Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9be235cf-f535-3512-9b58-de7d8db527a6.roa
File:                     9be235cf-f535-3512-9b58-de7d8db527a6.roa (raw, json)
Hash identifier:          DVKnYqASaPWMkOpgB3DSSZ1GUbmoqaI3OMRI8mC/lhs=
Subject key identifier:   F6:AC:78:E8:37:85:4D:EE:20:AF:03:D3:CC:DA:1C:7F:00:9E:2E:40
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665B69A39B
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9be235cf-f535-3512-9b58-de7d8db527a6.roa
Signing time:             Wed 10 Oct 2018 00:39:01 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.231.235.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5b:69:a3:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=254f3f36-3287-4dea-8ec3-ce5671ec23b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:75:63:54:10:bf:df:48:01:3d:40:67:b9:05:
                    e6:fb:2e:8d:e7:f0:78:f2:8e:5f:e8:94:80:14:c8:
                    6d:19:fb:a1:3a:7b:9c:a2:41:14:6b:78:1d:c1:5d:
                    86:8d:b7:71:24:dc:b4:db:eb:b7:11:3d:b8:27:0e:
                    26:8f:97:c3:58:1c:1c:4c:94:fc:45:dd:ef:1e:af:
                    da:f1:ef:f3:66:1d:a3:77:6d:16:e6:e8:15:2a:45:
                    5b:07:4b:fe:da:4c:e8:4b:62:92:8c:ff:ba:88:4c:
                    bf:51:b4:48:51:7e:71:30:f2:ba:d2:e7:fd:27:91:
                    bd:5d:89:66:dd:77:ca:0e:af:87:c4:ad:96:92:d1:
                    3d:2c:bf:94:94:65:0d:b0:e5:7a:39:2a:49:f4:35:
                    ad:24:4d:35:1c:00:fd:04:12:51:d0:4a:3a:ed:f5:
                    f7:dc:74:83:9c:12:fc:46:32:9b:6c:c7:37:de:b0:
                    88:b1:9b:16:d5:79:79:64:be:64:39:8a:0d:79:b0:
                    4b:0c:24:76:9d:e1:46:fb:2d:42:ef:43:78:4f:48:
                    33:56:03:ea:f4:10:08:87:4c:01:2d:a4:7a:91:69:
                    e4:1d:67:d8:88:f7:d7:a4:53:3d:0b:d2:0c:fd:2e:
                    08:a1:1c:29:bf:dd:84:a7:a5:ab:b6:4f:60:eb:68:
                    1a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:AC:78:E8:37:85:4D:EE:20:AF:03:D3:CC:DA:1C:7F:00:9E:2E:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9be235cf-f535-3512-9b58-de7d8db527a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.231.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:31:ca:54:9d:df:95:52:45:33:dd:bc:37:4b:66:77:06:a1:
         7d:0b:a2:13:5d:84:cf:c2:87:51:e4:f2:e4:e9:b0:6b:6c:41:
         e1:c2:cd:9f:41:5f:f0:60:56:6d:61:9f:26:c3:1a:26:ea:92:
         56:d8:95:3a:e2:fd:43:2a:fe:66:66:a7:d9:49:31:02:cb:3e:
         28:15:c6:17:03:70:cc:b1:b2:09:7a:3d:7a:9b:ac:87:ee:40:
         20:fe:ac:5b:aa:ff:3e:87:e4:a7:ad:3f:f9:49:b1:cb:39:e8:
         ac:38:07:7d:de:aa:4a:4b:d7:c6:d9:0d:11:a7:21:42:30:b9:
         a5:15:35:5d:c0:2a:b5:bb:7a:9c:5c:9a:1b:01:43:2a:5d:11:
         63:c4:06:c2:af:aa:47:af:e4:73:c8:5e:c1:c8:26:fd:c1:67:
         9a:75:1e:6e:95:c1:c6:b3:d8:60:24:23:7b:56:0e:ea:e2:c6:
         73:a3:9b:29:38:58:78:18:72:dc:1f:3b:6c:8d:df:1a:fb:cc:
         a9:54:df:49:4c:c7:02:69:ba:7d:4e:c5:57:f8:2a:23:ab:22:
         97:cb:28:74:4c:70:15:89:30:29:5f:b6:35:49:d1:47:c8:a7:
         8c:fe:ee:6f:80:b0:80:74:72:2e:76:a8:e8:65:9c:8e:19:d8:
         a2:ae:8d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:33:55 2023 by rpki-client on console-fra.rpki-client.org