Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7fc1ad3b-f31a-35d6-b4ea-c1e9cde55eda.roa
File:                     7fc1ad3b-f31a-35d6-b4ea-c1e9cde55eda.roa (raw, json)
Hash identifier:          XI5slzdMAEJkl7BIixJLQj5kR+jj/9cYxIXViR783MQ=
Subject key identifier:   A0:20:FD:02:67:65:16:35:DA:66:F1:73:A8:DC:A6:36:38:A3:23:DA
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665D254100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7fc1ad3b-f31a-35d6-b4ea-c1e9cde55eda.roa
Signing time:             Wed 10 Oct 2018 08:43:34 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.231.242.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5d:25:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=d8ef7809-5941-4913-ba34-448b56552f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a7:85:7c:c4:75:4d:76:9a:35:af:00:97:eb:
                    16:97:d2:67:b3:30:0e:20:e0:b0:67:c8:f5:c7:96:
                    dc:16:e4:6b:6f:8e:84:7f:0e:ad:7a:f0:b7:6a:02:
                    d6:0c:f4:d1:bd:87:c2:03:b0:c8:8e:70:74:d3:8b:
                    07:b9:1c:23:21:5c:1a:a3:85:81:d2:2b:77:2f:c4:
                    3b:0b:16:ba:f4:73:f8:b7:06:3d:74:60:12:1b:03:
                    40:89:7e:7e:07:8d:e7:78:5e:7e:0a:37:15:80:ba:
                    50:4e:8b:7f:4e:4b:9c:3d:4f:03:ae:d0:e8:9f:77:
                    b9:a4:3f:49:cb:d5:9d:37:fa:e1:5e:de:1b:6f:95:
                    be:f5:47:1f:c4:34:75:e0:b8:5c:18:24:b8:09:f1:
                    ea:52:bd:ed:57:e5:6d:10:1d:37:71:28:78:d7:03:
                    59:ce:03:f9:e6:74:50:13:e5:f8:1b:a0:d0:7b:e0:
                    bc:6e:db:3d:07:05:8d:25:36:89:a3:7b:87:f1:e8:
                    3e:45:e0:2d:9c:ab:19:a6:11:ce:71:25:6c:33:fa:
                    05:90:9b:db:a3:44:db:d6:e1:a3:eb:d0:0d:ea:e9:
                    65:1f:80:b3:d6:c8:b8:fe:e1:f5:d3:15:c3:ae:62:
                    eb:33:3e:3a:d0:c7:5c:0a:60:d5:98:2c:60:fa:70:
                    45:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:20:FD:02:67:65:16:35:DA:66:F1:73:A8:DC:A6:36:38:A3:23:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7fc1ad3b-f31a-35d6-b4ea-c1e9cde55eda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.231.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:01:f1:97:f0:0d:7c:57:6f:f0:97:db:9b:7d:10:50:68:27:
         ab:36:fe:e3:e3:f7:a4:67:e3:9b:1e:8b:9d:4f:a0:af:69:27:
         e0:e3:27:22:1b:3c:42:60:be:a3:27:17:71:e9:1e:5e:9e:e2:
         74:c0:17:92:ba:35:20:c6:73:cd:67:48:65:78:02:28:7b:54:
         9e:b9:c2:77:91:1f:5c:52:6d:6e:7b:29:fb:07:9f:8c:11:87:
         37:b2:26:5d:a4:80:d1:89:cc:2f:21:8d:de:8f:24:49:2a:89:
         ea:65:5e:09:c7:69:f6:ad:b6:f4:01:b9:af:e2:c3:85:21:59:
         a2:c0:45:55:8c:e0:f8:9b:2e:a6:5e:d7:d3:d1:71:3a:a2:2c:
         f6:48:48:ad:93:51:70:d2:8f:13:d7:c1:ca:5c:c0:33:c2:58:
         8a:07:f7:3e:5f:b6:60:b3:8d:3f:d1:87:42:6b:e7:d4:20:9f:
         ad:d6:3d:a5:24:16:b8:36:5a:1d:29:db:6c:d7:bd:16:fb:8c:
         94:44:38:3d:4f:c8:7b:ee:c0:30:14:ca:8b:22:3a:9c:df:d2:
         8d:7d:a0:92:40:b5:e2:87:4c:54:1c:9b:29:46:11:c9:06:09:
         29:d9:50:82:b8:f6:d1:6e:ab:e0:f9:72:41:1f:e9:15:49:8b:
         91:ea:15:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:33:07 2023 by rpki-client on console-fra.rpki-client.org