Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f0e14462-382b-3a88-99c1-d6d8609436cc.roa
File:                     f0e14462-382b-3a88-99c1-d6d8609436cc.roa (raw, json)
Hash identifier:          WJ14nUWWNRcN9FOGocm85SjRlFmSjkSF0vl/nogSyEY=
Subject key identifier:   D0:17:CA:6A:93:12:AE:C7:4E:69:76:CF:E7:0B:13:2C:AA:DE:AA:37
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665C2F49EE
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f0e14462-382b-3a88-99c1-d6d8609436cc.roa
Signing time:             Wed 10 Oct 2018 04:14:54 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.218.248.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:2f:49:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=946ee224-e9e0-41ef-a4c5-ef3f46c06e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:37:57:7c:11:f1:35:38:51:f6:b9:73:12:db:
                    ee:f6:d5:64:f8:57:be:b0:aa:a0:f8:5c:d7:ea:bf:
                    10:ab:06:17:f1:9b:b3:8d:7d:73:ec:93:87:96:0d:
                    bf:e9:ac:bc:70:31:48:31:32:e1:5c:78:00:f8:a5:
                    d8:23:d9:86:73:0f:60:fa:d0:10:74:88:b8:47:3a:
                    3a:ef:96:f0:9d:f1:cc:20:d9:40:21:02:a5:b3:08:
                    64:88:63:c5:c1:f2:b5:e7:34:06:d7:cb:62:33:a8:
                    83:ae:29:d4:ea:b0:d9:16:29:a0:45:4e:78:1b:48:
                    b8:25:14:1d:a9:6b:b8:3e:78:3c:22:74:d1:3e:d3:
                    77:84:b0:bd:26:23:14:3c:c9:c5:64:46:24:11:e1:
                    f5:d1:c9:2c:6c:59:cd:ba:d7:48:04:b4:23:b9:5d:
                    8c:7a:cd:70:f6:97:32:e6:cd:db:dd:8d:f2:67:ad:
                    ae:b5:6a:62:69:39:11:47:ce:0d:2d:8d:c3:bc:18:
                    51:f4:0e:33:db:46:a9:dd:87:ec:11:5d:d4:eb:68:
                    b8:67:79:39:88:b6:68:5d:0f:c3:56:2c:e6:a9:ea:
                    19:9a:1a:2d:e9:81:c6:2f:38:69:49:98:e5:69:3b:
                    53:84:cb:ee:15:a7:d2:37:be:7d:87:2c:c4:40:6f:
                    88:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:17:CA:6A:93:12:AE:C7:4E:69:76:CF:E7:0B:13:2C:AA:DE:AA:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f0e14462-382b-3a88-99c1-d6d8609436cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.218.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:b5:65:ab:d7:8b:c4:88:41:1a:e3:ef:ab:da:cc:3c:76:6c:
         a6:62:51:84:98:cc:a1:66:1d:b6:a9:9f:de:51:26:e1:24:d4:
         bf:04:8e:b5:f0:1a:23:62:27:42:bf:52:bd:ac:44:9c:ec:9b:
         6e:35:f2:ee:c5:68:dc:1b:a9:32:44:bc:91:38:73:cc:ed:d0:
         e1:90:43:7b:52:3a:be:05:cf:dc:12:b0:9b:17:f3:99:43:80:
         32:dc:7e:90:db:cd:84:6f:31:18:e9:b5:ba:de:88:ad:6e:99:
         7b:ad:3b:4d:3a:15:a1:b1:34:93:be:ea:46:e5:36:dd:3e:c3:
         1b:02:0a:60:f1:65:82:23:92:f2:56:fb:5d:92:e0:b0:73:e0:
         cd:86:f6:31:4e:5a:a5:87:06:f0:bc:10:61:3a:68:4b:79:3d:
         b8:fe:99:2c:7f:98:94:9d:c8:75:3f:5e:b2:7f:0e:8c:46:7e:
         47:39:76:cc:0c:c1:b4:95:f8:90:91:95:76:62:fb:d7:a1:a4:
         91:83:9c:5f:e9:4a:8a:9b:45:41:b7:76:04:3c:03:9f:aa:19:
         13:e6:e8:7d:26:54:b1:53:90:40:01:29:1c:a0:a6:91:4a:fe:
         8a:4b:67:04:57:45:b4:bb:42:09:e2:5b:49:07:95:74:dc:35:
         83:55:cd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:55:23 2025 by rpki-client