Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/39728956-e342-3109-bb98-080e8cf08976.roa
File:                     39728956-e342-3109-bb98-080e8cf08976.roa (raw, json)
Hash identifier:          ZnBG7kEWhh76nuCUGuxdBKWP/QTVHkyzqzjSpQlYPfU=
Subject key identifier:   A5:F1:51:EA:2F:C5:24:4A:DA:50:85:49:60:23:65:24:4E:3D:F4:6D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16695B293CE
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/39728956-e342-3109-bb98-080e8cf08976.roa
Signing time:             Sun 21 Oct 2018 08:16:40 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        13.112.0.0/14 maxlen: 14

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b2:93:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=587ef04f-8017-4733-a951-32d81b2b9ed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4b:5d:5f:f5:2d:56:94:dc:e4:d3:82:1a:90:
                    52:02:0a:72:44:2f:be:19:47:de:05:0d:bb:6d:9a:
                    d6:92:95:f7:cc:8f:52:30:5a:e1:12:1a:61:d1:30:
                    47:cd:63:0f:e2:cf:c4:18:29:86:54:9a:be:1a:fc:
                    b0:0c:a2:2d:0b:43:74:01:bf:04:20:f0:e3:e7:71:
                    9b:22:9a:3b:c7:78:8c:5e:8d:da:52:97:ee:7f:8f:
                    1e:65:cb:86:9c:4f:43:6d:f0:fd:89:06:9b:c0:26:
                    d0:45:ef:df:3f:b7:ea:82:b6:0a:1a:d2:45:ff:53:
                    62:65:6f:3a:7e:09:8c:f6:12:71:7a:55:9a:09:45:
                    24:0a:c6:01:08:70:bf:5c:d7:37:7b:c1:22:fa:29:
                    02:62:52:40:88:4e:b5:4f:e4:08:ce:1f:ef:bd:99:
                    ef:64:5c:95:ec:1a:cc:ca:09:88:24:90:68:04:4d:
                    c0:64:1a:ee:72:9c:2d:ab:90:c0:55:69:dd:ba:d3:
                    6e:70:1e:24:d0:91:f9:58:da:ba:04:75:e9:28:1f:
                    1d:25:c5:98:92:75:e9:d1:06:4e:38:12:fb:9c:27:
                    cd:b9:d7:03:2f:26:9c:d9:66:f8:39:b4:96:4d:d9:
                    9e:24:cc:72:12:59:a3:83:61:28:e0:a6:a0:22:84:
                    2e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F1:51:EA:2F:C5:24:4A:DA:50:85:49:60:23:65:24:4E:3D:F4:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/39728956-e342-3109-bb98-080e8cf08976.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.112.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:12:17:88:32:42:b3:b5:6e:4c:96:b8:c8:1c:20:d2:28:d8:
         e6:77:03:67:72:a7:c1:b3:b2:26:50:55:b5:8b:61:80:62:51:
         c7:1a:2d:1b:e9:21:f7:e2:a0:48:82:5e:7b:3e:f0:f4:88:c3:
         91:94:1b:3a:20:1f:5f:ce:aa:8e:e3:a5:82:52:62:5f:26:e8:
         44:e4:96:e9:d8:d8:b9:db:3b:df:28:50:d4:be:37:de:22:94:
         9d:20:77:45:b5:f2:e3:e8:68:b0:1b:1a:d6:79:b3:ac:70:b8:
         66:29:8f:a7:b4:aa:3d:ee:00:89:15:92:13:7e:b4:45:ca:8c:
         00:16:56:95:e1:6c:23:96:b4:47:36:91:7f:f0:3e:b5:73:b8:
         a6:08:70:33:39:05:39:2a:cf:6d:33:8e:80:f6:a7:6d:4f:f5:
         69:e2:69:a7:0c:05:49:86:3d:55:ff:e2:61:ca:c3:7b:77:32:
         09:b8:14:9b:3f:28:c8:84:7b:0d:fb:74:eb:d1:6a:2c:87:89:
         6d:57:df:25:da:12:5f:4b:24:72:cf:6e:ab:d3:f6:07:94:82:
         5a:be:95:20:28:b1:e2:ad:03:39:05:e7:16:13:ea:01:77:5e:
         11:3b:1c:04:bd:08:e3:c5:a4:32:b2:a7:fa:fa:2c:32:11:4c:
         6a:29:f8:07
-----BEGIN CERTIFICATE-----
MIIGPjCCBSigAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZpWyk84wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEwMjEwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJDU4
N2VmMDRmLTgwMTctNDczMy1hOTUxLTMyZDgxYjJiOWVkOTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANVLXV/1LVaU3OTTghqQUgIKckQvvhlH3gUNu22a
1pKV98yPUjBa4RIaYdEwR81jD+LPxBgphlSavhr8sAyiLQtDdAG/BCDw4+dxmyKa
O8d4jF6N2lKX7n+PHmXLhpxPQ23w/YkGm8Am0EXv3z+36oK2ChrSRf9TYmVvOn4J
jPYScXpVmglFJArGAQhwv1zXN3vBIvopAmJSQIhOtU/kCM4f772Z72RclewazMoJ
iCSQaARNwGQa7nKcLauQwFVp3brTbnAeJNCR+VjaugR16SgfHSXFmJJ16dEGTjgS
+5wnzbnXAy8mnNlm+Dm0lk3ZniTMchJZo4NhKOCmoCKELiUCAwEAAaOCA1QwggNQ
MB0GA1UdDgQWBBSl8VHqL8UkStpQhUlgI2UkTj30bTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjLzM5NzI4OTU2LWUzNDItMzEw
OS1iYjk4LTA4MGU4Y2YwODk3Ni5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAg1wMFQGA1Ud
IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu
YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwCwYJKoZIhvcNAQELA4IB
AQCrEheIMkKztW5MlrjIHCDSKNjmdwNncqfBs7ImUFW1i2GAYlHHGi0b6SH34qBI
gl57PvD0iMORlBs6IB9fzqqO46WCUmJfJuhE5Jbp2Ni52zvfKFDUvjfeIpSdIHdF
tfLj6GiwGxrWebOscLhmKY+ntKo97gCJFZITfrRFyowAFlaV4WwjlrRHNpF/8D61
c7imCHAzOQU5Ks9tM46A9qdtT/Vp4mmnDAVJhj1V/+JhysN7dzIJuBSbPyjIhHsN
+3Tr0Wosh4ltV98l2hJfSyRyz26r0/YHlIJavpUgKLHirQM5BecWE+oBd14ROxwE
vQjjxaQysqf6+iwyEUxqKfgH
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:34:39 2023 by rpki-client on console-ams.rpki-client.org