Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/90cdd777-d4d2-31e9-b826-4ac64f3ad0ae.roa
File:                     90cdd777-d4d2-31e9-b826-4ac64f3ad0ae.roa (raw, json)
Hash identifier:          8AGWxMJ6H9YNOjheVE5oJrqWC5rw1Lyox3QdNtUtzGM=
Subject key identifier:   F6:2E:B7:DC:68:CC:D9:E5:EE:C4:FC:01:B0:0B:15:F6:3A:D1:E1:CB
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665C07871A
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/90cdd777-d4d2-31e9-b826-4ac64f3ad0ae.roa
Signing time:             Wed 10 Oct 2018 03:31:29 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.148.0.0/15 maxlen: 15

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:07:87:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=dc479c40-cfa6-4f6d-9c46-45f2f00aa98a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:8c:08:54:d6:0d:80:83:57:dc:5c:a1:6b:8c:
                    d2:a2:6c:4d:9e:1d:7c:af:0a:9a:f2:05:9c:bf:df:
                    78:b9:6d:14:5a:a2:09:3f:c8:e1:a7:85:db:a3:0d:
                    26:d6:9e:9a:1b:a6:ae:2b:ef:99:09:e7:c3:5d:dd:
                    1e:a1:00:1d:6d:34:25:d3:6d:8b:74:eb:cb:7c:64:
                    65:18:00:1c:1d:3d:98:66:4e:69:34:2a:8d:3c:c6:
                    1d:b8:d6:2a:bc:6e:f0:28:a2:b1:44:31:7c:e1:3b:
                    97:ed:7b:b9:58:b7:79:79:27:3b:e4:90:df:6d:ea:
                    48:b8:dd:58:81:83:57:7a:61:e8:41:3b:c3:21:c7:
                    b3:6a:cd:cd:5d:02:66:f6:c5:41:ed:82:cd:ac:ee:
                    ad:22:c9:b0:78:91:b7:ea:f7:23:81:a1:7d:7b:ed:
                    44:eb:a7:9a:43:e0:01:f5:82:95:2c:8c:ba:3a:6d:
                    d4:6d:f1:e7:cd:94:a6:57:1d:2e:d0:42:40:5b:b8:
                    1d:2a:df:e9:1b:91:02:26:8f:60:90:ae:4f:19:27:
                    ea:15:05:bb:51:0f:4b:81:08:d0:e5:70:07:43:3d:
                    ca:5d:aa:de:66:a7:6b:a6:55:ee:79:67:b5:de:4e:
                    3a:0f:10:89:f0:1f:1d:eb:eb:f8:c7:4b:95:d4:1e:
                    82:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2E:B7:DC:68:CC:D9:E5:EE:C4:FC:01:B0:0B:15:F6:3A:D1:E1:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/90cdd777-d4d2-31e9-b826-4ac64f3ad0ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.148.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:29:03:22:c5:5e:de:a1:34:7a:42:d2:73:cd:37:b8:9f:fa:
         86:5b:ac:69:64:19:c5:e1:e6:13:52:59:02:10:73:6f:86:60:
         d9:1d:ac:f9:69:cb:ab:2d:66:bc:8f:ef:d0:8a:b4:06:ef:e8:
         90:f2:75:bd:8f:cf:18:68:8d:a1:63:8a:58:4b:ff:a3:d6:e8:
         d7:8a:02:04:02:46:c4:96:40:1c:40:93:9d:dd:48:31:64:df:
         eb:b5:99:f0:ce:6d:92:08:7c:2f:11:d5:31:24:5a:0d:dd:05:
         05:98:35:0b:51:2e:06:5c:07:43:16:0c:0f:50:8c:ab:94:a0:
         c8:dc:2a:c2:f4:5b:dd:39:d4:4c:c7:44:7c:57:b5:2a:7e:ab:
         77:d3:8b:9d:27:29:05:a3:36:a6:43:03:04:d1:60:d8:5a:05:
         6a:4e:0e:58:0c:3b:a0:89:33:66:e2:e0:45:71:58:0d:42:b2:
         a5:cb:00:b3:d4:c4:bc:86:ef:98:2f:09:ec:4a:54:4b:68:0b:
         3d:2d:a0:50:8a:b8:e3:f8:9a:02:a1:f9:1c:99:6f:d7:a3:12:
         7d:49:99:9c:1e:77:f3:85:c6:45:d7:46:b1:48:fc:70:35:49:
         5e:17:1f:15:77:f7:5e:d3:87:05:aa:12:31:de:a0:96:3f:c4:
         9e:e8:22:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:37:31 2023 by rpki-client on console-ams.rpki-client.org