Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c801afae-d0c8-33e1-af90-9e23a53f6dde.roa
File:                     c801afae-d0c8-33e1-af90-9e23a53f6dde.roa (raw, json)
Hash identifier:          WvyERURgEDZExSExR7kTelTdpUNZE5hIYl41U8921lA=
Subject key identifier:   D0:20:56:39:B5:F0:11:76:6C:E3:7D:A4:61:59:15:FD:03:39:2D:AF
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FD1842E74E76AD0BCC8205BE0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c801afae-d0c8-33e1-af90-9e23a53f6dde.roa
Signing time:             Sat 05 Nov 2022 12:00:00 +0000
ROA not before:           Sat 05 Nov 2022 12:00:00 +0000
ROA not after:            Sun 11 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        54.192.0.0/12 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:d1:84:2e:74:e7:6a:d0:bc:c8:20:5b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov  5 12:00:00 2022 GMT
            Not After : Dec 11 05:00:00 2022 GMT
        Subject: CN=d2b6e766-b9f9-44af-9eac-35db32e7c958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ef:9e:89:98:41:e2:96:71:bb:bb:a5:91:07:
                    fd:ee:ca:40:be:2a:03:98:37:39:8a:fe:f8:22:9a:
                    7f:44:06:c1:e5:1f:da:97:48:8e:a1:76:70:46:9f:
                    8a:0a:af:7b:59:c9:a9:1c:f2:57:25:18:67:e5:60:
                    ac:23:6e:a6:b9:2a:bb:2c:02:18:ad:e2:48:2e:d0:
                    58:9a:fb:b8:02:d3:2f:ca:80:55:e0:91:3d:50:d7:
                    bd:98:72:dc:4c:2f:a2:9b:6b:ea:d4:23:98:b9:c5:
                    b4:30:ac:cf:13:0c:d3:ea:0f:cf:e6:2f:a5:b8:86:
                    c9:40:ab:5e:a6:0a:bb:61:43:ae:6a:37:53:09:65:
                    1f:a5:6b:71:66:7f:05:f2:a1:2c:62:f7:fc:3a:69:
                    98:72:bb:f9:f6:9e:e7:91:b4:d8:f3:a6:67:56:a0:
                    5d:c1:98:ee:e0:32:09:df:e8:52:42:31:75:22:1c:
                    2e:1a:7a:f5:24:d2:b9:7b:c9:38:ff:16:52:e9:8e:
                    cc:d9:c8:a6:dc:25:9a:98:04:7c:6d:80:1e:27:53:
                    70:2f:80:f3:d8:68:32:1f:91:c4:d2:56:70:52:32:
                    09:e2:dc:39:fa:d3:5b:9f:e6:78:4b:cd:37:73:f0:
                    59:20:e3:d2:3b:6d:13:44:54:60:b7:a2:c6:29:33:
                    24:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:20:56:39:B5:F0:11:76:6C:E3:7D:A4:61:59:15:FD:03:39:2D:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c801afae-d0c8-33e1-af90-9e23a53f6dde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.192.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:65:7a:e1:8a:56:e4:6e:0a:e3:33:c7:ee:2d:b2:ad:97:82:
         0e:37:c0:1b:1b:17:d2:02:ec:b0:46:ce:0d:67:5f:95:de:2b:
         ff:f9:0b:c4:e2:28:48:d2:14:00:f0:22:4a:71:05:12:a1:f0:
         02:7a:9e:f1:d8:8a:fc:4b:f2:c0:f8:d1:29:0f:4e:3f:66:a4:
         47:af:37:37:ae:c5:c4:49:ca:6e:64:72:58:10:cb:9e:31:57:
         0c:0e:c7:39:a6:e4:88:4e:fe:90:56:ec:f4:c0:6d:68:6f:0f:
         91:32:7f:67:6b:a1:3a:01:d0:0e:15:05:a0:56:b8:cf:cb:42:
         36:62:79:4b:ed:64:b2:4d:6d:89:3b:c0:19:91:48:ea:9a:39:
         ee:3c:de:cb:38:89:8e:40:22:8a:3a:55:80:4c:d0:35:cf:c7:
         51:76:ec:eb:a4:e9:36:01:cd:47:56:73:23:91:1f:3c:14:82:
         9d:d6:d3:73:c4:dc:b7:c0:b3:f4:f4:8e:86:65:e2:4f:a2:82:
         b1:01:57:66:e4:07:42:24:6b:0c:b7:37:35:0a:ea:78:94:61:
         b8:70:42:01:dc:c9:fa:72:3c:78:a3:43:f1:db:d1:df:50:94:
         e4:99:4f:a2:b5:60:36:8c:35:d5:54:b3:14:62:ee:4b:cd:cc:
         76:91:ef:b7
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/RhC5052rQvMggW+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTEwNTEyMDAwMFoXDTIyMTIxMTA1MDAwMFowLzEtMCsGA1UEAxMk
ZDJiNmU3NjYtYjlmOS00NGFmLTllYWMtMzVkYjMyZTdjOTU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiu+eiZhB4pZxu7ulkQf97spAvioDmDc5iv74
Ipp/RAbB5R/al0iOoXZwRp+KCq97WcmpHPJXJRhn5WCsI26muSq7LAIYreJILtBY
mvu4AtMvyoBV4JE9UNe9mHLcTC+im2vq1COYucW0MKzPEwzT6g/P5i+luIbJQKte
pgq7YUOuajdTCWUfpWtxZn8F8qEsYvf8OmmYcrv59p7nkbTY86ZnVqBdwZju4DIJ
3+hSQjF1IhwuGnr1JNK5e8k4/xZS6Y7M2cim3CWamAR8bYAeJ1NwL4Dz2GgyH5HE
0lZwUjIJ4tw5+tNbn+Z4S803c/BZIOPSO20TRFRgt6LGKTMkTQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNAgVjm18BF2bON9pGFZFf0DOS2vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYzgwMWFmYWUtZDBjOC0z
M2UxLWFmOTAtOWUyM2E1M2Y2ZGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMENsAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAd2V64YpW5G4K4zPH7i2yrZeCDjfAGxsX0gLssEbODWdfld4r//kLxOIo
SNIUAPAiSnEFEqHwAnqe8diK/EvywPjRKQ9OP2akR683N67FxEnKbmRyWBDLnjFX
DA7HOabkiE7+kFbs9MBtaG8PkTJ/Z2uhOgHQDhUFoFa4z8tCNmJ5S+1ksk1tiTvA
GZFI6po57jzeyziJjkAiijpVgEzQNc/HUXbs66TpNgHNR1ZzI5EfPBSCndbTc8Tc
t8Cz9PSOhmXiT6KCsQFXZuQHQiRrDLc3NQrqeJRhuHBCAdzJ+nI8eKND8dvR31CU
5JlPorVgNow11VSzFGLuS83MdpHvtw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:24:19 2025 by rpki-client