Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/41420b02-2d4b-3f07-aca5-182526d54fd4.roa
File:                     41420b02-2d4b-3f07-aca5-182526d54fd4.roa (raw, json)
Hash identifier:          COSSMVHpaBH+VC4ADO1AwyYfleQkeVYd8f6V4betTCU=
Subject key identifier:   83:A0:64:DF:5F:1D:2A:E1:51:DC:8E:FA:9D:0D:23:36:60:AD:57:34
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665CD4E0B7
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/41420b02-2d4b-3f07-aca5-182526d54fd4.roa
Signing time:             Wed 10 Oct 2018 07:15:47 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.219.40.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:d4:e0:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=d01abe34-116c-4114-b2ed-67b55223608b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f6:ea:a3:03:69:59:bb:79:7a:30:f9:87:90:
                    f2:d7:21:2d:f7:11:a7:14:cd:67:5c:a6:e3:25:c5:
                    1a:ff:98:91:a7:81:b8:4f:c9:b2:11:d2:34:9c:0d:
                    7c:b3:6c:d8:e0:07:d7:38:35:03:50:81:42:94:7b:
                    4b:16:94:88:60:2e:52:18:40:2a:42:f3:13:98:63:
                    0e:d1:ae:a4:cd:88:29:28:ce:ff:6e:ad:d6:05:9e:
                    4e:ec:f3:43:70:36:2f:ed:2c:9c:c1:87:46:58:d9:
                    b5:76:e5:1c:1f:fe:0e:c8:e1:0a:5a:98:18:e0:e9:
                    93:3e:5a:ec:c7:34:47:87:40:d5:d1:fb:10:25:06:
                    43:60:9f:0c:0e:15:6c:7e:d3:21:b6:7b:d4:3f:9c:
                    e3:b4:1c:36:77:91:b2:95:d1:93:f6:09:65:eb:6c:
                    ac:a9:26:c5:79:89:da:64:55:47:57:0b:98:06:7d:
                    d2:7d:64:ae:db:77:39:20:c3:81:d4:f4:91:50:24:
                    59:04:93:0d:9e:5e:86:0b:29:8e:48:41:60:1a:fb:
                    21:00:82:17:1b:32:42:8f:0b:51:49:92:bd:e2:c2:
                    01:c6:6e:7d:31:17:61:22:75:b9:e5:be:53:7c:bf:
                    04:b4:cc:bb:2f:58:41:eb:ca:d0:12:6b:b4:90:4a:
                    11:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A0:64:DF:5F:1D:2A:E1:51:DC:8E:FA:9D:0D:23:36:60:AD:57:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/41420b02-2d4b-3f07-aca5-182526d54fd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.219.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:63:0d:37:7e:6b:c5:ed:8c:e1:75:fa:04:f5:0b:7f:f7:5b:
         b8:8c:e1:95:c2:28:2c:42:a1:00:d1:f7:9e:00:81:2e:76:b2:
         17:4d:78:43:e0:b6:41:2d:a1:1e:ae:d5:93:97:b5:31:5c:90:
         df:c6:e5:82:b8:c3:05:cd:06:2c:ce:95:61:dd:db:c5:f5:1e:
         55:69:59:2c:91:cb:e2:70:ba:c1:2c:24:9d:d5:c5:f5:e0:c6:
         b8:3a:a1:44:2d:dc:8b:51:04:04:f8:fc:a6:4d:08:cc:59:92:
         39:38:d7:bd:45:fd:12:a7:3d:d0:43:8f:61:e2:ad:88:e8:11:
         93:5a:53:7d:1f:73:44:6b:26:62:4a:65:b3:9e:38:00:6a:eb:
         6d:bf:34:d8:d3:f4:84:06:f8:1e:09:62:41:46:b9:f7:8d:98:
         1a:44:02:7a:b3:79:00:40:71:29:2b:99:41:20:70:db:94:ed:
         33:1b:6c:92:1e:fe:4d:13:4e:4e:ef:63:9f:3f:38:f7:5b:e2:
         5c:92:11:8f:fc:0a:5b:53:fc:0e:61:5c:d8:d3:e5:8f:90:b0:
         59:b1:4e:4c:0e:fe:e4:99:b9:a2:f4:40:e7:30:32:26:b2:22:
         89:9c:74:41:a4:f9:f6:ea:91:77:b7:e7:bb:ec:9a:4f:94:e6:
         7e:f9:f8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:34:49 2023 by rpki-client on console-ams.rpki-client.org