Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0022738a-9f46-3223-b586-23374d0f56e7.roa
File:                     0022738a-9f46-3223-b586-23374d0f56e7.roa (raw, json)
Hash identifier:          VOq+cj04Rl7j4Yb1kh8yCsI7EfatkPFNvVvY1MdeH8Y=
Subject key identifier:   08:E9:61:EF:26:0E:23:8A:00:21:23:FA:7C:7A:99:68:53:FB:41:B7
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C4A78669
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0022738a-9f46-3223-b586-23374d0f56e7.roa
Signing time:             Wed 19 Dec 2018 04:09:32 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.231.173.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:a7:86:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=7328f9df-df22-4fb5-a4e7-de31ffc3bf19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8b:e6:dd:6c:f5:95:e6:1b:79:5d:68:85:79:
                    f7:71:d4:11:a4:01:67:fd:66:34:e3:ba:ab:88:81:
                    e7:4d:21:db:8c:53:ae:cb:15:98:ed:28:8e:db:f0:
                    58:36:cc:02:05:27:7e:ee:88:21:ab:2a:6e:af:a3:
                    e1:84:c8:85:00:42:f7:4a:f7:53:1d:f0:57:37:cb:
                    86:b5:3f:00:50:96:7e:41:35:f0:7f:96:c7:35:22:
                    c6:37:6c:2d:b7:f2:ef:24:e5:26:7b:3d:2c:70:82:
                    24:8a:41:eb:b1:0c:4e:01:1b:a8:0e:11:48:5f:67:
                    5f:9e:3f:aa:d7:a9:a8:4d:94:2b:2b:38:ed:23:62:
                    a7:d2:0b:52:9d:71:f7:0b:d0:b0:c4:92:b2:c5:11:
                    0c:13:ba:e0:5e:1f:fc:77:df:11:e0:ff:e9:9b:62:
                    87:3a:06:5f:a2:9d:6c:f9:a9:10:1e:27:e9:11:40:
                    b5:09:c0:13:47:00:ad:5b:69:b2:38:8e:e9:bd:dd:
                    a6:ff:d1:eb:38:ed:30:fc:5e:86:97:39:b6:b5:4b:
                    e6:ed:32:8f:91:4a:dd:ac:c3:79:ae:04:cd:62:df:
                    fc:ba:f8:e3:75:99:8c:3f:42:40:6a:63:1c:51:e0:
                    60:49:38:8e:1a:cc:a8:fa:7c:1f:90:4f:7e:08:b9:
                    b9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E9:61:EF:26:0E:23:8A:00:21:23:FA:7C:7A:99:68:53:FB:41:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0022738a-9f46-3223-b586-23374d0f56e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.231.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:4f:b8:6c:7c:68:63:75:cd:a1:6a:52:63:7d:83:3f:f4:8b:
         e4:df:aa:fd:fd:2e:df:a6:07:53:ac:32:cd:db:8d:1e:2c:a0:
         fe:d8:c2:99:cd:84:2b:56:0a:d1:e2:e1:1a:bf:c0:25:30:56:
         7f:00:53:ee:03:0b:92:66:a8:fe:98:bf:38:09:89:89:28:3a:
         3d:51:85:fb:f6:9a:a7:a8:a3:4b:d1:91:1d:e7:91:63:06:76:
         4f:55:9e:e6:c5:db:c1:36:5e:77:e3:11:63:4f:17:ec:f2:48:
         fb:0b:eb:ff:14:ec:b9:ac:2c:93:c2:6c:33:bd:16:c4:a8:d2:
         04:4f:a5:9e:7e:b3:9d:a5:b4:19:65:0e:31:ef:cc:ce:2f:90:
         cd:cb:f7:bf:de:61:4c:34:37:a4:1f:5a:81:2b:47:bb:af:db:
         b2:e7:a1:9b:a6:79:5e:31:e0:d1:07:8c:b0:23:75:9b:0c:e8:
         de:92:0d:af:0d:3f:d9:bd:d2:0f:cd:91:a5:4d:58:0a:84:c8:
         9f:33:75:b1:a3:a0:c1:f2:e9:5c:fd:86:39:9f:0a:aa:22:ad:
         c0:ba:54:0d:b0:79:5a:7f:88:6f:a0:e8:48:c4:e8:46:78:07:
         ab:30:75:4c:54:ce:d5:e8:b2:e1:87:1e:50:5b:db:01:21:de:
         78:a8:f9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:30:16 2023 by rpki-client on console-fra.rpki-client.org