Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c8a84e5e-f3d5-3a0c-9bf4-419bae8352d0.roa
File:                     c8a84e5e-f3d5-3a0c-9bf4-419bae8352d0.roa (raw, json)
Hash identifier:          o3WtZl4/sB0YXFXh4wrpmVraDw9FPVFZOtoi/TGMkuY=
Subject key identifier:   F2:31:DE:6F:3A:E6:46:6B:DA:F8:21:26:EE:75:E6:F9:FC:59:BC:C6
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583CBD85A8294DAD7A6D69B17D80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c8a84e5e-f3d5-3a0c-9bf4-419bae8352d0.roa
Signing time:             Fri 28 Jan 2022 05:00:00 +0000
ROA not before:           Fri 28 Jan 2022 05:00:00 +0000
ROA not after:            Fri 04 Mar 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        52.208.0.0/13 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:bd:85:a8:29:4d:ad:7a:6d:69:b1:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 28 05:00:00 2022 GMT
            Not After : Mar  4 05:00:00 2022 GMT
        Subject: CN=967528e2-5050-4ada-a2d6-83c2d359367c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:da:ff:a0:80:87:59:e8:88:6a:bb:a9:63:ba:
                    c3:92:ed:17:a4:e5:6b:f0:9e:38:a7:f2:6b:72:91:
                    10:3c:89:92:b5:c4:db:c6:99:68:7a:fa:17:b8:8a:
                    5e:ab:35:fd:63:b9:8b:f5:1c:99:3c:b2:da:7b:67:
                    6a:fc:34:95:31:59:14:a3:05:cf:e7:15:8f:e1:81:
                    b2:aa:3a:0d:81:50:4b:1e:e2:2b:1f:8a:36:ce:c3:
                    c9:a9:30:45:d3:24:3e:a1:2b:f6:e8:5e:9c:eb:85:
                    90:f9:0c:e8:e9:d9:d2:ac:c8:de:86:0d:62:4a:89:
                    c2:34:89:e5:a0:79:bb:9f:1d:8a:73:94:10:1c:d0:
                    f3:39:d0:0a:cd:6a:c9:b9:cc:cc:b2:70:cd:81:ba:
                    67:ec:9f:4c:fb:70:f1:57:93:3d:a3:a0:ef:fd:b3:
                    20:aa:1c:49:6e:81:34:5b:b1:eb:d8:f8:61:7c:26:
                    8a:9b:9f:98:e2:35:19:a1:ae:f4:0d:87:34:8d:d3:
                    3c:87:44:b5:bd:6c:d7:24:5a:86:91:d2:46:33:c6:
                    13:45:88:c4:94:06:ee:d5:fe:6d:08:e4:98:dd:6e:
                    05:ca:dc:10:6e:d3:cc:14:28:34:91:3e:34:b2:b5:
                    62:c9:2c:99:c0:18:dc:74:1a:45:9b:86:bd:6b:1e:
                    c4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:31:DE:6F:3A:E6:46:6B:DA:F8:21:26:EE:75:E6:F9:FC:59:BC:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c8a84e5e-f3d5-3a0c-9bf4-419bae8352d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.208.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:d4:61:32:9c:ba:8b:e2:a1:32:09:cb:fa:f6:0d:50:f3:6c:
         1a:1e:8c:af:58:4d:0d:19:0e:97:d8:17:ad:81:15:2c:95:65:
         6e:20:8b:9f:df:dd:df:a4:fb:fd:33:a0:36:65:15:1d:d8:49:
         fa:a4:ed:4f:52:16:12:e4:a6:17:32:fb:cd:89:b8:40:e6:a4:
         d1:63:8f:11:5d:59:c2:bd:8b:f8:74:bb:d1:11:8d:ac:30:0b:
         67:3d:e9:65:8e:31:c0:8c:81:be:ff:b5:ab:aa:4c:4b:99:1b:
         77:00:d5:d6:e6:b0:1a:e1:00:bc:4c:83:56:fd:82:be:97:bf:
         34:4e:31:6d:71:dc:4e:fe:d0:9b:0e:ee:dc:ae:d5:ba:b6:72:
         99:a4:82:8f:14:63:4e:48:d7:9f:db:8d:c8:38:fe:cf:16:82:
         91:b1:91:bd:8e:f4:a0:d6:b2:b5:69:c9:a3:f5:ee:3a:9f:a2:
         f8:18:62:01:18:c2:9d:0e:b7:d1:b2:d3:03:88:2e:94:78:22:
         98:4e:c8:c5:c7:6f:d3:7e:d6:2e:42:f9:1d:59:b9:5b:d9:11:
         13:0e:eb:bf:5c:41:36:94:03:5c:74:6d:eb:05:29:30:81:0b:
         19:71:b0:2c:7f:37:6c:ee:2c:f8:81:10:7d:da:04:af:9f:76:
         41:f1:69:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:05:35 2025 by rpki-client