Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/29ca2ddd-5d59-3afd-b7d5-1c65826c2e87.roa
File:                     29ca2ddd-5d59-3afd-b7d5-1c65826c2e87.roa (raw, json)
Hash identifier:          To1XcVV00e/TauViXfJ6ZoSU375D5zvnMNNvsmIuqpo=
Subject key identifier:   28:C4:AB:27:32:C6:66:6A:8B:F4:A4:60:34:2B:94:2F:59:BF:EB:6C
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1664BC1A6F5
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/29ca2ddd-5d59-3afd-b7d5-1c65826c2e87.roa
Signing time:             Sat 06 Oct 2018 23:41:14 +0000
ROA not before:           Sat 06 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        18.246.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:4b:c1:a6:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct  6 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=df65b1e5-25b0-4d30-96f6-3acbe3a6454e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ad:7d:ef:6a:4a:1d:56:60:50:b3:42:80:c4:
                    0c:2e:ba:0a:48:ef:6a:8c:41:89:13:95:a6:67:f1:
                    a6:75:65:14:ff:07:45:b1:68:fd:5f:7b:f7:56:43:
                    dc:a2:fb:55:5b:3d:27:e5:c8:4b:60:21:89:c9:21:
                    76:f4:f7:fa:3d:33:4f:ec:19:c3:25:d9:eb:69:f8:
                    68:ae:81:53:b6:63:9c:0e:ad:59:ec:69:d2:60:8a:
                    de:54:66:d4:d5:68:75:89:47:20:2f:3f:af:5e:75:
                    92:c3:31:dc:57:6f:01:df:34:e1:b0:8d:81:82:bc:
                    5c:d9:47:ce:21:73:54:54:1a:1c:b4:c5:1f:91:23:
                    0a:22:84:36:f8:f1:13:13:92:d7:45:94:fe:1d:2f:
                    37:0c:e7:c2:9a:04:e5:20:7e:79:5b:f8:5b:ec:e0:
                    28:36:86:c7:cc:bc:db:fa:43:12:23:1b:a3:ef:2f:
                    03:95:cf:c8:45:30:ce:68:cb:f7:db:64:dc:63:dd:
                    70:6d:29:66:41:92:53:4c:e9:88:21:6f:f7:34:61:
                    33:e4:e2:22:cb:07:9a:9a:2d:1b:f6:67:b0:5b:9b:
                    b2:44:f1:0d:ba:99:9d:6c:12:d0:8f:f2:97:36:b1:
                    28:71:f0:4b:2e:50:74:5f:f3:35:4d:04:19:c3:56:
                    68:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C4:AB:27:32:C6:66:6A:8B:F4:A4:60:34:2B:94:2F:59:BF:EB:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/29ca2ddd-5d59-3afd-b7d5-1c65826c2e87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.246.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:7d:1c:1a:53:ee:f7:8c:63:c7:20:35:4b:78:b3:ec:3b:65:
         92:57:49:2b:ba:28:11:a7:77:90:10:17:b7:80:42:a0:1e:e1:
         e5:d0:09:eb:af:c3:4f:2a:45:ec:00:44:5c:43:31:92:2e:1d:
         47:82:80:de:86:ce:b9:86:4d:10:52:72:ca:7c:73:c3:65:33:
         d6:19:c2:d8:8b:88:3e:2f:3f:71:50:8d:fc:a1:81:7b:79:31:
         14:63:88:06:b7:ef:51:64:10:c5:6e:c4:e5:2f:c8:53:d9:06:
         f2:41:d6:af:bb:b4:cf:76:cf:87:55:7a:c0:16:fc:65:c9:db:
         50:4f:6b:a7:81:c3:02:d8:69:95:f0:e2:d8:33:6e:b5:ad:20:
         8a:a0:f9:e8:62:19:f5:cb:00:f0:89:1e:7b:08:f9:cc:4a:df:
         1b:1c:1a:1f:5f:46:a2:41:b3:94:b0:8d:4e:84:ab:0f:0c:3a:
         27:70:f8:4f:8e:4d:bc:cb:33:19:54:49:c2:3d:f1:09:33:c4:
         03:c1:b8:be:fd:9e:bf:42:8a:b0:40:8e:81:45:cc:b0:98:bd:
         6a:ba:d0:ff:1f:f5:43:21:9c:4e:da:c5:4e:89:50:0e:34:ce:
         af:7e:88:c2:e1:4a:5f:23:42:8b:df:93:1b:e2:04:78:97:08:
         5a:02:77:47
-----BEGIN CERTIFICATE-----
MIIGPjCCBSigAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZkvBpvUwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEwMDYwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJGRm
NjViMWU1LTI1YjAtNGQzMC05NmY2LTNhY2JlM2E2NDU0ZTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAM6tfe9qSh1WYFCzQoDEDC66CkjvaoxBiROVpmfx
pnVlFP8HRbFo/V9791ZD3KL7VVs9J+XIS2AhickhdvT3+j0zT+wZwyXZ62n4aK6B
U7ZjnA6tWexp0mCK3lRm1NVodYlHIC8/r151ksMx3FdvAd804bCNgYK8XNlHziFz
VFQaHLTFH5EjCiKENvjxExOS10WU/h0vNwznwpoE5SB+eVv4W+zgKDaGx8y82/pD
EiMbo+8vA5XPyEUwzmjL99tk3GPdcG0pZkGSU0zpiCFv9zRhM+TiIssHmpotG/Zn
sFubskTxDbqZnWwS0I/ylzaxKHHwSy5QdF/zNU0EGcNWaJMCAwEAAaOCA1QwggNQ
MB0GA1UdDgQWBBQoxKsnMsZmaov0pGA0K5QvWb/rbDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjLzI5Y2EyZGRkLTVkNTktM2Fm
ZC1iN2Q1LTFjNjU4MjZjMmU4Ny5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDABL2MFQGA1Ud
IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu
YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwCwYJKoZIhvcNAQELA4IB
AQA/fRwaU+73jGPHIDVLeLPsO2WSV0kruigRp3eQEBe3gEKgHuHl0Anrr8NPKkXs
AERcQzGSLh1HgoDehs65hk0QUnLKfHPDZTPWGcLYi4g+Lz9xUI38oYF7eTEUY4gG
t+9RZBDFbsTlL8hT2QbyQdavu7TPds+HVXrAFvxlydtQT2ungcMC2GmV8OLYM261
rSCKoPnoYhn1ywDwiR57CPnMSt8bHBofX0aiQbOUsI1OhKsPDDoncPhPjk28yzMZ
VEnCPfEJM8QDwbi+/Z6/QoqwQI6BRcywmL1qutD/H/VDIZxO2sVOiVAONM6vfojC
4UpfI0KL35Mb4gR4lwhaAndH
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:31:02 2023 by rpki-client on console-fra.rpki-client.org