Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e188b2ad-8092-37fb-89f9-cfa336b177a8.roa
File:                     e188b2ad-8092-37fb-89f9-cfa336b177a8.roa (raw, json)
Hash identifier:          COeDPy+0O0eRqnhF45u7NRac6SWWKUJf7hwNTGNrnxs=
Subject key identifier:   80:D4:D1:AE:91:34:F5:6D:04:CB:A7:54:9F:07:4E:D0:C9:83:1E:52
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665D253905
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e188b2ad-8092-37fb-89f9-cfa336b177a8.roa
Signing time:             Wed 10 Oct 2018 08:43:32 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     38895
IP address blocks:        54.231.241.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5d:25:39:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=611287ac-c57d-4971-84e9-d8f0f6aeebcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ae:2a:bb:20:6b:60:16:5a:9b:ac:6f:6f:4f:
                    67:b2:48:00:fe:5d:ad:ee:11:47:06:ea:eb:37:a3:
                    62:ec:ed:6f:81:bd:38:dc:df:3d:d1:75:38:2b:6a:
                    69:b9:ef:c9:0f:20:2e:b4:1b:5d:bb:ce:76:3b:4c:
                    32:46:5d:f7:76:06:a8:91:37:32:ac:ff:14:f0:2b:
                    01:23:ba:fc:61:bd:96:7a:a4:cb:06:11:13:65:b5:
                    d3:41:50:a6:37:a1:8f:7c:54:1f:81:e0:71:51:17:
                    0d:30:6c:e7:33:8b:4e:45:0c:2f:f1:d4:f8:e1:08:
                    56:a8:6f:40:22:4c:37:dc:9c:c1:34:a3:79:93:31:
                    02:cf:2d:9e:b2:5f:9f:3a:df:f8:8a:ff:29:50:59:
                    31:6b:48:9c:c9:e9:f6:4e:56:0b:b1:94:42:88:66:
                    0e:49:13:e9:b4:13:ce:5e:10:5e:b2:0d:4b:3b:3d:
                    a7:fa:0d:95:fb:00:87:5e:e6:20:38:c4:f3:e7:fb:
                    72:70:91:08:62:6d:3b:2c:b8:b5:5d:80:15:e9:e8:
                    c7:d2:21:3e:9f:2a:60:cc:7b:b6:54:a2:3f:e3:c9:
                    ee:f8:51:a7:c4:3b:07:06:1f:83:31:83:8d:c1:e4:
                    0c:fa:f2:91:9a:0f:02:b4:1e:0f:2c:00:01:04:5f:
                    fe:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D4:D1:AE:91:34:F5:6D:04:CB:A7:54:9F:07:4E:D0:C9:83:1E:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e188b2ad-8092-37fb-89f9-cfa336b177a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.231.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:2b:3f:d4:81:2f:60:15:0c:4e:9d:82:f8:7f:36:e2:38:e6:
         dd:e9:52:b7:38:c4:26:59:e5:fa:8a:41:a1:cb:e3:ff:5e:15:
         be:5c:a5:44:61:fb:2a:2f:53:68:1a:de:bb:15:b6:c3:60:b1:
         70:54:72:04:85:dd:ed:50:c5:a2:03:4a:92:2c:96:b5:e9:5b:
         65:7b:4d:cf:fd:5e:5a:a9:2d:e1:b4:5c:d5:3c:87:ba:86:4e:
         42:cc:cc:83:5f:4c:23:8f:86:bb:be:4f:f3:b7:53:5b:8a:c0:
         e6:08:44:5b:ee:52:77:91:2b:a2:f5:20:27:81:4b:ae:61:6b:
         c8:a5:b0:50:f2:5a:e9:e2:1d:0d:8f:dc:76:39:14:81:0b:41:
         f6:cd:f0:39:6a:c1:d1:fb:88:0c:9c:bf:0b:a3:2d:61:da:11:
         8c:7a:ca:0c:6a:e0:06:65:a6:f8:77:ba:6b:57:01:7a:62:5e:
         f4:42:12:f5:4e:56:e4:be:38:54:19:40:31:ad:e7:09:78:a3:
         5f:45:60:b0:06:4b:dc:aa:7b:91:2a:75:cd:b9:cd:89:f5:4b:
         61:4b:8e:79:f5:0c:3b:f6:73:b8:c0:eb:9b:24:98:98:86:42:
         b9:c8:bd:9c:4a:b3:87:85:fd:43:e3:62:ee:44:26:6d:39:50:
         55:3c:25:fd
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZl0lOQUwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEwMTAwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJDYx
MTI4N2FjLWM1N2QtNDk3MS04NGU5LWQ4ZjBmNmFlZWJjYjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANSuKrsga2AWWpusb29PZ7JIAP5dre4RRwbq6zej
Yuztb4G9ONzfPdF1OCtqabnvyQ8gLrQbXbvOdjtMMkZd93YGqJE3Mqz/FPArASO6
/GG9lnqkywYRE2W100FQpjehj3xUH4HgcVEXDTBs5zOLTkUML/HU+OEIVqhvQCJM
N9ycwTSjeZMxAs8tnrJfnzrf+Ir/KVBZMWtInMnp9k5WC7GUQohmDkkT6bQTzl4Q
XrINSzs9p/oNlfsAh17mIDjE8+f7cnCRCGJtOyy4tV2AFenox9IhPp8qYMx7tlSi
P+PJ7vhRp8Q7BwYfgzGDjcHkDPrykZoPArQeDywAAQRf/i8CAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSA1NGukTT1bQTLp1SfB07QyYMeUjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjL2UxODhiMmFkLTgwOTItMzdm
Yi04OWY5LWNmYTMzNmIxNzdhOC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADbn8TBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAHSs/1IEvYBUMTp2C+H824jjm3elStzjEJlnl+opBocvj/14VvlylRGH7Ki9T
aBreuxW2w2CxcFRyBIXd7VDFogNKkiyWtelbZXtNz/1eWqkt4bRc1TyHuoZOQszM
g19MI4+Gu75P87dTW4rA5ghEW+5Sd5ErovUgJ4FLrmFryKWwUPJa6eIdDY/cdjkU
gQtB9s3wOWrB0fuIDJy/C6MtYdoRjHrKDGrgBmWm+He6a1cBemJe9EIS9U5W5L44
VBlAMa3nCXijX0VgsAZL3Kp7kSp1zbnNifVLYUuOefUMO/ZzuMDrmySYmIZCuci9
nEqzh4X9Q+Ni7kQmbTlQVTwl/Q==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:04:59 2025 by rpki-client