Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/329b35b0-fc81-384f-9bda-28aa2edc2987.roa
File:                     329b35b0-fc81-384f-9bda-28aa2edc2987.roa (raw, json)
Hash identifier:          LpTi1o711YiNha5GxfBJngm8AGeORvw+Q48ONenzHbE=
Subject key identifier:   DA:BF:F5:88:E0:7F:50:A6:75:02:84:23:D8:9B:FF:50:D8:00:02:45
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665D24FD8B
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/329b35b0-fc81-384f-9bda-28aa2edc2987.roa
Signing time:             Wed 10 Oct 2018 08:43:17 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.179.128.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5d:24:fd:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=00e15630-47c6-4765-8308-18caa1f76d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9a:49:3c:4e:e8:fd:50:59:23:f5:ca:8e:d4:
                    19:8f:a8:0e:75:70:70:c0:70:1e:46:e6:9a:9b:75:
                    57:4f:ee:4e:4d:35:14:cb:f3:de:5b:9f:16:cb:e2:
                    c6:f7:46:ba:c9:3f:b2:51:71:95:f1:b9:bd:d9:58:
                    29:64:11:b9:e5:4c:43:97:29:62:85:4f:fd:5e:e3:
                    01:2c:5f:63:1d:08:07:b1:5c:b7:7a:61:18:7e:6d:
                    9c:58:54:bc:87:6c:29:19:8b:bb:e3:f4:57:ce:5b:
                    e8:49:02:15:bb:ae:ce:62:11:51:59:a4:ea:8b:83:
                    f5:20:c5:f2:54:ce:dc:f4:ae:b1:4a:ae:3d:a4:ed:
                    06:b6:89:7a:7b:10:ec:d2:17:d5:78:1e:e4:f2:04:
                    fd:84:09:d7:67:c6:ef:21:3e:9f:13:a8:c9:33:1b:
                    7f:74:3a:19:54:30:96:15:05:96:bf:e1:f2:b7:ab:
                    a7:51:67:aa:e1:02:aa:56:9b:92:10:fe:9e:10:11:
                    a3:37:2c:99:3f:ee:b2:ce:fe:84:e8:d5:1a:a1:08:
                    4d:06:5c:b9:fa:73:d9:f9:82:6e:40:12:42:3d:9d:
                    d4:85:1f:da:a2:aa:4c:ab:ea:83:b6:70:ba:85:d2:
                    0a:19:40:5e:d3:9b:ab:56:2a:a2:78:5f:b4:c5:79:
                    3f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:BF:F5:88:E0:7F:50:A6:75:02:84:23:D8:9B:FF:50:D8:00:02:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/329b35b0-fc81-384f-9bda-28aa2edc2987.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.179.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:a1:fd:c2:d2:69:af:1a:39:94:ca:e3:a2:ad:77:0b:f5:5a:
         c3:4a:9f:98:78:75:fe:dc:d4:cf:67:e1:5e:f4:c3:ce:6f:c4:
         e7:e3:b3:b2:e6:95:47:50:d2:3f:de:96:e2:ba:a9:31:35:cc:
         62:ba:ce:d5:95:64:cb:af:a9:74:bc:d1:4c:3f:66:7e:fd:13:
         90:36:79:bd:d3:54:d9:32:4f:5a:00:0c:f8:de:f2:93:33:06:
         1e:3a:b3:c5:cf:8f:07:55:14:ce:65:ab:2b:4d:af:1e:80:8d:
         a9:a8:98:46:c9:8a:36:a2:59:f4:7b:3d:c7:89:20:0f:c5:2f:
         76:64:4f:5f:f9:55:b2:54:43:b6:ff:f2:9b:82:b5:f4:6a:6f:
         2a:00:50:9b:a6:56:39:ab:00:04:f1:60:ae:03:8f:60:40:9e:
         9a:cf:28:e6:d6:98:cd:4d:65:c8:2f:c9:ae:0f:e6:44:cd:f4:
         47:9f:de:62:86:ff:a9:82:19:40:b6:90:15:21:3b:92:89:86:
         e3:17:bf:76:13:1a:c4:bf:ad:b4:42:17:ac:69:88:7d:87:4d:
         79:ab:7c:f1:5c:08:c7:67:8f:49:a9:14:ef:f4:67:77:fb:c7:
         01:c4:8a:79:24:cc:c4:65:93:0b:c0:db:d1:88:07:65:64:c9:
         38:c3:04:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:34:28 2023 by rpki-client on console-ams.rpki-client.org