Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3346e1cf-0a64-359e-8f62-0a094746c155.roa
File:                     3346e1cf-0a64-359e-8f62-0a094746c155.roa (raw, json)
Hash identifier:          NTUF22bAXomn+4QScXrtBgEMl2a/dQEY85rgKZEPjq8=
Subject key identifier:   DA:B4:CC:33:C8:31:79:A8:50:2E:31:F0:C0:67:87:15:14:A3:3E:86
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C446DD05
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3346e1cf-0a64-359e-8f62-0a094746c155.roa
Signing time:             Wed 19 Dec 2018 02:23:57 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.92.52.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:46:dd:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=81fb5340-3d1c-4cb7-a773-dd4a8c11a052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:90:66:cd:05:c5:c5:1f:76:4b:b1:45:da:4e:
                    1c:23:16:f3:2c:ba:21:a9:d2:08:6c:36:1c:1e:63:
                    93:6f:b9:ff:37:a9:6e:a5:e4:13:4e:14:01:09:28:
                    f3:ca:7a:32:74:b7:9c:2b:69:30:19:5d:d5:77:6d:
                    4b:bd:66:91:e6:41:06:54:2a:fc:5c:bb:3e:3f:90:
                    fd:95:8f:16:ec:43:78:e9:12:2b:d2:44:f9:20:83:
                    f6:c3:15:47:bc:d2:1b:78:56:2f:74:1b:22:d2:53:
                    b9:5c:c2:6e:60:40:36:fa:b8:e8:db:4b:bd:f3:e1:
                    b6:1e:98:f7:44:0e:93:f9:6a:10:76:7a:5f:73:50:
                    08:98:58:75:e4:f3:08:2a:27:7c:ea:e8:d3:81:fc:
                    a8:56:c8:cb:67:32:f0:09:37:43:2d:b7:b6:54:83:
                    89:d1:c3:71:fa:f6:31:cb:81:cd:38:e6:36:6d:79:
                    b9:1a:20:62:ed:8a:75:11:27:10:b0:7f:32:6d:21:
                    05:3f:28:3f:9b:c4:6a:4b:09:48:be:1d:2f:cf:3a:
                    10:b2:1a:15:bb:7d:77:b8:ee:52:07:ff:e4:59:fc:
                    c4:97:2d:90:1e:11:5a:c6:df:2c:a4:2e:8d:ee:42:
                    68:65:db:e2:e1:70:18:f8:8c:71:1f:f6:8f:52:6e:
                    47:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B4:CC:33:C8:31:79:A8:50:2E:31:F0:C0:67:87:15:14:A3:3E:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3346e1cf-0a64-359e-8f62-0a094746c155.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.92.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:40:86:51:b0:9d:f8:45:20:a5:52:6a:53:e1:da:5d:19:2d:
         ef:5e:a1:27:f3:b5:fa:25:44:c5:50:ef:34:c0:af:b2:8e:05:
         c4:cb:67:b0:09:85:54:70:2e:4c:a7:53:61:e2:30:31:c6:bb:
         f4:51:a8:e4:35:72:67:ad:b3:48:c7:78:6c:a2:a2:d2:89:34:
         a6:f4:a3:ce:95:39:31:84:ce:d0:cf:56:4b:ce:85:c1:6e:49:
         2a:6b:d0:da:f1:e8:58:f0:18:a0:ac:6f:4f:5c:8a:48:2f:ed:
         a1:f1:00:0c:bb:85:1d:d5:63:98:14:5f:61:f9:e6:94:bf:1a:
         e4:1f:52:c2:1c:dc:cb:41:72:8e:de:90:45:f4:16:cd:0e:e8:
         6b:5f:01:41:2f:0c:98:5e:3e:cb:cf:6b:5c:6f:c8:4a:9c:0d:
         d1:06:6d:72:74:77:e1:c8:fa:26:d8:70:f8:22:ed:d4:04:53:
         68:70:b4:dd:60:11:18:5f:58:e4:54:79:f3:dd:96:06:0f:f8:
         82:0b:dd:a9:71:88:5b:ad:78:17:39:ac:4d:6b:da:5b:bd:db:
         88:28:83:26:58:3e:21:0b:12:08:f5:f2:4c:11:03:b6:2f:35:
         1e:0f:e2:fb:94:bf:0d:48:84:0e:62:9a:6d:fe:bd:38:c0:36:
         b5:01:a3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:31:15 2023 by rpki-client on console-fra.rpki-client.org