Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/325db40e-7607-3f4c-b30c-870efa747756.roa
File:                     325db40e-7607-3f4c-b30c-870efa747756.roa (raw, json)
Hash identifier:          yVzkGzgb+98MESAY3ZDBzmxIhneRpWolhQjp+96XG2E=
Subject key identifier:   61:CD:82:62:BB:3F:F8:1E:F1:CE:1F:61:F5:2E:9E:1D:34:80:A4:BF
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665CD3E064
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/325db40e-7607-3f4c-b30c-870efa747756.roa
Signing time:             Wed 10 Oct 2018 07:14:41 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        18.136.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:d3:e0:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=5aedee32-d841-4105-b0f9-5f7b0e047d54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dd:c1:d8:ca:b5:be:d7:fe:8c:9f:20:c3:24:
                    f8:5e:7d:74:be:44:74:af:b7:89:ca:e2:2f:55:92:
                    db:08:d0:35:6d:d3:62:5d:f7:6b:4b:30:d1:f8:2b:
                    5a:bf:a5:3f:c4:34:89:e7:ed:8c:de:bb:12:7d:69:
                    b2:30:5f:93:74:b2:93:66:c0:56:54:86:8c:f4:ea:
                    b0:50:28:8c:97:bb:0d:88:73:45:f8:2c:61:af:e0:
                    e1:19:c2:0f:56:6a:7b:0c:80:26:55:7e:f4:68:76:
                    75:d0:9c:20:8f:1a:f7:3b:48:de:a7:4c:c3:8c:25:
                    1e:81:2e:1d:b7:93:b4:87:dc:6e:ff:98:af:ae:b3:
                    b1:cb:95:7c:4f:12:79:ce:d9:48:d2:fe:03:0d:91:
                    69:b8:df:f3:80:5d:8c:c1:4c:3b:d4:5a:47:58:b2:
                    cd:33:07:0e:7c:f0:06:a6:e1:40:1e:35:d4:23:4f:
                    16:af:c9:70:9a:81:bc:c0:a4:47:fa:91:61:6b:ac:
                    89:99:a9:81:3f:7c:e5:9c:60:8a:0d:5f:9c:6e:16:
                    27:2d:62:a0:02:d7:dc:a5:17:43:69:8e:10:25:c1:
                    ec:28:3f:e2:8b:d3:9f:56:0f:42:77:22:63:cb:dd:
                    5a:b9:8a:ce:c2:40:d3:67:c6:94:4b:23:84:82:dc:
                    f1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:CD:82:62:BB:3F:F8:1E:F1:CE:1F:61:F5:2E:9E:1D:34:80:A4:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/325db40e-7607-3f4c-b30c-870efa747756.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.136.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:2d:63:b2:32:a1:00:20:cb:e4:c0:3c:35:a6:f2:26:06:49:
         ac:c1:75:3f:e2:fb:3e:72:9d:32:c7:f0:2d:cd:62:dd:3b:e3:
         e1:ad:50:b9:37:2f:f9:91:2e:08:f2:39:d7:13:31:fe:10:1b:
         b3:28:a5:f3:37:d0:18:3c:d6:58:e2:93:41:70:c3:0d:15:71:
         c0:4e:a5:cf:ac:5f:6b:fb:31:16:bd:12:a6:a7:96:c3:0e:6a:
         bd:67:f1:05:9d:c3:9b:67:8d:ab:20:41:48:51:f1:c6:10:4e:
         ca:39:0d:b4:a6:88:a4:e4:68:32:3d:ca:3c:90:7d:c5:b8:d3:
         72:b1:71:35:d6:82:66:78:54:24:20:8d:0e:40:76:43:12:89:
         47:ab:fb:e0:6f:36:a4:f1:d3:b5:72:30:5e:ee:cc:da:68:b5:
         5a:c8:5f:41:ad:9a:ad:5b:81:68:b0:e2:be:ac:63:40:64:1f:
         35:86:e7:1f:32:9a:1e:a6:15:62:fd:93:d1:78:e4:41:40:21:
         4f:27:4f:63:f4:78:59:3a:4d:43:c2:bb:db:41:27:c2:f5:f5:
         fa:ac:0a:86:99:c7:37:44:f5:65:f1:08:a7:06:36:88:fa:d0:
         43:45:ff:13:0c:12:d8:09:11:b1:e9:05:91:56:c1:c3:f6:46:
         44:d3:dd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:31:15 2023 by rpki-client on console-fra.rpki-client.org