Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4e8f9ce8-5f14-396c-8f2a-4441bbd6a7a1.roa
File:                     4e8f9ce8-5f14-396c-8f2a-4441bbd6a7a1.roa (raw, json)
Hash identifier:          e9gVvAQrA0gibcTOQR3sMY94yCLUq+tEEFV12kf+ZO0=
Subject key identifier:   14:E2:89:11:C8:8E:7F:96:04:28:5A:11:80:B5:39:DD:28:15:8E:D5
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665C2EB7AB
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4e8f9ce8-5f14-396c-8f2a-4441bbd6a7a1.roa
Signing time:             Wed 10 Oct 2018 04:14:17 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.92.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:2e:b7:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=a4216dab-9293-4bac-a280-ade902e34996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c7:ce:a7:2c:9e:b4:66:36:1a:83:23:fd:2f:
                    06:a8:2e:4b:3f:1b:37:40:f8:7d:e7:1a:c7:b7:cf:
                    72:ea:8c:73:bd:37:d9:3b:df:89:85:e8:6d:08:18:
                    8f:2c:24:7d:48:87:b7:39:a5:77:f0:69:01:6d:a2:
                    b6:3a:3c:f6:d1:77:69:f0:5a:f0:a1:7c:f0:13:e1:
                    e6:ce:7a:a6:07:0a:e2:41:10:05:18:9f:d6:53:cc:
                    49:f3:ec:39:22:f2:ac:9e:c2:d4:62:09:87:a4:ea:
                    3c:80:53:e8:70:d7:d5:a8:0c:1a:fe:ef:a3:6c:f6:
                    91:6e:ce:2e:35:89:ea:78:0a:75:24:4d:2f:bf:41:
                    bf:f6:3c:cd:75:da:ed:77:71:a2:cc:70:5a:45:b5:
                    5c:ec:f2:49:2b:b9:31:2e:01:6a:de:c6:1f:59:fc:
                    c2:60:f1:56:5b:e2:64:35:c1:79:c7:8b:34:78:d4:
                    94:87:93:97:7a:f9:8d:65:3c:1b:9d:bc:a0:df:41:
                    51:82:60:ca:6e:4f:f6:9e:4b:b7:3c:e1:78:00:25:
                    6b:b2:50:2a:10:0f:cd:f4:08:6b:82:a3:de:f4:20:
                    f5:bc:36:10:a4:1b:60:ec:76:c8:25:70:f9:36:92:
                    ae:25:51:b2:8c:ee:3b:28:21:e6:c1:ec:e8:24:cd:
                    d7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E2:89:11:C8:8E:7F:96:04:28:5A:11:80:B5:39:DD:28:15:8E:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4e8f9ce8-5f14-396c-8f2a-4441bbd6a7a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.92.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:77:64:43:cd:ec:91:75:ae:31:d4:23:92:8f:d5:c3:45:a9:
         da:c3:17:ea:86:90:6d:52:04:8b:82:7d:6e:4b:cb:be:c3:29:
         c4:b6:c7:29:bf:5b:78:12:4d:9f:dc:61:1f:6a:d8:1d:99:3c:
         23:50:f1:4f:0f:f6:2e:4e:c2:f4:38:43:67:f3:47:42:eb:7f:
         82:9c:ef:43:82:88:9a:39:bf:cf:b1:74:84:0b:23:62:fa:19:
         e1:62:8c:e8:56:72:9b:60:8b:5c:ac:6a:fc:24:46:eb:b9:c0:
         d5:80:71:2d:63:8f:0d:f8:b1:af:92:fb:fc:19:53:54:54:61:
         23:60:29:3c:5a:a5:b2:e4:dc:cc:9a:c2:e8:2c:b9:cd:a9:5a:
         f0:3b:b4:8e:fd:14:90:66:7e:5d:90:32:d5:37:34:45:6b:ce:
         0f:d5:31:88:54:b5:05:d0:bc:9d:b0:94:30:35:15:8d:44:d5:
         38:6f:13:7e:93:c0:54:6c:d2:b6:b9:5b:61:26:2c:87:30:fe:
         5b:da:ae:1b:a0:db:70:02:03:26:7b:9b:47:a0:8d:b5:40:39:
         b7:21:d7:dd:f3:fb:01:36:8b:79:c7:a1:75:c7:64:8e:98:b4:
         0b:d6:9c:cf:7b:8b:2b:9e:86:7c:01:0f:6a:7e:df:aa:c0:45:
         a7:03:07:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:35:16 2023 by rpki-client on console-ams.rpki-client.org