Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/47ef3a0f-62be-3596-b6da-cbcdc2fe51af.roa
File:                     47ef3a0f-62be-3596-b6da-cbcdc2fe51af.roa (raw, json)
Hash identifier:          f+x53ZJf9W5ER9hVxjS/f1kgNjm/LxOckx7BpY6AOYM=
Subject key identifier:   E5:7C:75:DB:C1:CC:DD:40:78:F9:94:1A:18:E9:8B:85:32:59:49:5C
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16695B5AF01
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/47ef3a0f-62be-3596-b6da-cbcdc2fe51af.roa
Signing time:             Sun 21 Oct 2018 08:20:03 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.249.64.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b5:af:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=8b5832c4-7a6a-4c1d-b3d1-4ae54328af38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:56:b0:a1:fb:a4:c4:ac:08:84:0b:c3:87:03:
                    36:f7:82:5b:95:63:cc:bd:39:c9:eb:6e:da:46:b8:
                    b3:51:a7:c1:85:eb:31:91:f4:24:20:de:ec:76:e5:
                    5d:cf:68:c8:16:e6:f5:70:5d:37:7d:29:ee:90:33:
                    72:1e:71:71:93:43:5a:de:33:c1:6c:fd:6e:f2:14:
                    1a:56:18:04:cf:61:c6:cf:bb:ac:ae:ce:05:9b:fb:
                    ea:ea:f3:07:83:15:0b:5b:c3:30:2d:0c:a2:cb:fe:
                    24:f6:9d:85:d9:1c:b0:40:f1:68:1c:02:a5:e7:9d:
                    60:12:5a:d9:a6:3b:b5:a7:35:19:e6:29:ca:63:2e:
                    7f:2c:96:c8:06:f9:1c:a6:3a:40:1f:e3:5d:3c:26:
                    0d:a3:17:98:32:0e:36:6c:f4:38:b5:e7:64:aa:94:
                    ad:5c:e8:b1:8d:8e:e6:eb:09:ca:9e:04:8d:12:e8:
                    69:29:e9:db:f2:4a:12:8c:16:ac:5d:a2:d0:c0:3b:
                    bc:82:60:7b:c4:2d:5c:03:4e:ee:9b:86:cf:4d:e4:
                    71:22:c1:00:8d:5e:18:e6:4e:d6:14:26:a8:5c:d0:
                    9d:f8:f5:87:02:a3:ae:c7:2e:2b:93:fb:1e:b7:a1:
                    dc:81:2a:99:48:d7:ec:51:6a:66:58:bd:f1:44:48:
                    4c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:7C:75:DB:C1:CC:DD:40:78:F9:94:1A:18:E9:8B:85:32:59:49:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/47ef3a0f-62be-3596-b6da-cbcdc2fe51af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.249.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:a8:2a:f9:4c:94:a6:08:85:f7:c7:f4:88:05:8d:64:43:bd:
         d3:c7:10:73:ff:4b:e4:68:ac:a5:93:56:45:b1:83:5a:6e:25:
         2d:48:57:d8:53:11:0d:4e:45:23:84:2c:06:68:2b:0e:3c:9a:
         de:e5:2f:79:ff:3c:e8:22:46:7b:2e:fc:ce:27:0b:47:cc:3e:
         67:15:23:47:2a:90:03:cf:80:1d:ea:1b:cb:a6:e6:43:63:fc:
         d7:31:2a:90:e9:bd:1f:cb:2a:b3:a8:36:05:74:de:a7:40:c2:
         af:aa:98:18:00:f7:e3:dd:19:35:db:15:90:02:0a:eb:dd:d0:
         28:bd:62:34:57:eb:22:0f:29:80:83:85:cf:ce:b9:fb:8b:1e:
         1d:a9:b2:c0:a5:77:74:83:d8:e3:fd:27:25:80:dc:51:b2:ed:
         b5:a3:af:04:20:45:69:0c:ab:1a:fe:1a:57:85:d0:37:3c:18:
         29:d3:3c:69:8b:85:93:73:4c:77:11:54:3c:92:94:6e:b4:f8:
         b1:83:b3:69:42:69:87:4b:6f:f8:af:a6:09:2d:f1:ff:36:87:
         b2:01:e4:34:1f:8a:c9:3e:28:54:52:6e:84:59:ca:6f:2b:2e:
         5f:93:5b:41:79:28:95:c8:4a:d9:da:df:87:84:48:31:79:f5:
         35:c1:ab:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:31:39 2023 by rpki-client on console-fra.rpki-client.org