Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ea2ae543-7141-3ac3-8ed9-71f5862ccf0e.roa
File:                     ea2ae543-7141-3ac3-8ed9-71f5862ccf0e.roa (raw, json)
Hash identifier:          0l//P8EoNiCGtfc8E5JFW1sSRb0uRrao9JRNytPrQ5Q=
Subject key identifier:   19:58:7B:B7:4B:38:AE:94:F8:93:7D:4A:94:FB:50:F3:28:E5:3F:63
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C50AC831
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ea2ae543-7141-3ac3-8ed9-71f5862ccf0e.roa
Signing time:             Wed 19 Dec 2018 05:57:57 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     38895
IP address blocks:        52.219.32.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c5:0a:c8:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=7b4ae212-5ff1-4f0c-af1c-51ecc0d4cba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1c:bf:e8:5b:35:51:f6:5e:74:47:a0:dc:94:
                    91:e3:f2:0f:c3:ba:89:3d:ec:dc:30:14:2b:73:7a:
                    9a:68:3a:26:bd:7b:c2:af:b0:e9:51:58:7b:54:06:
                    65:cd:56:1e:88:ae:5a:6f:61:7d:d1:a6:c7:42:11:
                    01:99:d3:78:72:ed:34:a5:20:c0:ff:df:c4:e3:9e:
                    4f:b6:7a:3c:78:53:3e:89:ad:08:fb:e3:da:c9:88:
                    48:2a:11:e5:87:9d:f6:d5:30:4c:af:b2:38:65:ee:
                    4d:36:6b:ea:9c:59:fd:51:73:cd:4c:ee:e8:72:21:
                    77:ae:a2:29:15:a4:bd:f3:e4:ac:84:0a:10:c6:26:
                    ad:7e:b0:49:92:93:15:57:51:51:a1:9d:3e:9d:bf:
                    5c:b0:e7:a8:97:31:fd:90:0f:07:a4:e0:3e:7d:93:
                    d5:69:3b:31:a8:a8:ef:2f:d6:62:39:a1:b5:98:78:
                    a1:78:89:3b:46:2a:19:19:d2:12:fb:54:fc:7b:13:
                    98:2e:bb:1b:b2:07:8b:84:a9:87:6b:87:61:da:5c:
                    e4:24:62:1a:3f:da:34:16:cf:20:9e:be:61:7e:84:
                    01:4f:a1:99:d7:c2:08:a6:16:d7:aa:c0:e7:b8:28:
                    b3:8f:b4:10:13:92:2a:13:2d:bd:54:0e:e8:d8:08:
                    56:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:58:7B:B7:4B:38:AE:94:F8:93:7D:4A:94:FB:50:F3:28:E5:3F:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ea2ae543-7141-3ac3-8ed9-71f5862ccf0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.219.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:26:2e:42:96:d0:35:5a:02:fe:b5:e1:29:aa:2c:21:d9:86:
         02:bf:92:5c:bc:02:99:cb:1e:ae:bb:3a:37:26:80:bd:de:af:
         5e:80:27:b7:23:28:c3:5a:67:6e:60:9d:22:0c:2f:4d:90:46:
         a3:04:4b:bd:88:28:8e:ad:08:b5:30:8b:68:f9:b9:54:5d:09:
         f5:eb:e0:63:82:64:07:4c:0e:2f:43:74:06:b2:8f:bb:70:87:
         e1:5e:fb:d0:51:8e:9e:bf:e4:7b:47:05:ab:18:60:be:a2:9c:
         aa:5b:b4:84:a0:c3:7a:cc:b3:85:9f:34:16:52:bb:8e:85:38:
         03:9a:cd:dc:35:3d:10:a9:18:99:a5:15:9c:51:bc:71:26:34:
         55:58:73:a7:25:ad:f6:2d:ac:68:55:fe:1f:77:4f:63:9c:69:
         e2:94:e1:94:e8:bc:49:5d:84:31:e7:d7:e0:5c:75:52:68:73:
         0d:60:ef:f1:82:d1:62:05:3b:d4:b6:c0:45:19:96:38:8a:6e:
         aa:b3:60:92:3e:de:fb:19:ec:15:03:f2:68:1b:7c:10:77:19:
         a1:b7:8f:93:18:a2:f2:10:33:74:f9:01:c0:23:e5:d6:1c:a5:
         31:c8:f9:1f:e0:13:34:7c:b1:3b:79:0e:6f:60:c6:b6:da:41:
         a0:4d:66:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:15:12 2025 by rpki-client