Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c9612a15-5795-3e08-99ee-370be1223b74.roa
File:                     c9612a15-5795-3e08-99ee-370be1223b74.roa (raw, json)
Hash identifier:          cN/FR7Iig2h24fksG/jQg25bMsv912DSXHB3DP078Ao=
Subject key identifier:   95:4A:62:64:41:4B:EC:D2:A6:85:4C:61:3A:04:7D:0C:AA:95:6D:8D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C446EDA5
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c9612a15-5795-3e08-99ee-370be1223b74.roa
Signing time:             Wed 19 Dec 2018 02:24:01 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.92.54.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:46:ed:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=1a2c6f22-2319-45a2-baaf-3c57d8185870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:31:06:81:59:bd:73:9f:d2:89:ee:46:50:76:
                    0f:ec:13:46:56:8c:3c:51:50:45:ce:88:89:0e:50:
                    32:cb:32:39:f8:fa:99:32:5c:e9:7b:a8:4f:95:ce:
                    59:6e:6e:0a:17:bd:0c:ac:15:d6:ba:fa:f8:79:7d:
                    7e:79:3d:29:94:0a:9e:5b:b9:bb:27:87:ae:08:e0:
                    1e:69:4c:aa:08:ab:89:3e:ba:46:68:8e:13:44:d5:
                    28:2b:38:96:8f:48:57:12:c2:17:be:b0:97:33:8f:
                    5c:ba:43:7a:7b:19:8f:05:a5:87:90:b3:99:67:63:
                    d5:96:81:37:5f:34:1d:34:54:c0:e7:5c:4f:9d:90:
                    b0:12:ef:1e:36:83:ad:3e:0c:aa:2e:99:2a:f4:f8:
                    40:3f:ae:f8:b9:f2:3e:75:29:06:d6:29:ac:e4:22:
                    cf:00:0d:b3:3b:79:52:78:fb:a9:1c:29:12:2c:e1:
                    54:1b:67:72:63:45:64:a5:3c:4f:df:40:52:a4:07:
                    d3:7b:38:be:1a:c6:fc:6c:c8:ec:4e:20:7b:27:d1:
                    d0:db:20:2f:c5:8a:6e:3a:e1:03:8b:76:87:10:e3:
                    f5:0d:bc:03:43:80:8d:79:d1:dc:7c:6a:5f:6d:19:
                    47:32:1f:69:15:8d:d7:cb:04:8a:37:aa:8e:33:85:
                    01:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4A:62:64:41:4B:EC:D2:A6:85:4C:61:3A:04:7D:0C:AA:95:6D:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c9612a15-5795-3e08-99ee-370be1223b74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.92.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:f0:9a:e6:97:25:21:84:5c:1f:b8:23:6c:ea:b7:52:93:63:
         ae:56:db:75:d8:2b:4d:c1:34:cf:d2:38:30:a4:08:c4:62:b0:
         cd:53:6c:1f:7d:dc:ee:61:ac:e1:ee:ba:1f:ed:86:ef:ad:fb:
         d7:a7:03:8e:74:97:30:12:4a:f0:81:8c:37:8b:66:f9:2b:e7:
         1a:57:8f:c9:0d:84:5a:5d:b2:49:3a:b6:3a:e6:3b:aa:5f:53:
         4b:24:f6:7f:4c:ac:0f:86:ac:0f:3b:4e:54:38:96:4c:4b:87:
         42:11:11:89:0f:fa:48:78:05:5f:08:4f:bd:b4:09:ce:74:cf:
         92:44:41:b0:26:d5:0a:17:99:36:29:77:fa:64:db:d5:31:eb:
         6f:89:ef:d9:6d:c0:53:d4:d7:3e:4e:61:34:55:90:10:ed:d6:
         d1:87:6d:46:24:b7:c4:c3:45:e5:8d:3f:9c:00:4e:14:f5:bb:
         fb:54:a8:97:83:0b:d8:e1:06:14:76:4e:73:2d:16:c9:ff:d5:
         ee:ae:13:19:8c:15:4d:8a:ca:bc:52:bb:d9:d7:52:69:5e:8b:
         0f:46:e1:29:d4:8c:1f:5c:68:42:0b:13:ac:f1:04:3d:2c:93:
         6f:e4:7f:29:26:ff:e7:72:69:18:c2:5d:67:ab:1d:42:77:8f:
         98:8c:2c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:44:17 2025 by rpki-client