Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9c4c685e-2f7e-31cb-9b8c-6dec62272326.roa
File:                     9c4c685e-2f7e-31cb-9b8c-6dec62272326.roa (raw, json)
Hash identifier:          KRAhwKHPUNFWE4ePAo3XeldetERkNA38snh1743qKvY=
Subject key identifier:   AB:C7:9E:51:23:D5:D4:17:DA:72:9F:C1:CB:C0:ED:4A:AC:14:F4:43
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC166944554EA
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9c4c685e-2f7e-31cb-9b8c-6dec62272326.roa
Signing time:             Sun 21 Oct 2018 01:37:43 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.64.0.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:94:45:54:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=7958713e-35f1-4bbb-ba06-9fe728480bba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:10:ce:d6:04:ae:f0:a9:2f:d1:e4:ba:36:78:
                    f6:21:7a:e9:33:86:1f:d8:30:74:c2:53:8c:40:6c:
                    5c:06:66:5d:02:80:1c:a9:5f:e4:c9:19:1d:a5:6d:
                    df:cb:d3:33:6c:75:15:d6:d1:77:2b:b5:b5:05:fb:
                    45:70:76:90:80:46:30:c3:ee:70:f8:0c:6c:20:48:
                    f2:ea:99:da:0f:73:a5:c2:d0:1b:d9:66:8c:b1:55:
                    a6:05:6b:f5:4f:e9:3c:dd:95:c8:7d:55:93:1e:68:
                    31:0d:32:07:f3:c5:fb:ab:fa:85:fd:70:a3:00:8b:
                    42:fc:53:be:18:24:e0:05:d4:ad:e7:a8:ea:0b:76:
                    39:8f:fe:f1:f9:7a:2b:8b:34:b5:ea:0b:8b:55:e8:
                    3e:62:6c:b3:77:d4:63:fb:4d:0b:9a:a0:43:7b:27:
                    61:8e:75:d8:b5:1d:df:d1:95:f1:b0:49:22:72:ca:
                    8a:ac:59:46:89:d4:2b:9a:36:fa:38:13:4f:c8:d0:
                    23:10:e2:e8:5f:5b:e4:6a:36:4f:cb:5b:09:98:ec:
                    19:d7:14:b2:d5:1b:db:a3:43:1e:71:10:0d:12:df:
                    f1:49:49:c6:39:29:25:2f:87:15:6f:78:d7:e4:66:
                    2a:eb:46:bd:67:f0:9a:c6:bd:2d:72:fd:bf:a7:01:
                    ac:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C7:9E:51:23:D5:D4:17:DA:72:9F:C1:CB:C0:ED:4A:AC:14:F4:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9c4c685e-2f7e-31cb-9b8c-6dec62272326.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.64.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:61:05:20:c2:90:a3:61:e6:4f:d7:0e:3c:b0:12:71:80:f7:
         14:c7:ae:4b:a3:0c:a3:dc:8b:e7:6b:64:36:05:bc:22:00:53:
         9d:a2:0d:ca:b4:ea:fc:56:b4:20:7f:05:8c:a9:34:53:74:55:
         89:42:20:b6:16:0c:f9:0b:08:13:b0:59:87:4d:aa:ae:e7:31:
         78:d7:2e:d6:ae:14:97:72:ca:c0:bb:dd:ca:92:9e:4a:f4:26:
         6d:5c:39:46:55:4e:16:ba:6a:27:19:03:67:f1:70:25:22:eb:
         ae:9e:f5:03:05:63:57:98:f1:62:f8:d9:fa:dc:bf:6a:d5:14:
         9e:6f:ae:c6:8b:02:cd:87:d2:7a:bc:88:9b:28:59:3a:7b:fe:
         2b:d2:68:c6:9a:f5:f2:85:60:81:b4:25:f1:1b:5d:16:46:c5:
         c6:b6:c9:0a:35:8d:57:61:2a:1d:1d:a5:f5:05:10:c9:b8:9e:
         be:d8:47:dc:a2:0a:8d:60:45:f1:88:50:21:dc:e9:8c:62:4b:
         08:b7:b6:f8:37:19:3a:b4:24:31:1b:40:a4:6d:9b:5c:8b:40:
         4f:92:f9:e5:ac:ff:9b:82:10:de:c4:d9:76:98:91:1e:29:26:
         92:80:18:74:a8:3b:01:ec:d5:c5:ec:e7:11:7f:58:45:eb:9b:
         9c:7e:7a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:33:56 2023 by rpki-client on console-fra.rpki-client.org