Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8b047c66-28a9-3feb-95b4-019db0887f07.roa
File:                     8b047c66-28a9-3feb-95b4-019db0887f07.roa (raw, json)
Hash identifier:          6dKatRD33m716Uczv0DXh7Qb9nb9zcPKDSdXWe8sFes=
Subject key identifier:   05:FC:29:0D:65:12:5C:9A:77:B1:65:DC:3F:98:4A:2B:10:90:99:C6
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C4A78E7A
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8b047c66-28a9-3feb-95b4-019db0887f07.roa
Signing time:             Wed 19 Dec 2018 04:09:34 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.231.174.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:a7:8e:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=e0d9d3d4-9033-41af-a750-eb16cb9189ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2e:d5:77:d4:6a:d4:7f:46:18:bd:f5:fd:8b:
                    1c:bc:10:02:94:bf:38:9d:d1:4a:42:82:26:65:84:
                    58:6d:f7:3b:90:6d:54:06:22:8b:71:84:72:d0:7b:
                    e6:e2:d9:21:0c:9e:d6:6a:cf:62:06:f8:82:16:e9:
                    92:ba:13:21:05:38:e3:8f:be:44:27:db:45:02:2a:
                    1f:40:ec:85:f9:b1:f2:6f:9f:95:c6:f4:03:d8:ca:
                    6c:2a:87:f2:44:21:55:f6:bb:8d:55:33:bc:63:bf:
                    1b:28:bb:37:5c:a1:14:3d:2f:d3:5b:03:60:f8:3e:
                    a0:cb:8c:15:d9:93:db:44:35:d2:1a:83:cc:de:90:
                    f0:7c:b5:21:5d:0e:bd:4f:fd:7b:d6:d2:a7:91:17:
                    d9:de:ba:4f:1b:06:ae:d6:2e:fa:46:25:0e:89:92:
                    aa:8e:7d:94:9c:12:b8:1c:fc:a8:21:09:05:7f:bd:
                    f8:ca:19:1c:af:67:28:3e:43:94:b6:c6:cb:2f:fc:
                    6d:b8:b5:db:dc:06:91:13:b6:95:9c:52:82:10:a0:
                    29:8d:dc:da:35:aa:77:65:64:25:c2:58:ab:56:eb:
                    b4:8b:4e:a3:1a:ed:c1:80:6d:57:8d:a5:b1:00:28:
                    6e:27:f2:1c:b6:02:38:03:64:07:15:8a:8a:2e:8b:
                    f9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:FC:29:0D:65:12:5C:9A:77:B1:65:DC:3F:98:4A:2B:10:90:99:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8b047c66-28a9-3feb-95b4-019db0887f07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.231.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:81:82:ca:53:2b:8f:63:5d:35:fb:72:79:f8:e6:29:2a:f8:
         bc:37:b6:c9:08:fb:1f:9c:c9:18:41:1c:45:99:5f:a5:f5:67:
         05:4f:66:2e:a6:63:04:f8:ad:00:23:2e:85:0f:4a:83:cc:1d:
         b4:a4:9b:7e:80:90:09:66:f8:32:2b:b0:93:d9:29:a6:e4:d2:
         74:db:9a:0b:2f:4c:ae:73:5e:c4:c5:2b:cd:b4:77:ec:df:79:
         5e:e2:d1:3e:a4:d0:21:fd:2b:49:96:ab:7e:ca:10:db:aa:cd:
         07:d5:32:9b:06:53:a9:1f:bf:19:f7:92:3c:e5:85:1a:58:d2:
         c7:b5:48:65:84:4e:77:0a:c4:5f:10:e0:cb:85:4b:2e:6d:4b:
         6b:c7:5c:5a:ab:5f:15:3f:45:2b:bc:60:d2:38:5d:78:8e:dc:
         46:8a:3c:2a:5b:06:8f:98:ad:c1:4d:e6:e9:b0:a3:da:f6:56:
         48:5c:c7:df:d9:36:f7:31:a1:2e:d1:c4:95:9b:cd:dc:d9:0c:
         2f:86:0c:32:5a:c1:3b:df:3b:5e:79:59:03:47:d2:74:64:e6:
         83:38:4c:da:c7:f7:22:7b:25:6a:4b:cd:4e:c5:fe:45:2d:e5:
         da:7c:b1:9f:92:3b:51:3a:1f:ad:22:68:33:44:d9:b2:fd:f9:
         89:3e:ae:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:33:24 2023 by rpki-client on console-fra.rpki-client.org