Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/722c4e2d-492b-3fc5-881d-309007ab1299.roa
File:                     722c4e2d-492b-3fc5-881d-309007ab1299.roa (raw, json)
Hash identifier:          tiSesJgBL6Uu1CUFb0c6rLbxqDT4rx1w2mEuXhbCkps=
Subject key identifier:   64:C7:FC:C6:97:29:BD:5F:F8:B2:7C:CF:8A:E0:54:AC:7B:3D:68:AE
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16695B4E0F2
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/722c4e2d-492b-3fc5-881d-309007ab1299.roa
Signing time:             Sun 21 Oct 2018 08:19:11 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.231.229.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b4:e0:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=ec22ae81-14ab-46c5-9875-c9f48627d9db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0b:ed:8b:d4:c3:24:5d:dc:07:3c:1d:3a:96:
                    1d:18:80:ed:16:fe:cb:61:e4:98:e0:dd:83:16:69:
                    09:9b:9d:c9:24:5b:3c:96:30:ee:b9:c5:64:01:ad:
                    44:95:c0:cc:79:11:0d:81:ef:13:91:66:a2:ca:e7:
                    e3:93:04:76:48:35:14:c3:e2:d5:57:5a:63:00:a6:
                    fb:50:32:61:22:11:38:ca:2c:8b:47:8d:90:c7:87:
                    26:e8:29:54:44:45:d6:02:86:53:30:f5:ec:90:80:
                    c7:5d:e4:7d:9d:08:91:0c:4e:97:e5:60:fa:15:3c:
                    34:83:6f:38:e5:e7:25:88:41:e8:e2:37:91:99:96:
                    0a:0d:fa:3f:b5:ce:e8:1d:3a:5e:90:e6:16:0a:e1:
                    e4:65:06:8f:38:fb:9b:f9:d3:f0:4b:0d:f0:2e:99:
                    b2:c8:13:86:52:e4:fd:f8:77:77:76:13:60:46:8e:
                    e4:05:f9:d7:86:b0:6c:e0:d2:94:96:1c:e3:a0:fd:
                    7a:bc:52:01:4c:4e:22:3e:1e:b1:48:4b:e4:4b:0c:
                    42:cd:18:91:66:85:93:8a:6e:00:5a:fe:40:30:07:
                    12:c9:88:b7:51:c7:d9:3e:be:09:51:67:bd:0e:c5:
                    ac:3f:a2:16:a9:97:77:ca:bf:94:25:c4:27:a2:25:
                    c5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C7:FC:C6:97:29:BD:5F:F8:B2:7C:CF:8A:E0:54:AC:7B:3D:68:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/722c4e2d-492b-3fc5-881d-309007ab1299.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.231.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:ad:a6:f9:56:f8:8b:b9:88:10:aa:e5:ad:38:15:4b:47:33:
         e3:1d:cc:fb:ca:5b:db:ae:ae:52:8b:94:74:09:6f:55:20:fc:
         60:c1:80:94:f9:64:cd:28:0e:bd:e9:e9:e7:19:5d:91:e0:4e:
         1e:c1:3e:11:45:d2:59:7d:eb:28:70:0a:6b:44:6c:90:42:13:
         15:a2:03:f0:a6:ea:5b:04:4a:e4:e0:d2:5c:44:7c:3f:71:e4:
         bc:4d:55:1c:56:c8:d8:5e:1b:d4:6f:17:16:2b:b7:2c:18:fa:
         66:9d:a2:c9:6d:8b:3f:c9:bc:1f:13:7f:3a:df:50:4d:7c:f1:
         18:96:8d:1b:97:57:7e:66:b7:13:95:56:d7:ce:d2:82:83:00:
         dc:d6:02:73:69:cd:f4:17:19:f6:ea:f2:32:fe:7a:25:e1:b4:
         42:86:47:52:43:5c:b2:19:74:95:70:5b:20:55:40:b0:a3:a4:
         62:8d:c7:ac:c9:e4:80:3b:50:5d:d9:3c:8c:4f:01:bd:99:eb:
         e3:03:68:e5:c9:fb:9b:87:3a:42:47:52:d9:0a:85:10:4c:3e:
         4d:32:ff:c9:43:09:71:33:89:e7:77:67:cb:b2:28:4a:17:4b:
         0e:8f:91:91:58:0e:de:d9:ae:43:e1:3e:ad:22:f8:05:30:26:
         66:fa:2d:cd
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZpW04PIwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEwMjEwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJGVj
MjJhZTgxLTE0YWItNDZjNS05ODc1LWM5ZjQ4NjI3ZDlkYjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMYL7YvUwyRd3Ac8HTqWHRiA7Rb+y2HkmODdgxZp
CZudySRbPJYw7rnFZAGtRJXAzHkRDYHvE5Fmosrn45MEdkg1FMPi1VdaYwCm+1Ay
YSIROMosi0eNkMeHJugpVERF1gKGUzD17JCAx13kfZ0IkQxOl+Vg+hU8NINvOOXn
JYhB6OI3kZmWCg36P7XO6B06XpDmFgrh5GUGjzj7m/nT8EsN8C6ZssgThlLk/fh3
d3YTYEaO5AX514awbODSlJYc46D9erxSAUxOIj4esUhL5EsMQs0YkWaFk4puAFr+
QDAHEsmIt1HH2T6+CVFnvQ7FrD+iFqmXd8q/lCXEJ6IlxRkCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBRkx/zGlym9X/iyfM+K4FSsez1orjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjLzcyMmM0ZTJkLTQ5MmItM2Zj
NS04ODFkLTMwOTAwN2FiMTI5OS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADbn5TBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAK62m+Vb4i7mIEKrlrTgVS0cz4x3M+8pb266uUouUdAlvVSD8YMGAlPlkzSgO
venp5xldkeBOHsE+EUXSWX3rKHAKa0RskEITFaID8KbqWwRK5ODSXER8P3HkvE1V
HFbI2F4b1G8XFiu3LBj6Zp2iyW2LP8m8HxN/Ot9QTXzxGJaNG5dXfma3E5VW187S
goMA3NYCc2nN9BcZ9uryMv56JeG0QoZHUkNcshl0lXBbIFVAsKOkYo3HrMnkgDtQ
Xdk8jE8BvZnr4wNo5cn7m4c6QkdS2QqFEEw+TTL/yUMJcTOJ53dny7IoShdLDo+R
kVgO3tmuQ+E+rSL4BTAmZvotzQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:36:20 2023 by rpki-client on console-ams.rpki-client.org