Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f3e09f3c-d31f-35fc-9879-6f3fd37cf16a.roa
File:                     f3e09f3c-d31f-35fc-9879-6f3fd37cf16a.roa (raw, json)
Hash identifier:          FF1dDDsRXpcz8lyCIXnzzSs28UdV17j0ribHwUlP1cQ=
Subject key identifier:   DB:E9:BF:D2:E0:F7:D0:E6:3A:28:77:34:6A:67:5D:77:B1:4E:CF:19
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C4690CCC
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f3e09f3c-d31f-35fc-9879-6f3fd37cf16a.roa
Signing time:             Wed 19 Dec 2018 03:01:18 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.218.192.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:69:0c:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=3e639f9c-5406-4fe6-ace6-e24340729705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:df:ee:d7:34:f8:d3:77:6d:ea:c9:7c:d0:13:
                    e2:d8:40:12:88:4e:c5:e9:8d:11:85:2a:50:37:13:
                    9b:c5:c1:c0:5a:68:0f:c6:32:96:e4:c6:62:ee:fb:
                    11:3e:55:50:db:96:b7:40:af:4e:fe:7f:7b:5f:99:
                    b5:bf:76:c8:e5:87:d2:25:2a:34:5b:e1:dc:98:6a:
                    7d:aa:95:46:1a:c8:88:20:8b:7a:9c:b5:e8:1d:cb:
                    99:6b:4f:cb:7b:9b:e0:63:cc:86:7a:b5:6b:70:45:
                    c6:c4:17:07:00:63:64:72:92:e5:29:ac:0f:3f:d0:
                    44:dc:9a:cb:26:e2:f5:5f:31:7a:99:1e:1a:04:ab:
                    d6:ee:99:42:8b:1e:25:66:09:f8:1a:e0:b7:82:e0:
                    6e:87:a0:6e:60:2a:1c:e5:9c:db:da:93:09:39:56:
                    69:d0:00:03:76:a2:da:0a:37:27:e4:ef:54:e2:41:
                    24:80:f3:4a:29:78:01:f6:70:08:9c:15:f7:41:68:
                    ed:4e:26:a0:bc:aa:9a:74:41:4e:6d:87:b3:ff:65:
                    f9:69:6d:d7:23:8d:e8:6d:fd:bd:9c:16:3f:61:36:
                    39:80:3c:62:ba:4e:77:b1:47:3c:c9:a9:8c:18:61:
                    1a:24:71:e3:d9:46:09:8f:d7:51:75:ea:2d:25:f1:
                    b3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E9:BF:D2:E0:F7:D0:E6:3A:28:77:34:6A:67:5D:77:B1:4E:CF:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f3e09f3c-d31f-35fc-9879-6f3fd37cf16a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.218.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:2a:f8:46:09:28:d7:05:90:20:77:82:83:76:fc:5d:e0:6d:
         55:91:2d:dc:bc:6b:65:79:61:ee:46:ca:cd:b2:02:b8:ea:92:
         2b:cb:06:b1:a9:2e:58:00:73:8d:f7:c0:46:f6:32:a3:a6:85:
         95:fe:68:b5:6a:45:31:53:5f:f5:26:fa:81:54:c7:6d:de:81:
         e3:69:34:f0:97:fe:39:d7:68:5a:2c:0f:73:cf:20:76:c9:7d:
         56:c6:8a:e8:d2:0c:20:09:36:7f:52:b6:e0:d9:fe:4d:bb:75:
         5f:cf:d8:1b:7d:ff:81:8d:94:44:25:d8:c5:6a:18:61:33:a0:
         bd:b9:bc:c3:fb:2e:fa:5e:7a:ba:e4:03:f3:43:1a:79:ed:51:
         e7:ec:74:94:b6:83:0c:9a:78:ab:8e:5d:21:0f:e2:46:f5:47:
         f7:29:10:0e:7b:15:3d:78:1d:ce:4f:f0:f0:0c:45:2c:c2:60:
         42:64:c9:4f:75:d5:96:0e:5f:d7:9b:28:4d:05:6f:09:2d:32:
         bd:70:a7:98:ad:ce:c1:12:f9:ff:cd:65:e8:63:7e:9a:9e:a9:
         e5:b2:32:98:f3:fd:98:40:3c:ca:50:3c:81:a3:38:b6:1c:2b:
         14:21:f3:35:b9:53:01:cd:a3:90:0c:52:f2:0a:ec:ae:c6:48:
         53:da:ce:90
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ8RpDMwwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEyMTkwNTAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJDNl
NjM5ZjljLTU0MDYtNGZlNi1hY2U2LWUyNDM0MDcyOTcwNTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAKzf7tc0+NN3berJfNAT4thAEohOxemNEYUqUDcT
m8XBwFpoD8YyluTGYu77ET5VUNuWt0CvTv5/e1+Ztb92yOWH0iUqNFvh3JhqfaqV
RhrIiCCLepy16B3LmWtPy3ub4GPMhnq1a3BFxsQXBwBjZHKS5SmsDz/QRNyayybi
9V8xepkeGgSr1u6ZQoseJWYJ+Brgt4LgboegbmAqHOWc29qTCTlWadAAA3ai2go3
J+TvVOJBJIDzSil4AfZwCJwV90Fo7U4moLyqmnRBTm2Hs/9l+Wlt1yON6G39vZwW
P2E2OYA8YrpOd7FHPMmpjBhhGiRx49lGCY/XUXXqLSXxs58CAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBTb6b/S4PfQ5joodzRqZ113sU7PGTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjL2YzZTA5ZjNjLWQzMWYtMzVm
Yy05ODc5LTZmM2ZkMzdjZjE2YS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADTawDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEADir4Rgko1wWQIHeCg3b8XeBtVZEt3LxrZXlh7kbKzbICuOqSK8sGsakuWABz
jffARvYyo6aFlf5otWpFMVNf9Sb6gVTHbd6B42k08Jf+OddoWiwPc88gdsl9VsaK
6NIMIAk2f1K24Nn+Tbt1X8/YG33/gY2URCXYxWoYYTOgvbm8w/su+l56uuQD80Ma
ee1R5+x0lLaDDJp4q45dIQ/iRvVH9ykQDnsVPXgdzk/w8AxFLMJgQmTJT3XVlg5f
15soTQVvCS0yvXCnmK3OwRL5/81l6GN+mp6p5bIymPP9mEA8ylA8gaM4thwrFCHz
NblTAc2jkAxS8grsrsZIU9rOkA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:39:09 2025 by rpki-client