Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5e40a45d-a34b-326e-ac50-1643cea8d754.roa
File:                     5e40a45d-a34b-326e-ac50-1643cea8d754.roa (raw, json)
Hash identifier:          dm+aRwf7GVtszwy7+ihgZCQWWVXhAYHhjJXLB10Gd68=
Subject key identifier:   4C:CD:9A:13:13:D7:43:E5:3B:DB:FD:21:8B:DD:0A:39:C9:55:E4:D9
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16816DB2BFF
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5e40a45d-a34b-326e-ac50-1643cea8d754.roa
Signing time:             Fri 04 Jan 2019 03:14:48 +0000
ROA not before:           Fri 04 Jan 2019 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        13.208.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:68:16:db:2b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan  4 05:00:00 2019 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=126ca0c6-8014-4ad7-bfe9-470b34a0e6b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b2:99:4d:cb:db:46:89:9c:8d:ce:17:d4:83:
                    f7:35:a6:44:b4:b4:0d:d6:e4:68:aa:ec:cf:c6:93:
                    8d:1e:02:74:b4:8c:3c:87:d3:87:a4:a9:cb:e4:5f:
                    28:1f:da:32:af:f5:1f:2d:60:75:4e:4b:f3:17:4c:
                    19:86:59:50:6e:e0:68:de:c4:98:6e:12:53:5a:98:
                    f8:ac:89:35:d3:86:29:39:7a:01:f5:b9:2e:a9:db:
                    2d:c3:30:bd:96:c3:89:b0:e4:56:be:52:8b:fc:e0:
                    1d:14:e1:f3:e6:a6:bc:cb:c6:9d:bb:e6:e5:f2:88:
                    36:5a:6e:d9:56:37:1f:47:db:bd:71:85:45:21:55:
                    9c:39:7f:86:d0:1e:4b:62:da:89:ae:3c:f8:b2:3f:
                    b3:f2:17:2c:4c:7b:65:b5:0c:31:8e:f9:5f:cf:d3:
                    7e:7f:3d:f5:6b:e0:c2:13:72:12:b0:de:7d:3c:88:
                    e9:2d:e4:17:7f:25:16:c9:82:7e:e9:70:7d:3b:01:
                    84:c7:be:7e:95:af:65:6c:07:c2:12:8f:cd:96:b9:
                    d4:38:b9:e2:e7:ed:0f:6c:b5:4e:fa:46:a0:48:eb:
                    c3:33:5a:41:9d:07:ad:1d:f9:6a:32:dd:99:19:ad:
                    ff:3a:a0:36:84:29:b4:c0:09:d0:9a:fa:9f:51:58:
                    87:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:CD:9A:13:13:D7:43:E5:3B:DB:FD:21:8B:DD:0A:39:C9:55:E4:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5e40a45d-a34b-326e-ac50-1643cea8d754.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.208.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:f3:05:57:7d:69:c1:a2:bc:fc:96:88:42:29:a9:ac:2d:56:
         ef:0c:94:66:a4:3d:a4:eb:21:42:2b:5d:64:8d:a0:dd:5c:4a:
         c4:ed:c5:c6:26:75:7c:ed:0d:9d:8c:0b:0b:a8:6c:96:24:e8:
         c7:5a:fe:bf:e1:03:d4:5a:43:1b:57:85:41:db:ca:80:15:08:
         db:0c:1d:7a:8e:be:23:98:46:42:1f:d9:f6:4e:b5:40:af:79:
         08:13:2b:5e:7a:f8:fa:c3:3c:12:ef:fa:90:0a:26:40:cf:f5:
         e3:1f:c2:a2:21:75:aa:60:6a:a0:41:53:02:f9:33:59:af:24:
         08:c9:0e:d3:e9:50:08:81:a4:9a:5d:a1:a5:5b:78:54:0d:f8:
         b0:bc:de:92:53:d9:ae:18:49:f4:8c:e5:ed:0a:3c:ef:62:a4:
         61:16:8f:23:ed:b2:8f:69:31:a6:06:de:85:de:e8:e0:17:ca:
         56:4a:de:3b:20:8e:0c:91:88:13:67:12:76:4f:36:99:6e:53:
         92:e9:a3:0d:31:40:23:59:1d:d1:ae:97:81:e4:6f:7f:67:5c:
         a3:6c:f2:72:c5:11:50:64:99:7c:04:83:5c:ff:0a:28:89:a2:
         bb:8a:98:a8:8b:e0:39:63:9e:3a:99:5a:c0:34:7e:82:87:c7:
         18:22:bd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:32:11 2023 by rpki-client on console-fra.rpki-client.org