Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d856b24d-81b7-3cb9-a74e-bc9987f8f4df.roa
File:                     d856b24d-81b7-3cb9-a74e-bc9987f8f4df.roa (raw, json)
Hash identifier:          ZjCGUUjU048qY3mPOdDyoGSfnv02rKjJtsblror8I00=
Subject key identifier:   64:4A:40:3E:A3:12:01:18:20:B0:AB:57:08:03:B6:17:52:3A:EB:79
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C4A77D71
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d856b24d-81b7-3cb9-a74e-bc9987f8f4df.roa
Signing time:             Wed 19 Dec 2018 04:09:30 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.231.172.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:a7:7d:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=420df6d2-c2b0-4917-8e46-4eff320029a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7e:15:b2:1f:93:5d:e5:c3:d2:c4:6c:09:3b:
                    22:e5:e8:cb:8a:fe:6f:eb:13:1f:38:51:26:2b:ce:
                    e5:73:1d:ac:99:de:b0:bb:e5:db:58:ad:d4:8f:30:
                    2c:15:75:67:5a:05:e1:14:f1:53:ab:56:72:d4:f0:
                    2b:a1:69:77:2a:31:96:78:0e:a0:74:c7:44:62:94:
                    05:65:23:fb:13:5d:75:14:a2:d0:76:23:80:1f:64:
                    56:89:37:15:c9:1e:a4:d8:7b:1a:1c:8e:3b:c9:1e:
                    45:b7:b9:5a:42:d1:1e:8f:e8:41:22:64:73:7a:00:
                    7e:67:7c:85:4b:61:b0:ef:e8:55:3f:69:2a:f4:67:
                    fd:ed:f1:3b:e9:dc:36:71:97:f2:bc:6c:f0:9b:eb:
                    eb:97:d7:ff:2a:09:85:a6:7d:ea:71:5a:29:2b:0f:
                    cc:4b:99:2f:b9:8f:a6:b1:d8:8f:28:5e:63:bb:7a:
                    a2:e1:ef:54:55:72:47:9c:6c:ad:78:e7:12:26:57:
                    84:ff:e2:cb:e6:f2:8a:d7:c8:4b:28:13:a2:03:a9:
                    97:a3:a0:de:11:50:7e:90:83:8b:29:30:f4:60:13:
                    53:5d:fa:83:29:33:f2:2a:0e:fb:e2:b8:64:5a:1c:
                    50:27:d6:80:1b:9a:47:39:4b:ec:e6:a0:99:a2:47:
                    1d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:4A:40:3E:A3:12:01:18:20:B0:AB:57:08:03:B6:17:52:3A:EB:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d856b24d-81b7-3cb9-a74e-bc9987f8f4df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.231.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:5f:ba:5a:28:42:4c:7f:11:ee:a5:78:6b:96:32:ba:77:c9:
         e8:57:5e:59:d7:3b:02:e5:1f:45:ea:8b:f3:ce:83:18:d8:d6:
         01:cf:da:91:c9:82:f5:9e:f6:5e:03:46:61:bd:4a:89:a3:65:
         38:43:6b:42:b4:b8:b1:54:06:17:55:4f:af:31:1d:2c:c8:90:
         7d:ee:77:65:c9:bb:5f:ce:fd:ff:e4:63:22:a8:db:20:51:08:
         10:8c:75:e0:a6:fc:50:96:f0:17:d8:61:ab:0f:e7:18:fd:f3:
         d8:9a:0a:9a:33:1e:0b:dc:ca:0d:6a:b5:35:8b:d4:cc:ec:4d:
         bd:3b:25:4b:9e:4a:02:7c:df:9b:b0:27:55:eb:a8:fb:95:43:
         80:87:79:a9:6f:0b:07:01:41:36:f7:a7:73:dd:a0:6d:c3:0d:
         63:f8:1a:12:09:01:6d:fe:2a:02:c8:9b:f8:6f:c7:de:ff:02:
         98:66:d6:58:c6:a3:4b:c3:27:8a:a1:11:97:81:10:3c:05:c6:
         df:63:eb:c8:99:0b:77:67:85:c0:93:e6:01:8d:e8:23:c9:a7:
         36:33:e6:cf:84:6b:54:10:e3:34:de:ed:65:98:18:c1:57:5d:
         64:ce:1d:2c:57:fd:db:e1:9a:2a:32:2e:ff:8c:ba:b8:2a:81:
         1e:ea:1c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:02:21 2025 by rpki-client