Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a119d48f-71e8-3fea-aa37-6288be1b1d6c.roa
File:                     a119d48f-71e8-3fea-aa37-6288be1b1d6c.roa (raw, json)
Hash identifier:          /mIDxejpRO6YQ5bdYIRPBRQh0Eb+T9ybIBiaoz5ZneU=
Subject key identifier:   54:95:03:80:0D:60:89:BF:FF:52:CD:AF:E5:EB:FB:A7:2F:FF:03:FC
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665D24AFD2
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a119d48f-71e8-3fea-aa37-6288be1b1d6c.roa
Signing time:             Wed 10 Oct 2018 08:42:57 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.220.0.0/15 maxlen: 15

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5d:24:af:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=137d5bb6-9a3a-473d-8555-f929ad60e4db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:14:55:30:68:5a:63:cb:a3:e7:8c:0f:d6:d1:
                    1d:1b:40:88:1e:ed:d5:e1:19:c1:2a:6c:90:db:7e:
                    a0:05:1a:14:cf:1c:05:89:ca:d3:8a:a8:ec:5f:1e:
                    05:b4:fc:05:2f:59:7e:18:ee:2b:3e:6f:11:c2:7a:
                    01:fd:49:69:2a:bf:70:0e:7c:7d:64:04:e9:d1:6c:
                    fb:34:78:d3:6c:1c:3d:7a:9e:bb:cc:c3:81:f9:38:
                    0b:30:d8:99:82:40:e0:c6:18:9e:7d:a3:ac:de:72:
                    e0:77:b4:03:0b:f3:ed:c4:8e:43:6f:ad:35:90:88:
                    10:38:43:dd:a8:db:87:78:34:8e:44:da:27:12:9e:
                    1d:df:1d:45:ce:b9:ec:b7:e3:b1:89:32:8d:73:3f:
                    58:94:23:41:c8:1d:a1:21:a1:10:c8:fe:bc:1f:ea:
                    a4:3e:47:e9:58:81:66:72:28:ce:75:7e:b9:e3:7e:
                    94:23:ab:2c:bb:8c:f9:0a:43:c8:41:8b:e9:0b:37:
                    70:df:65:49:5e:5a:61:75:c9:10:93:66:c2:02:dd:
                    2b:df:82:fe:79:be:b9:f6:ff:e5:e8:4c:2a:9a:9c:
                    dc:e0:ab:c9:dc:a0:37:9a:f6:97:57:b3:7a:0f:0f:
                    f4:7a:0d:51:15:bb:48:17:ce:f7:1d:f5:34:dd:92:
                    70:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:95:03:80:0D:60:89:BF:FF:52:CD:AF:E5:EB:FB:A7:2F:FF:03:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a119d48f-71e8-3fea-aa37-6288be1b1d6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.220.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:38:dc:b8:01:ad:8e:e2:ed:4c:9f:90:b9:a9:8f:b8:3b:83:
         f9:e8:af:80:3d:89:11:02:69:f8:2c:6d:6c:ad:08:dc:58:74:
         f8:c9:07:5d:0d:b6:de:24:60:18:72:38:19:91:d4:77:bd:f1:
         81:0e:ed:7b:fb:e7:2e:d8:ed:33:a4:c1:88:ee:66:d0:e5:5e:
         49:92:77:02:05:a1:25:da:08:56:74:9e:46:4f:37:4c:d2:90:
         97:8f:1f:76:37:1f:2e:6e:19:f4:0e:6e:62:db:53:60:db:f7:
         2e:95:52:cb:4e:df:6d:af:96:f9:cd:0e:13:2e:3e:ba:f8:94:
         c9:cb:3e:3e:8b:a7:e6:cc:06:26:e5:57:1e:74:7a:0d:d9:c4:
         5e:90:26:92:19:a2:ea:60:5d:51:a4:d8:2a:6a:79:ce:83:49:
         ce:dc:bb:01:18:92:ed:b8:30:e0:20:af:54:ba:de:ba:27:2a:
         8f:71:70:de:e1:c5:85:21:9a:c5:00:b9:57:40:24:c7:89:68:
         2c:46:44:30:cd:09:8f:05:14:b2:73:4e:cd:61:a8:e9:66:e6:
         1d:1a:ab:6e:a7:5f:cf:90:ce:ed:5f:67:b2:97:3a:c6:d7:01:
         cb:ac:83:3b:48:90:2e:1b:fc:7a:f5:7b:18:c7:46:9f:e6:b7:
         ef:b9:b5:87
-----BEGIN CERTIFICATE-----
MIIGPjCCBSigAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZl0kr9IwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEwMTAwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJDEz
N2Q1YmI2LTlhM2EtNDczZC04NTU1LWY5MjlhZDYwZTRkYjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAL0UVTBoWmPLo+eMD9bRHRtAiB7t1eEZwSpskNt+
oAUaFM8cBYnK04qo7F8eBbT8BS9ZfhjuKz5vEcJ6Af1JaSq/cA58fWQE6dFs+zR4
02wcPXqeu8zDgfk4CzDYmYJA4MYYnn2jrN5y4He0Awvz7cSOQ2+tNZCIEDhD3ajb
h3g0jkTaJxKeHd8dRc657LfjsYkyjXM/WJQjQcgdoSGhEMj+vB/qpD5H6ViBZnIo
znV+ueN+lCOrLLuM+QpDyEGL6Qs3cN9lSV5aYXXJEJNmwgLdK9+C/nm+ufb/5ehM
Kpqc3OCrydygN5r2l1ezeg8P9HoNURW7SBfO9x31NN2ScF8CAwEAAaOCA1QwggNQ
MB0GA1UdDgQWBBRUlQOADWCJv/9Sza/l6/unL/8D/DCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjL2ExMTlkNDhmLTcxZTgtM2Zl
YS1hYTM3LTYyODhiZTFiMWQ2Yy5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATTcMFQGA1Ud
IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu
YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwCwYJKoZIhvcNAQELA4IB
AQAPONy4Aa2O4u1Mn5C5qY+4O4P56K+APYkRAmn4LG1srQjcWHT4yQddDbbeJGAY
cjgZkdR3vfGBDu17++cu2O0zpMGI7mbQ5V5JkncCBaEl2ghWdJ5GTzdM0pCXjx92
Nx8ubhn0Dm5i21Ng2/culVLLTt9tr5b5zQ4TLj66+JTJyz4+i6fmzAYm5VcedHoN
2cRekCaSGaLqYF1RpNgqannOg0nO3LsBGJLtuDDgIK9Uut66JyqPcXDe4cWFIZrF
ALlXQCTHiWgsRkQwzQmPBRSyc07NYajpZuYdGqtup1/PkM7tX2eylzrG1wHLrIM7
SJAuG/x69XsYx0af5rfvubWH
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:34:04 2023 by rpki-client on console-fra.rpki-client.org