Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/eaa9ea32-7e14-3a21-a2d5-0a5c2631495d.roa
File:                     eaa9ea32-7e14-3a21-a2d5-0a5c2631495d.roa (raw, json)
Hash identifier:          JZFxLm124DExKwwpLlJh0kO1S3tlUXbMGzpTRFZ/3XU=
Subject key identifier:   95:9F:1A:24:C3:F9:23:44:9C:80:99:BE:F5:C5:4B:E6:C1:04:A8:41
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D0BBF8D5B30A5DCA452262E80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/eaa9ea32-7e14-3a21-a2d5-0a5c2631495d.roa
Signing time:             Fri 25 Feb 2022 05:00:00 +0000
ROA not before:           Fri 25 Feb 2022 05:00:00 +0000
ROA not after:            Fri 01 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        52.208.0.0/13 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0b:bf:8d:5b:30:a5:dc:a4:52:26:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Feb 25 05:00:00 2022 GMT
            Not After : Apr  1 04:00:00 2022 GMT
        Subject: CN=6a59bcfd-9887-444f-8eda-e85625916058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2d:d3:59:c8:34:37:52:de:88:15:af:95:b3:
                    50:8a:fd:9c:a7:b9:09:e8:b4:40:cd:4e:5a:1a:bf:
                    98:51:9b:0f:e6:46:bf:cb:be:79:77:0b:6c:aa:87:
                    f1:95:01:60:80:ea:f6:5b:e9:9d:4d:82:2d:4a:b7:
                    d6:2b:a1:c3:d8:d1:a5:68:73:08:68:e2:fc:9b:4d:
                    8e:bb:d3:80:75:5e:16:f3:42:26:de:5a:81:90:67:
                    37:da:db:1c:cc:91:ff:24:56:6e:ef:60:39:a1:07:
                    c5:b4:19:c5:fc:8b:1f:45:3b:44:c4:88:99:5c:bb:
                    8d:c1:5e:e7:3a:d6:b2:79:02:fd:fb:71:13:97:3c:
                    ba:ad:c6:2d:e1:76:da:f5:9f:f5:9f:a9:14:46:87:
                    e0:4a:15:7f:ea:b6:c9:48:cb:ce:d7:f5:fb:73:fa:
                    e0:de:13:2e:0d:20:3a:2b:0c:89:ce:a7:c3:fc:ba:
                    85:6b:98:9b:06:7c:42:58:63:30:cc:53:87:65:ac:
                    61:35:be:59:6f:3b:c8:dc:42:88:2b:50:3b:3a:2c:
                    47:c1:c4:d7:75:44:8f:6d:26:5d:7e:68:66:33:ca:
                    49:19:36:c6:5e:e2:3f:f7:f5:14:cb:31:38:98:23:
                    c6:56:d6:4a:d0:38:4e:9a:56:e1:a3:3d:83:6e:65:
                    c8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9F:1A:24:C3:F9:23:44:9C:80:99:BE:F5:C5:4B:E6:C1:04:A8:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/eaa9ea32-7e14-3a21-a2d5-0a5c2631495d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.208.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:cc:74:c4:fe:ae:10:d4:17:00:2c:de:ab:d9:0e:4f:64:b7:
         25:2d:f5:d8:8e:a4:e0:de:96:e6:85:a3:f6:66:e9:1e:69:d3:
         53:16:2f:e9:be:25:bf:b3:c7:de:c8:d5:a7:c7:b3:46:a5:93:
         f9:af:91:d7:de:7d:40:bf:59:17:52:65:dc:2a:03:50:62:60:
         ce:b0:63:99:a0:4b:04:25:11:f5:f9:40:b2:8e:9b:00:43:4b:
         a3:6c:11:aa:5f:6c:12:e0:56:9b:22:23:cc:86:3a:32:a1:8c:
         61:86:28:4a:1c:4f:0f:59:e5:94:54:19:30:5d:b8:b6:6c:ad:
         f7:31:1a:bd:7d:97:5d:a9:4e:97:94:40:db:40:5c:cf:34:f6:
         ad:12:70:86:bb:63:be:c2:5b:69:3d:2f:79:68:58:d8:ef:f1:
         6f:fb:c4:f7:87:dc:00:fa:30:7e:f8:b7:ab:3f:06:6e:9a:b2:
         f7:93:28:13:ca:26:41:3e:81:93:7e:10:1e:0e:a7:f7:c3:38:
         73:5a:af:ba:25:ed:f1:2f:ee:b8:d5:ab:30:bf:d9:95:a4:59:
         ab:d1:3a:80:ed:e3:66:cc:69:7a:39:35:f5:a2:93:4a:3d:00:
         87:5e:d4:50:b7:64:0f:26:38:27:7f:e4:80:8d:cc:b6:f1:2b:
         0f:15:01:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:25:13 2025 by rpki-client