Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/779e57fa-884f-348c-864c-d7857e8f7898.roa
File:                     779e57fa-884f-348c-864c-d7857e8f7898.roa (raw, json)
Hash identifier:          otxdpJF22e3Yqsf4IFwVew9Dk9sJh6r7DjiIM0WXTpw=
Subject key identifier:   AD:76:BB:AC:7A:51:5B:C1:6C:FB:36:45:79:CE:0E:38:E4:3C:45:AF
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16695B5512B
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/779e57fa-884f-348c-864c-d7857e8f7898.roa
Signing time:             Sun 21 Oct 2018 08:19:39 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.240.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b5:51:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=af9104fb-ec64-47f2-a851-4cadf42366c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:73:c7:49:9c:64:7c:ca:cc:51:af:2d:f9:b8:
                    45:2e:42:12:1b:26:d9:4e:c0:e1:f4:52:32:37:4e:
                    1a:87:61:9e:90:af:c6:a5:ec:52:6c:54:26:0f:12:
                    41:9e:49:c3:2b:a1:71:7d:ff:57:3b:03:09:40:81:
                    ac:f3:1a:04:e7:f1:60:6f:49:7b:2f:d2:b4:c2:aa:
                    96:a6:8d:72:c2:b6:a9:d7:93:94:f6:b0:bf:5f:93:
                    65:69:11:9f:ad:4f:42:2d:50:ad:70:45:0f:1b:e5:
                    b3:4f:44:25:46:8e:13:f5:11:f4:b2:63:72:d1:58:
                    ff:16:d7:ef:79:02:84:fd:92:fa:66:b9:ec:35:76:
                    bf:88:59:41:81:13:87:f9:4e:e4:18:f8:47:7b:3a:
                    3a:4a:25:bd:99:04:a1:cb:7c:42:3e:63:02:1c:1e:
                    17:34:85:8d:17:2c:f2:4a:73:32:56:97:9b:36:6c:
                    5e:4b:63:0b:0e:c5:89:85:ba:84:5f:27:37:71:53:
                    be:f1:06:cb:07:b5:ca:1a:1b:6f:28:ce:f8:99:11:
                    b3:41:88:34:d7:c7:e7:53:e1:bc:36:b4:38:0d:46:
                    88:19:63:c0:0e:fd:72:73:50:9a:06:12:19:04:db:
                    ff:81:23:c4:27:10:11:5a:a0:18:02:35:21:d4:db:
                    86:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:76:BB:AC:7A:51:5B:C1:6C:FB:36:45:79:CE:0E:38:E4:3C:45:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/779e57fa-884f-348c-864c-d7857e8f7898.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.240.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:1f:48:4b:1f:6a:a3:99:aa:68:34:66:5b:c1:0a:7a:95:2e:
         fe:04:3c:f9:64:e6:3c:49:08:e5:db:3e:48:c4:ca:f7:c6:6d:
         4f:c1:ef:30:58:6d:d7:e7:0c:b1:33:04:81:ed:5c:ce:b6:e7:
         80:96:41:f6:84:30:b6:62:2e:9c:a6:5c:40:a4:ff:4d:50:7a:
         ee:88:00:d0:8a:50:6a:c6:ed:f0:0b:62:e8:3f:1d:aa:62:9d:
         3e:29:5a:b5:ba:95:1b:2a:86:18:74:13:fe:e5:99:36:a6:54:
         14:ae:98:72:1c:ec:95:e5:a0:eb:72:9e:b5:c2:79:70:a6:38:
         6b:b1:53:fe:95:40:d1:30:6f:4f:0d:8e:05:e7:f9:2a:92:5d:
         10:c3:19:a6:57:5a:ee:f0:cb:66:09:e2:82:17:88:d5:c8:7d:
         6d:ea:a4:55:84:11:6d:a5:ea:51:99:75:45:10:f3:1a:75:d7:
         89:e7:e3:6f:94:a3:5e:3d:26:34:db:fa:40:91:c8:ed:e3:6c:
         0a:1f:48:27:c8:af:f5:ec:9a:85:9f:1d:ca:f7:cc:d1:d5:2e:
         45:cd:28:b8:1e:be:db:e4:5f:29:3e:9a:1a:b0:1b:e7:f3:9f:
         7d:d7:ea:48:01:ef:22:0b:c7:78:ee:31:ab:95:38:76:b0:d3:
         92:41:18:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:32:55 2023 by rpki-client on console-fra.rpki-client.org