Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/87de59f0-2e07-3deb-97bb-6398e9b27275.roa
File:                     87de59f0-2e07-3deb-97bb-6398e9b27275.roa (raw, json)
Hash identifier:          6zoO2iS4usEZu9s8X0lV83VLuQYkllwyVeYxriRxBUA=
Subject key identifier:   C3:18:7C:AD:C7:AD:AB:86:B6:29:4A:34:8A:94:B6:9E:CD:D5:20:E5
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C447873C
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/87de59f0-2e07-3deb-97bb-6398e9b27275.roa
Signing time:             Wed 19 Dec 2018 02:24:41 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.218.138.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:47:87:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=0dd211aa-2ac7-40d8-9d88-a9dccbdfcf92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:dc:9e:77:1e:d1:d2:39:8f:2f:43:04:af:30:
                    73:96:0b:e3:4f:15:7b:af:87:e8:1a:63:a2:9e:d1:
                    38:a5:99:9b:f5:24:bf:ec:06:23:b7:8a:9c:41:dd:
                    2c:ef:89:fc:7b:7c:4c:6d:dd:86:ab:d8:3b:72:61:
                    a3:bf:46:de:8e:af:7a:f2:be:45:d6:b5:bd:b9:e8:
                    7d:c3:88:32:f4:c0:25:b3:4b:3e:20:ae:08:09:c1:
                    72:17:e8:50:a3:ae:36:48:2d:fe:e0:f5:6e:4e:49:
                    da:3b:0a:25:4b:a0:b6:97:dc:6c:a0:6c:8e:92:3b:
                    48:88:16:b8:5c:8c:cd:fc:f5:29:07:05:c3:69:73:
                    d5:67:df:63:77:c2:b3:b1:48:17:39:ea:16:25:04:
                    89:33:ef:70:83:fd:2b:78:65:82:ec:2e:b2:66:63:
                    fc:ed:b2:73:81:78:d2:dd:54:23:18:06:c3:cc:45:
                    cc:0c:8b:ee:e0:80:cd:12:02:7d:6c:41:c8:d6:30:
                    bd:5b:73:6e:af:03:34:a2:15:c6:79:ad:4a:77:09:
                    42:e8:c9:7d:f6:02:4a:46:43:62:11:ec:1f:ca:90:
                    c5:a6:d7:5e:54:e7:9e:2e:4e:94:a4:e7:34:2b:3f:
                    fd:65:d4:22:12:a4:7e:6c:cc:a3:d2:26:7f:bc:17:
                    e9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:18:7C:AD:C7:AD:AB:86:B6:29:4A:34:8A:94:B6:9E:CD:D5:20:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/87de59f0-2e07-3deb-97bb-6398e9b27275.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.218.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:3a:1c:74:a3:33:d6:7f:d2:5d:85:68:98:01:2d:49:26:7b:
         aa:8a:0f:5b:e4:0e:2b:6a:bc:b4:10:f4:e6:1c:5d:39:23:69:
         73:70:f6:f0:41:77:e6:db:02:a9:d8:ee:04:34:4d:fd:5c:35:
         ca:c2:13:96:c3:a2:77:5b:c2:71:ab:8f:56:5b:91:b7:91:e9:
         ff:93:2e:08:7a:d9:e7:f6:9d:1c:7a:46:61:7f:7a:e0:f5:1c:
         5e:a4:d8:71:ee:66:ee:ed:1f:9a:50:ea:95:4e:b3:7b:0b:45:
         bb:0f:90:cd:ab:24:54:75:9d:90:7c:bc:6c:64:52:ec:45:fb:
         9b:f3:29:67:87:55:ba:e0:fb:ab:17:fa:5d:99:8a:bc:96:63:
         3a:99:c9:50:3b:eb:f6:45:38:a5:d1:d1:b5:40:22:39:1c:a3:
         68:cd:f3:76:34:9a:9c:de:1b:05:a0:64:83:ef:a2:c4:17:9d:
         75:40:68:03:47:fb:81:fd:33:a3:10:c3:2a:0c:1c:8d:32:93:
         25:5e:8c:d8:00:58:26:5b:dd:7b:54:ba:4f:07:64:9a:7f:c2:
         b4:90:bd:99:7f:60:76:56:00:74:44:ba:68:cb:9c:3b:42:33:
         e3:04:18:d4:72:e4:1f:bc:b2:10:36:9c:1c:d7:9d:ef:d2:4b:
         1f:8c:ad:fe
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ8RHhzwwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEyMTkwNTAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJDBk
ZDIxMWFhLTJhYzctNDBkOC05ZDg4LWE5ZGNjYmRmY2Y5MjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAJXcnnce0dI5jy9DBK8wc5YL408Ve6+H6Bpjop7R
OKWZm/Ukv+wGI7eKnEHdLO+J/Ht8TG3dhqvYO3Jho79G3o6vevK+Rda1vbnofcOI
MvTAJbNLPiCuCAnBchfoUKOuNkgt/uD1bk5J2jsKJUugtpfcbKBsjpI7SIgWuFyM
zfz1KQcFw2lz1WffY3fCs7FIFznqFiUEiTPvcIP9K3hlguwusmZj/O2yc4F40t1U
IxgGw8xFzAyL7uCAzRICfWxByNYwvVtzbq8DNKIVxnmtSncJQujJffYCSkZDYhHs
H8qQxabXXlTnni5OlKTnNCs//WXUIhKkfmzMo9Imf7wX6UkCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBTDGHytx62rhrYpSjSKlLaezdUg5TCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjLzg3ZGU1OWYwLTJlMDctM2Rl
Yi05N2JiLTYzOThlOWIyNzI3NS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADTaijBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAuTocdKMz1n/SXYVomAEtSSZ7qooPW+QOK2q8tBD05hxdOSNpc3D28EF35tsC
qdjuBDRN/Vw1ysITlsOid1vCcauPVluRt5Hp/5MuCHrZ5/adHHpGYX964PUcXqTY
ce5m7u0fmlDqlU6zewtFuw+QzaskVHWdkHy8bGRS7EX7m/MpZ4dVuuD7qxf6XZmK
vJZjOpnJUDvr9kU4pdHRtUAiORyjaM3zdjSanN4bBaBkg++ixBeddUBoA0f7gf0z
oxDDKgwcjTKTJV6M2ABYJlvde1S6Twdkmn/CtJC9mX9gdlYAdES6aMucO0Iz4wQY
1HLkH7yyEDacHNed79JLH4yt/g==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:33:19 2023 by rpki-client on console-fra.rpki-client.org