:b6:12:00:49:
                    e6:7b:e0:b2:f2:63:9d:e2:16:47:09:fe:35:16:36:
                    b2:c2:22:f5:08:bc:73:5a:ea:31:bf:f2:f9:ca:63:
                    74:cb:c1:ed:bb:8c:72:c6:ab:83:2f:a8:f1:14:f2:
                    8f:61:66:b4:65:65:d3:0c:96:32:fa:0f:e9:e1:e2:
                    23:a4:71:e6:82:1f:1b:60:60:8b:19:93:01:09:70:
                    77:6d:a3:98:5a:e0:46:b0:1d:6f:5b:73:0e:e6:0a:
                    f3:e4:d0:2e:04:2a:40:01:1a:19:0b:42:15:96:a2:
                    46:9b:73:9c:81:f5:55:fe:00:f5:18:37:b2:8c:60:
                    6f:4c:77:f0:1d:7e:13:12:35:c5:d6:c4:fe:4c:96:
                    dd:01:5b:26:d3:41:ae:13:8b:f2:dc:af:15:9d:55:
                    86:9b:b7:14:5f:b7:72:9e:87:8c:26:90:56:67:c4:
                    ca:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B1:B0:73:51:07:04:8D:B7:D3:F1:87:6F:10:71:7A:51:DC:E2:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c540894d-2dd3-3b73-835d-c99d2f5425ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.219.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:37:a0:7a:d1:f8:9e:1a:16:ab:83:ae:b1:65:33:b9:40:75:
         26:86:6e:2f:e8:45:11:fc:5d:98:61:74:63:b6:43:87:53:58:
         af:b2:eb:f1:08:07:ad:61:ac:9a:f5:0e:4b:6e:27:25:dc:0f:
         e4:a7:74:87:fa:84:1f:a6:af:d3:8e:ca:de:c6:09:fa:15:08:
         ae:a9:83:bb:d3:fd:d1:11:07:03:11:c2:20:51:88:6c:c1:d6:
         7e:ec:29:4d:44:da:81:f2:9e:c2:df:6a:a1:a9:e5:48:9e:b3:
         a0:ca:0e:72:a0:84:de:db:4f:27:03:97:35:e5:3e:98:b2:9c:
         ac:e2:92:ea:d1:06:a6:47:90:b8:86:bf:0f:da:87:bb:a7:a0:
         31:09:2d:7d:2a:32:27:c0:40:99:b1:2d:4f:0c:58:f8:9c:f9:
         9a:28:33:26:49:ac:ef:b2:05:f9:de:39:51:7d:a4:10:9b:f9:
         a7:15:b1:74:31:bf:4f:5a:59:a7:e9:84:c2:91:30:07:f2:7f:
         56:1a:1d:84:85:d1:71:64:70:28:5c:5c:4e:e7:31:a3:23:d5:
         a8:ba:7d:04:6b:67:44:98:a6:78:16:fa:b9:2d:92:d4:7e:65:
         23:7c:9c:51:a1:37:17:66:75:9c:62:0a:60:1b:4f:dc:5d:cf:
         53:10:1e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:13:28 2025 by rpki-client