Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/946f5a78-38cd-3994-9632-c1bd5bce5717.roa
File:                     946f5a78-38cd-3994-9632-c1bd5bce5717.roa (raw, json)
Hash identifier:          SNQxOXhumT7z61JyGzIhiZnqjL9WvcPHh40S67rJSB4=
Subject key identifier:   FA:EF:D9:D5:4B:CF:6E:16:4F:B9:E8:F1:05:67:69:25:99:C4:12:84
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665B696FDA
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/946f5a78-38cd-3994-9632-c1bd5bce5717.roa
Signing time:             Wed 10 Oct 2018 00:38:48 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.219.20.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5b:69:6f:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=4b688177-8977-4697-b143-40005bfa0124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:76:cb:2c:d7:53:1d:f2:b0:7e:a5:20:5f:d8:
                    2c:3f:40:83:25:86:30:a8:7e:ac:10:a1:9c:05:f7:
                    cd:c5:a5:69:29:12:d6:dd:53:8f:08:d4:ec:c6:dc:
                    b8:de:ac:d3:b6:c5:ac:0f:7c:a0:bd:9c:bb:41:ab:
                    1c:15:ca:cd:79:97:e9:4d:9c:52:b9:f7:83:8f:b2:
                    6d:48:43:ce:dc:b5:50:a4:be:10:8b:92:9d:80:e4:
                    6e:01:5e:c2:7d:43:74:8e:d9:6c:6b:f7:e0:f1:20:
                    91:62:0d:18:91:40:94:54:c9:70:9e:c0:ac:49:9c:
                    c4:72:ab:17:57:5c:98:91:90:fa:ad:9d:cf:ef:64:
                    a5:66:06:5b:c1:b2:67:95:10:1c:9b:2d:89:06:97:
                    93:11:de:7b:ab:a9:3f:cc:30:da:a1:b8:70:d3:09:
                    ba:52:7e:0e:10:f2:11:39:00:41:54:3a:ad:7a:f5:
                    f4:cc:d9:98:8a:3d:64:09:af:2d:0b:72:88:c6:ee:
                    76:5c:fb:fe:04:94:18:6d:63:ab:6e:f7:20:19:43:
                    71:49:29:d1:9e:51:70:10:74:0b:d2:f9:c9:69:a3:
                    dc:6b:15:33:72:8f:66:89:7a:8d:3f:14:58:f0:c5:
                    0f:bf:b5:88:d8:e3:79:aa:a2:79:3a:57:3f:6e:da:
                    98:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:EF:D9:D5:4B:CF:6E:16:4F:B9:E8:F1:05:67:69:25:99:C4:12:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/946f5a78-38cd-3994-9632-c1bd5bce5717.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.219.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:1f:1b:c0:53:c1:18:39:1f:90:6d:06:ab:63:06:02:73:6c:
         9a:a8:24:c3:76:16:cd:98:ad:4f:c1:1a:2a:3f:99:0f:a2:96:
         7e:73:bf:97:e0:00:6d:d7:74:b1:c1:b5:8d:4d:7f:94:5a:6a:
         f8:bc:4b:6f:1e:23:32:55:5d:bd:e4:1d:ba:d3:e0:29:84:41:
         a6:1c:06:e4:b4:f0:ba:4f:65:d0:12:26:e6:cd:61:b6:7a:38:
         53:78:4a:65:32:e9:9b:0a:9e:6b:77:44:be:93:f0:8f:19:c3:
         92:f6:1a:b4:cf:4b:b3:d4:6e:61:23:51:e1:48:94:62:e7:51:
         e4:0b:8f:b6:38:19:3a:e0:6a:88:e6:78:14:2b:31:b5:64:14:
         d0:5a:62:e3:93:27:10:79:f3:44:cc:79:9d:cc:2d:14:29:a8:
         f6:f6:0a:70:e6:4d:c1:44:da:98:82:92:fb:c0:05:fb:f3:71:
         72:d3:b1:5a:5f:be:74:c7:2d:99:34:98:f7:d7:04:22:23:bc:
         cd:c3:c2:53:17:de:c3:0e:80:7b:b0:b9:fb:bd:9c:6c:d3:ff:
         82:96:ac:ba:c8:0f:d3:18:be:24:52:e1:72:3f:d3:e3:79:c7:
         eb:e8:db:8c:46:49:9d:30:34:8b:57:e5:59:29:90:e2:36:44:
         0a:c8:a8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:37:37 2023 by rpki-client on console-ams.rpki-client.org