Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f6ffe391-8d4c-3834-8bb4-3f2839ed258f.roa
File:                     f6ffe391-8d4c-3834-8bb4-3f2839ed258f.roa (raw, json)
Hash identifier:          FFKgmkja3AT+FicnamKqLOdhhquoIvWlzC3CU/fd4Dg=
Subject key identifier:   14:99:B0:57:48:52:3E:6F:D1:0E:40:C7:6A:FA:9B:EE:06:AA:8A:39
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1669631CBED
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f6ffe391-8d4c-3834-8bb4-3f2839ed258f.roa
Signing time:             Sun 21 Oct 2018 10:35:37 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.92.91.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:96:31:cb:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=89556c25-688d-4b7d-bfa4-b9a0b2a54a74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f2:3f:75:40:85:73:28:1a:88:a3:67:5f:b0:
                    fa:22:de:d1:ae:22:f2:d8:6c:9b:b7:b6:23:c9:a6:
                    a1:2f:ad:13:cc:2d:9e:2e:a3:71:53:88:12:10:a3:
                    13:7a:bb:e3:65:62:32:d0:7c:f5:d6:01:b0:28:4e:
                    22:f4:5c:bb:66:0c:2a:5c:ee:79:4b:26:45:ca:6d:
                    44:9d:52:c7:3f:6a:13:ca:ae:41:37:9f:04:50:90:
                    5a:f5:27:2f:1e:ed:2d:8f:6e:59:d7:a1:b3:0a:9d:
                    26:c7:9e:d0:46:7a:cf:ea:9c:7e:27:07:e2:e1:a5:
                    a2:1e:68:14:3e:2c:88:5b:5b:c4:f8:71:3f:b1:2a:
                    9c:b6:6f:ea:6e:d7:9b:a8:8e:b6:ec:eb:a7:98:a3:
                    cb:03:d3:d3:ec:56:23:9c:68:96:f8:9d:64:79:cf:
                    39:06:e0:2f:0c:0b:1e:d3:f6:70:99:20:74:07:e9:
                    0e:d3:4d:fe:2b:18:8a:40:f3:7a:db:62:65:67:bd:
                    9d:4a:51:51:6f:0c:e7:a3:5e:f4:f1:58:1f:14:55:
                    8c:c6:56:e4:c3:26:a3:e8:7f:0a:2d:56:91:9b:0f:
                    6c:f5:d8:a8:de:cc:27:cc:fd:04:38:a5:73:8a:d3:
                    a3:86:71:53:cb:b5:45:4d:67:ec:b2:1e:d4:34:a9:
                    f7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:99:B0:57:48:52:3E:6F:D1:0E:40:C7:6A:FA:9B:EE:06:AA:8A:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f6ffe391-8d4c-3834-8bb4-3f2839ed258f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.92.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:75:41:3f:48:0a:d6:ae:4c:0e:f9:a3:86:56:6b:e7:d2:7f:
         1b:70:b4:6a:51:f8:42:82:10:26:40:7d:a7:8b:64:12:26:43:
         c0:da:09:72:bd:09:83:78:11:2d:0c:6c:30:87:56:f0:7c:cf:
         52:b3:3b:0d:43:14:09:05:29:b2:5c:3e:ce:30:17:e8:d1:77:
         80:13:1c:82:c7:39:32:90:3c:aa:d4:57:31:8b:62:16:24:3e:
         3c:a4:a1:16:27:15:e2:6c:0c:08:fa:f1:8f:4f:d6:79:d9:b2:
         e6:52:31:5c:43:e7:bb:0c:72:08:19:ca:59:f4:ff:0f:29:30:
         d2:25:fd:44:36:73:21:fc:29:30:76:76:91:19:a1:29:83:03:
         c5:dc:92:75:05:5d:79:52:b6:43:8b:26:69:b6:88:f3:9f:c0:
         f5:99:3d:3f:f5:04:85:42:91:be:66:7d:e8:cd:7b:6d:d6:85:
         ba:c5:00:42:59:20:9d:60:fb:e2:3d:98:aa:a7:9a:17:49:c7:
         eb:a3:41:43:2b:bb:22:c8:22:bd:c2:06:5e:84:23:76:09:d9:
         f6:68:f0:15:76:d6:ee:38:d8:e8:7e:6e:de:d9:71:92:62:1d:
         c8:6c:07:ec:06:59:f1:66:77:bb:a2:f4:02:f7:80:a7:a4:ca:
         db:2e:e3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:40:14 2025 by rpki-client