Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/81621fe4-f4a5-3c20-b7dc-63fda1e1bd7a.roa
File:                     81621fe4-f4a5-3c20-b7dc-63fda1e1bd7a.roa (raw, json)
Hash identifier:          qwxOo/duVxdZpU6BtyHlZxFoLw9MxlnzP8abks9aY3A=
Subject key identifier:   3C:25:CF:49:9C:90:3C:D2:EC:EA:00:B9:33:EB:CB:C6:CC:AB:79:8D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC166960D9031
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/81621fe4-f4a5-3c20-b7dc-63fda1e1bd7a.roa
Signing time:             Sun 21 Oct 2018 09:56:03 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.119.156.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:96:0d:90:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=6ea80e63-efe5-462e-a045-24321d1d91bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:82:50:2b:41:c4:81:64:04:2a:3a:c0:9e:bf:
                    21:bc:20:39:c3:5a:20:34:db:a9:56:39:77:f6:49:
                    7a:fe:dc:9f:de:a2:ae:06:e0:7c:ac:ab:27:f6:c8:
                    a1:a3:bb:f9:8f:d6:db:93:09:d6:24:bb:55:da:a9:
                    a0:13:ea:dd:91:83:4d:36:be:de:3e:62:8d:ee:e7:
                    e8:e2:04:cf:7b:22:79:e1:dc:7c:60:14:ae:ea:b6:
                    ae:9c:45:b5:70:69:24:7a:14:d0:39:fb:8a:04:c9:
                    e1:88:eb:67:4b:fe:81:b7:07:a8:26:d3:bc:a8:41:
                    70:60:68:0d:d9:9c:5f:24:ed:22:39:a6:01:5f:51:
                    2f:bd:d4:d9:5a:f4:41:0a:88:5e:0c:80:46:07:ac:
                    21:c5:36:a9:4d:a5:a8:01:05:1e:20:19:a5:77:ae:
                    2a:32:d2:82:dc:aa:00:b2:88:35:d7:82:cd:ac:1c:
                    42:32:39:2e:b3:a1:d1:31:d5:a4:49:90:4d:02:07:
                    c6:bc:50:a8:90:2b:ef:8c:e7:35:59:95:cb:5f:d7:
                    86:c0:6e:88:72:92:be:9d:32:61:eb:48:ab:4d:5c:
                    7f:19:4d:da:2a:83:a0:02:ba:c6:22:02:04:97:0c:
                    54:f4:03:6c:6c:7b:7d:8d:43:d5:54:3f:e7:bd:2a:
                    c7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:25:CF:49:9C:90:3C:D2:EC:EA:00:B9:33:EB:CB:C6:CC:AB:79:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/81621fe4-f4a5-3c20-b7dc-63fda1e1bd7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.119.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:5f:e7:3f:58:b1:5d:06:a2:f7:86:fa:5e:6e:ae:32:27:b3:
         fe:75:83:f8:b7:86:fd:7e:82:b3:df:a7:fb:0d:8c:5f:8c:ed:
         f7:ff:10:f1:f2:05:0e:44:47:13:eb:ba:e2:27:44:08:ff:6e:
         c4:d7:89:ce:67:3b:6d:57:56:2c:85:54:01:9f:8f:cf:29:ac:
         a9:d6:7c:4c:f7:b7:e6:b1:2e:0a:80:a2:40:02:5c:75:22:2f:
         05:51:0c:69:b3:8a:29:c7:fa:30:b9:51:04:da:1c:e9:c0:71:
         0e:ae:d6:2c:8d:78:98:48:5c:93:74:d5:3f:7f:46:a5:c0:be:
         81:91:8a:5b:80:5a:a9:7f:1f:24:e5:e8:90:45:12:db:4c:8b:
         c4:21:8f:ec:84:fa:06:55:b6:6c:69:72:d8:b2:f8:61:82:26:
         3c:64:32:8f:6b:b4:0c:0e:28:aa:d7:f9:2e:4a:ab:7b:5f:cd:
         e6:65:44:f9:8c:c7:0b:22:b8:de:32:3e:34:18:0a:eb:04:31:
         0a:e0:d1:c1:d9:56:11:26:f8:04:02:78:62:58:d5:d5:27:d0:
         d2:64:99:80:e2:f8:25:e5:e2:07:8c:28:1a:a1:99:29:c3:85:
         cc:65:a4:27:d9:3a:1c:a1:14:2d:32:b4:fa:37:ce:22:2d:a0:
         31:3a:af:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:33:09 2023 by rpki-client on console-fra.rpki-client.org