Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/da5e868f-f424-383b-9135-30c2d9181e59.roa
File:                     da5e868f-f424-383b-9135-30c2d9181e59.roa (raw, json)
Hash identifier:          2UVmZdWrfx5sFToasETBiGf95jaCFAFuHAp0HYmXbjg=
Subject key identifier:   C1:BE:4B:9D:0A:67:AB:45:42:2C:2E:46:BF:72:F3:29:DC:88:AE:CF
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F32BC79EECAEF4D3A9F284EC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/da5e868f-f424-383b-9135-30c2d9181e59.roa
Signing time:             Fri 09 Sep 2022 12:00:00 +0000
ROA not before:           Fri 09 Sep 2022 12:00:00 +0000
ROA not after:            Sat 15 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        52.0.0.0/11 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:32:bc:79:ee:ca:ef:4d:3a:9f:28:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep  9 12:00:00 2022 GMT
            Not After : Oct 15 04:00:00 2022 GMT
        Subject: CN=e8e09444-7342-429f-bdda-8719dd132419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2a:1c:31:51:98:a0:46:39:00:3a:5e:e3:0f:
                    de:4b:2d:99:68:75:55:c4:e4:bc:d4:5c:b8:f2:d1:
                    48:52:76:df:c4:aa:2e:6a:ca:c6:81:8c:ac:cb:5d:
                    0d:29:d8:c6:cb:9a:1d:41:3d:12:ed:b2:5b:91:c5:
                    4e:b6:0c:61:ae:3e:17:d0:36:2c:5e:54:01:57:3b:
                    c6:98:8a:01:ca:db:2e:11:39:ba:90:da:5b:73:25:
                    b8:2e:c5:a5:57:26:61:7e:bc:b6:57:c3:0e:ac:d5:
                    b8:54:20:b7:74:1d:fc:43:dc:13:87:90:84:f4:d4:
                    94:66:26:97:a0:87:6c:c6:90:51:22:87:eb:bb:8c:
                    9a:c9:3e:d6:47:cd:e8:f3:c0:d0:b3:c0:56:0c:e2:
                    23:df:b6:b8:f3:bf:f4:3a:17:07:85:4e:36:8d:5b:
                    3c:11:61:c2:6d:ac:be:2c:ea:ba:70:92:7f:98:28:
                    05:40:5d:d3:e6:ee:eb:22:85:88:03:2a:ce:b1:da:
                    85:9d:d5:87:0a:d2:3d:8f:91:c5:0c:1f:67:04:0d:
                    c8:d4:03:c9:c6:18:c2:f1:a6:81:d9:aa:3e:49:18:
                    df:5c:42:c6:c6:dd:44:b4:76:f8:0a:76:94:83:87:
                    5a:29:44:40:e9:52:72:a5:78:23:f9:a8:42:23:67:
                    46:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:BE:4B:9D:0A:67:AB:45:42:2C:2E:46:BF:72:F3:29:DC:88:AE:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/da5e868f-f424-383b-9135-30c2d9181e59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.0.0.0/11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:67:d0:bc:24:9c:dd:d8:6d:4e:05:11:ec:a3:73:b0:d6:b3:
         c1:65:90:8d:34:54:45:51:34:b6:05:64:da:0c:46:1b:72:0d:
         60:09:dd:5f:7d:a7:2c:9e:47:27:b8:c9:f2:64:09:75:b0:7a:
         0b:4d:3b:54:38:5b:c5:31:b2:2f:16:06:37:f0:ce:84:90:ac:
         02:94:63:3a:cc:db:3a:20:43:42:48:52:53:63:6a:a9:1e:d5:
         e8:8d:47:c1:d5:0d:64:44:04:03:66:2a:b5:ab:88:cf:78:e8:
         06:d2:a7:35:72:12:85:f9:b0:72:0c:4c:22:77:29:49:a5:4d:
         64:08:0e:ff:8b:dd:ad:24:de:14:d2:aa:32:90:83:42:10:18:
         81:e1:16:45:01:23:67:dc:02:22:c4:10:35:69:10:ca:b0:61:
         f0:b5:9b:9b:33:04:6a:1a:76:8a:43:9e:12:bd:51:eb:18:54:
         cb:c6:63:eb:bd:9e:8c:28:41:be:11:cc:72:27:3b:5c:e3:aa:
         f6:ff:99:ec:d8:b5:d3:39:29:2d:a4:15:a0:02:f4:68:45:52:
         3c:35:f6:3d:29:63:10:b7:ad:74:db:10:63:87:71:c6:50:c1:
         4e:40:a0:cb:c4:b9:01:29:80:56:03:16:23:dd:bc:ff:c2:62:
         43:c6:19:d9
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD8yvHnuyu9NOp8oTsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDkwOTEyMDAwMFoXDTIyMTAxNTA0MDAwMFowLzEtMCsGA1UEAxMk
ZThlMDk0NDQtNzM0Mi00MjlmLWJkZGEtODcxOWRkMTMyNDE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiocMVGYoEY5ADpe4w/eSy2ZaHVVxOS81Fy4
8tFIUnbfxKouasrGgYysy10NKdjGy5odQT0S7bJbkcVOtgxhrj4X0DYsXlQBVzvG
mIoBytsuETm6kNpbcyW4LsWlVyZhfry2V8MOrNW4VCC3dB38Q9wTh5CE9NSUZiaX
oIdsxpBRIofru4yayT7WR83o88DQs8BWDOIj37a487/0OhcHhU42jVs8EWHCbay+
LOq6cJJ/mCgFQF3T5u7rIoWIAyrOsdqFndWHCtI9j5HFDB9nBA3I1APJxhjC8aaB
2ao+SRjfXELGxt1EtHb4CnaUg4daKURA6VJypXgj+ahCI2dGVwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMG+S50KZ6tFQiwuRr9y8ynciK7PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZGE1ZTg2OGYtZjQyNC0z
ODNiLTkxMzUtMzBjMmQ5MTgxZTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMFNAAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAVmfQvCSc3dhtTgUR7KNzsNazwWWQjTRURVE0tgVk2gxGG3INYAndX32n
LJ5HJ7jJ8mQJdbB6C007VDhbxTGyLxYGN/DOhJCsApRjOszbOiBDQkhSU2NqqR7V
6I1HwdUNZEQEA2YqtauIz3joBtKnNXIShfmwcgxMIncpSaVNZAgO/4vdrSTeFNKq
MpCDQhAYgeEWRQEjZ9wCIsQQNWkQyrBh8LWbmzMEahp2ikOeEr1R6xhUy8Zj672e
jChBvhHMcic7XOOq9v+Z7Ni10zkpLaQVoAL0aEVSPDX2PSljELetdNsQY4dxxlDB
TkCgy8S5ASmAVgMWI928/8JiQ8YZ2Q==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:48:21 2025 by rpki-client