Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/75273e27-6cc7-31de-8f1c-9c040d250b10.roa
File:                     75273e27-6cc7-31de-8f1c-9c040d250b10.roa (raw, json)
Hash identifier:          r4AizjAueIJuc4p6XA95s61IGmws9DOnGRxVQZdcJqk=
Subject key identifier:   48:4F:DF:B6:D1:9D:CC:6C:33:DF:53:A6:71:39:F9:AB:23:71:2A:27
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665C080065
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/75273e27-6cc7-31de-8f1c-9c040d250b10.roa
Signing time:             Wed 10 Oct 2018 03:32:00 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.218.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:08:00:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=9d8ee469-6171-4538-984a-a16bbd2103fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ee:9c:48:b8:1c:9c:9a:53:bd:ce:7d:1f:4f:
                    23:8a:69:6d:3f:dc:91:85:70:85:33:51:46:69:97:
                    71:37:23:56:a1:8f:5c:46:ed:1c:5b:6f:ea:e1:0b:
                    3a:d6:aa:54:07:b0:4b:d9:72:bb:f3:b9:a7:20:dd:
                    ca:1d:f5:47:cb:4d:3e:4e:e9:b7:9a:a6:eb:f6:8f:
                    08:db:dc:1c:31:21:bc:a5:f0:ac:45:03:59:7b:2f:
                    04:ea:a8:c6:3d:15:17:f4:c1:27:02:06:91:03:ea:
                    11:64:c4:69:56:85:a3:b8:06:5f:e1:c1:70:a3:04:
                    ab:e3:18:38:28:6b:bc:fa:b7:94:ba:4b:90:5d:96:
                    d7:5e:ec:dd:c6:e4:ae:d5:08:c0:51:12:ff:65:46:
                    cf:e6:48:65:cf:04:97:99:60:46:87:d7:94:21:6d:
                    1d:a1:6f:0b:97:a5:2b:13:c0:55:32:b3:1b:b2:02:
                    8f:12:f2:ec:01:06:7e:a2:c1:e4:29:02:23:f8:fd:
                    7a:6f:db:19:06:b0:6c:33:28:e5:5e:7e:6e:fe:e0:
                    0f:ba:7f:d4:aa:8c:9e:36:5b:56:69:2c:0e:14:3b:
                    38:31:73:ea:79:f5:5b:09:d8:b0:28:61:2f:1c:42:
                    5c:41:41:9e:be:b1:19:1c:8c:c7:a6:13:2a:bb:99:
                    ab:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4F:DF:B6:D1:9D:CC:6C:33:DF:53:A6:71:39:F9:AB:23:71:2A:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/75273e27-6cc7-31de-8f1c-9c040d250b10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.218.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:ee:56:61:19:02:38:52:21:14:4b:c4:8d:91:ac:6b:f1:47:
         5f:eb:01:ea:21:6c:0d:14:61:97:88:b6:90:28:bc:da:72:a9:
         55:8f:4b:83:bf:3e:93:99:9e:5b:03:dc:45:60:29:00:b3:49:
         ac:d4:37:c9:f4:c9:99:fd:27:0c:bf:f1:80:cf:bf:76:a3:ee:
         c0:d7:cf:90:3d:74:e8:0b:63:65:0a:45:e8:cf:af:6a:ab:b5:
         50:51:d4:f9:d6:7d:e2:63:ae:27:57:6d:ce:6e:09:71:aa:89:
         b5:7a:a9:0c:f7:69:13:6f:d0:3c:65:85:f0:77:2a:15:ff:9d:
         b1:a5:ed:21:4e:8a:91:c1:d1:a9:bc:76:42:60:ee:6b:76:f1:
         0e:a6:27:8d:93:e0:c6:6d:56:2f:18:34:27:d6:05:27:7a:63:
         ad:27:6c:f2:7b:21:6c:c8:de:bc:3a:df:12:86:20:22:e0:2c:
         b1:9a:bd:ef:c5:5f:f7:09:7f:aa:ca:13:e2:18:3f:fe:cd:d0:
         df:1d:89:24:65:9a:02:d1:5b:8a:e0:49:ed:44:1f:5b:a1:0c:
         0b:48:19:15:f2:5e:4d:3d:72:90:ed:6b:c9:b7:e6:ea:ca:c4:
         93:50:1d:4b:76:a9:2f:8e:23:f3:c7:4f:f1:eb:73:66:b9:86:
         b7:70:db:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:36:24 2023 by rpki-client on console-ams.rpki-client.org