Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1ab27993-db57-3072-83c4-ce2d3134d8aa.roa
File:                     1ab27993-db57-3072-83c4-ce2d3134d8aa.roa (raw, json)
Hash identifier:          SIOun091hWCJ800uXgVZMdZliEbI7wlte9QF7GBlNwU=
Subject key identifier:   0B:86:E9:F0:3E:06:0A:08:B3:0C:9A:42:FA:0F:30:77:9B:E2:E2:E3
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1664BD49454
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1ab27993-db57-3072-83c4-ce2d3134d8aa.roa
Signing time:             Sun 07 Oct 2018 00:01:54 +0000
ROA not before:           Sun 07 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.68.0.0/15 maxlen: 15

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:4b:d4:94:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct  7 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=ee319a9b-2e7b-403a-87f5-ade1f839f147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:92:2a:57:9b:b4:a8:1a:10:9d:9a:e2:32:bf:
                    5f:df:34:38:e6:6e:55:87:15:07:d9:84:d8:1a:84:
                    74:9f:af:66:80:9d:7c:ac:05:76:65:0e:e4:e1:6e:
                    8e:d9:86:14:64:f8:fe:d7:8a:28:f6:0f:a0:f3:64:
                    71:9d:52:0c:87:5a:4b:01:07:bd:6d:6c:5f:16:fd:
                    f9:71:0a:fd:84:30:fc:81:82:69:ff:d3:5a:a4:92:
                    de:4e:73:86:7f:e3:47:64:b3:0f:83:6c:1e:29:7b:
                    d1:fe:c5:bc:51:7f:98:a2:da:1c:15:11:40:ca:b5:
                    63:c6:e7:78:57:a8:88:a7:a3:5f:53:06:6e:4a:b9:
                    7e:6f:04:53:88:ad:43:f1:4f:40:75:3a:d7:a5:b3:
                    28:13:4c:f2:5c:6b:36:6c:e4:f4:e7:71:d3:2e:8e:
                    9b:db:27:df:61:7e:eb:f2:3f:20:14:f1:8d:67:a8:
                    f5:a5:f4:c2:e9:12:9f:7f:98:fa:80:31:8c:b0:7d:
                    89:98:b5:da:5d:fd:51:78:63:dc:08:40:31:a3:5a:
                    6b:4e:13:74:c1:40:8b:15:b4:f2:ac:d7:46:0e:58:
                    63:76:cb:f5:f5:18:e8:bf:91:18:e3:8a:d0:ef:d1:
                    bb:65:7a:3b:70:9d:3d:ce:ca:ed:b5:7f:bb:68:3e:
                    26:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:86:E9:F0:3E:06:0A:08:B3:0C:9A:42:FA:0F:30:77:9B:E2:E2:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1ab27993-db57-3072-83c4-ce2d3134d8aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.68.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:93:45:8a:06:43:40:00:14:9a:c3:f8:cb:83:8b:6f:e4:ea:
         44:da:b6:72:5f:be:25:06:06:bd:2b:cd:ec:e8:05:99:04:54:
         c9:98:45:96:0a:a0:44:6a:1d:bd:5f:85:b5:56:91:e6:67:c3:
         c7:d3:fa:86:e2:5f:e3:87:7c:17:fe:25:3d:84:e7:54:52:44:
         0b:f2:89:c7:31:e4:55:e1:84:51:be:22:7b:9a:35:76:5a:26:
         d9:a0:19:14:e7:5a:89:2d:92:5b:71:19:ee:49:3e:ab:52:a0:
         f6:f2:88:65:68:80:d3:62:c3:e4:40:68:49:07:bd:f2:8b:d3:
         04:fc:31:36:ad:a3:c4:ac:af:b3:bc:a9:86:9b:44:e9:11:10:
         1e:a7:9c:78:2f:75:38:14:77:bb:9f:20:8a:5b:71:35:d7:58:
         25:dc:e4:18:47:63:f5:4d:8b:43:f4:7e:a4:d3:8f:45:a9:a3:
         40:11:a2:a0:45:bb:0c:90:89:7d:f1:fe:4e:be:35:8b:62:3d:
         9b:fa:f2:e3:0d:bc:ff:d5:96:56:82:6d:08:e9:69:ec:04:91:
         13:31:83:18:8c:f4:0a:d6:02:13:32:2c:fb:dd:0b:23:7e:00:
         da:61:60:d4:50:0f:b8:df:44:41:f6:90:c8:33:b9:f8:a9:e0:
         3a:f1:3e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:30:43 2023 by rpki-client on console-fra.rpki-client.org