Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/15ee5ecb-414d-301c-a3ea-ec48c321d133.roa
File:                     15ee5ecb-414d-301c-a3ea-ec48c321d133.roa (raw, json)
Hash identifier:          tqUIZQ90WhHf63drot273x6i5hHjXOej7WGlKa/FOeQ=
Subject key identifier:   47:E4:8E:96:9A:DB:1B:E4:21:88:15:D5:DD:11:C1:9D:18:62:68:B7
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C4A798B4
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/15ee5ecb-414d-301c-a3ea-ec48c321d133.roa
Signing time:             Wed 19 Dec 2018 04:09:37 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.231.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:a7:98:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=966bc7a0-377f-4c9a-b40f-a37583f2a996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8e:ef:b1:a8:20:0f:66:ae:78:54:80:ea:a1:
                    39:90:60:32:db:e9:e3:15:bc:ca:c0:5b:e3:04:c3:
                    91:c3:65:dc:fc:83:f4:61:6e:93:7f:7f:93:bd:b0:
                    3a:1c:1e:23:f5:8e:c9:8b:ae:d1:7f:b9:a8:f1:87:
                    ee:66:73:65:b9:2a:a4:a4:35:15:ff:43:59:90:90:
                    26:f8:dd:e6:ec:8d:b1:78:c5:ea:ec:7f:be:90:e6:
                    67:d2:09:51:37:df:2e:1a:a8:78:0a:b9:ac:2b:a4:
                    10:25:91:65:d4:3c:04:50:e2:a8:1d:71:39:5c:6a:
                    56:5e:b1:c6:45:3f:75:d3:66:fd:23:89:c7:61:36:
                    82:03:82:63:de:9b:55:5e:17:2b:a2:75:25:94:62:
                    1a:6a:b6:10:67:d1:6c:b3:67:54:67:b5:e4:4d:2b:
                    a8:61:d6:0c:91:95:4a:dd:21:2a:da:cc:86:ba:11:
                    aa:b0:61:a8:1e:61:23:69:62:8a:1f:10:41:24:cb:
                    90:d5:f8:44:27:5b:c0:e9:16:4d:d9:9a:67:6e:fa:
                    02:44:9f:72:76:e2:bf:50:0a:8f:de:b8:57:5b:cf:
                    54:c8:11:34:f3:c1:e7:88:17:1a:28:98:8f:e2:de:
                    1c:5f:c4:9c:eb:d7:fc:d4:e4:cd:b9:da:4b:8a:1b:
                    03:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E4:8E:96:9A:DB:1B:E4:21:88:15:D5:DD:11:C1:9D:18:62:68:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/15ee5ecb-414d-301c-a3ea-ec48c321d133.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.231.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:4e:a9:0f:30:9f:25:3c:c4:d8:8d:5d:e8:57:20:40:c0:be:
         68:a8:83:1c:25:e3:ad:19:d4:b8:d9:16:52:48:d7:6b:a3:c6:
         02:83:74:5e:cb:28:11:19:0e:94:dc:d6:fb:b8:ad:56:ac:9a:
         75:d8:ab:0f:6c:15:b3:66:ee:a5:57:b0:e9:fb:ea:1f:4b:95:
         6b:3e:ef:83:3e:2b:ee:86:8e:21:8e:bf:fc:dd:2e:8a:f8:9f:
         a6:eb:a9:16:d4:a0:ff:29:14:1e:05:7e:2c:eb:eb:47:2f:75:
         64:5f:0a:0d:2b:50:a4:bc:4d:7a:5a:af:d9:a2:9e:0d:0e:3d:
         91:7a:84:03:1b:f1:93:17:70:a3:d1:9f:90:27:1b:7c:79:19:
         98:39:ec:23:39:eb:49:fd:11:2e:60:06:de:d2:b0:24:c4:80:
         61:5a:81:c6:0e:a3:d1:5b:b3:0a:77:28:a8:a6:20:27:fb:17:
         e4:15:a5:2a:4d:b7:0e:18:11:28:ad:71:89:5e:33:24:7e:71:
         70:e2:c4:c9:ba:c1:8f:b0:38:4d:be:11:18:fa:8e:df:15:f0:
         95:a2:2c:19:f8:60:6c:3f:55:eb:12:70:e6:4d:a3:cb:b0:47:
         76:7c:7c:b1:4d:9a:40:6b:ff:24:57:78:78:c4:3c:fc:6e:12:
         cf:f6:b6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:30:38 2023 by rpki-client on console-fra.rpki-client.org