Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d13afe35-3637-3e2b-aa7c-30eab61fc52d.roa
File:                     d13afe35-3637-3e2b-aa7c-30eab61fc52d.roa (raw, json)
Hash identifier:          C0CnJNaGbcIdSJiILcHyYGVcn4R/E1jX3NnxrAeoQu0=
Subject key identifier:   1E:2E:7D:98:02:64:44:D0:0B:A7:91:0C:3E:88:B4:75:F0:B3:01:3F
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C4485D28
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d13afe35-3637-3e2b-aa7c-30eab61fc52d.roa
Signing time:             Wed 19 Dec 2018 02:25:36 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.218.163.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:48:5d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=cb2b7bc8-ff82-4573-a58c-d75a6f0fccc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:13:7f:87:21:3f:f5:c5:15:bb:9d:cf:ae:e2:
                    36:62:c7:d5:1d:21:1f:3f:fa:fb:a9:60:d6:8a:5c:
                    d7:fa:0d:f9:93:16:74:2d:5f:5f:10:27:19:6d:12:
                    a1:30:9f:78:11:1f:cd:99:80:8c:af:ab:02:05:3a:
                    33:f1:a4:ec:cc:a9:cb:78:4a:e8:43:4b:c4:eb:c5:
                    f0:ca:21:e6:b5:74:0a:2c:17:8c:78:ff:ea:e0:5f:
                    e6:8f:4a:36:96:e0:dd:8d:d3:f8:57:d3:ad:6a:b5:
                    50:ac:e2:10:ec:79:70:25:94:b8:33:4e:56:83:4a:
                    1d:42:b5:9c:86:e4:37:10:12:2b:7e:8e:1f:74:fc:
                    7a:f0:89:0a:97:4f:50:42:91:dc:a6:58:5e:c5:ea:
                    a1:90:2d:eb:97:8c:c7:69:89:48:75:76:40:73:30:
                    3a:ec:f3:b7:e4:8a:34:1b:b7:39:1a:a7:e2:02:e5:
                    f8:5d:30:11:36:89:b2:7e:dd:f9:38:19:4a:6c:69:
                    92:94:54:0f:5f:a5:4d:db:e5:45:f8:94:39:35:e9:
                    c4:d5:af:9b:24:bc:00:fb:6e:83:ac:4b:d6:a7:8e:
                    6d:9e:ae:2b:7e:9f:47:62:51:1c:22:92:1c:6d:27:
                    5b:69:89:c4:dc:cf:28:7e:d2:a6:85:6b:9e:04:c7:
                    e2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2E:7D:98:02:64:44:D0:0B:A7:91:0C:3E:88:B4:75:F0:B3:01:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d13afe35-3637-3e2b-aa7c-30eab61fc52d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.218.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:39:8e:58:b0:1b:4e:a6:0c:4d:b2:b5:b9:51:6a:75:fb:46:
         27:4b:a3:cb:b5:08:59:5c:d3:1d:45:36:14:ca:8e:83:7d:7d:
         74:e4:ab:bf:21:53:6f:30:61:17:7f:55:c4:cc:7b:8b:89:3c:
         70:60:8d:4e:bf:fa:89:2d:c6:19:ae:4c:5d:e9:38:3a:b8:e7:
         62:fc:a5:02:a9:47:eb:04:b3:2b:af:fc:30:ff:ae:28:c0:bf:
         d4:1a:e5:95:76:ab:e8:f0:e1:bf:44:87:5a:99:66:b1:6a:69:
         30:d5:65:8a:83:2c:9b:e7:59:14:80:e8:b8:f8:03:0f:44:6d:
         64:a0:37:cf:81:ac:ef:39:f5:d1:81:fa:0d:ec:88:64:fd:6b:
         ee:a6:d0:48:0d:2a:02:45:32:a8:ac:a9:ec:f1:fc:e2:cd:a3:
         da:59:93:ec:8a:0f:f6:95:a6:13:4e:5f:9e:cb:8e:c3:ac:19:
         cb:62:c2:3b:d4:2d:a7:82:9b:d7:6e:52:0b:57:d5:68:53:76:
         6e:69:dc:6d:1a:a9:5b:61:2e:ce:6a:e1:a5:83:0f:2b:48:7e:
         5d:a2:9a:1e:d1:7f:ce:b8:27:64:16:f7:6f:a8:54:3f:4a:22:
         53:51:4b:dc:8e:85:0e:76:18:d4:8a:d6:30:e5:4b:52:a6:0d:
         82:16:d1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:38:39 2025 by rpki-client