Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a36e641c-926a-3895-8bfe-20ade97982a5.roa
File:                     a36e641c-926a-3895-8bfe-20ade97982a5.roa (raw, json)
Hash identifier:          k3x+jsqP3arYA799zHo0Q1Zbyf1Ub58AjxX8QOgFfss=
Subject key identifier:   90:D5:71:1C:C4:A3:CD:8D:21:30:8E:02:8F:CC:13:25:BA:D3:6D:8A
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC166960D5459
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a36e641c-926a-3895-8bfe-20ade97982a5.roa
Signing time:             Sun 21 Oct 2018 09:55:47 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.94.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:96:0d:54:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=9b411d0b-8ef2-4c11-af19-bf93c0c26ddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:10:19:36:80:c6:70:a9:16:72:31:73:92:06:
                    82:81:e8:08:11:21:72:7f:06:22:9d:b7:5a:74:d4:
                    f4:52:cb:96:ae:f7:35:7c:da:c0:7c:df:5f:05:8c:
                    c7:3a:39:7c:4d:a8:f6:2a:9c:03:d6:14:c9:d2:2d:
                    68:46:b8:c5:64:9b:b4:56:58:72:d8:70:46:dc:e7:
                    89:dd:dd:46:f8:46:5f:ba:e3:21:ec:e5:b1:9b:fc:
                    21:4c:be:d3:86:d4:7d:02:f1:bf:cb:c2:d9:8f:b5:
                    7d:34:11:54:76:83:9c:ff:07:45:0f:45:7f:6e:42:
                    10:5b:fb:01:52:5a:98:2c:43:43:d4:78:5e:92:79:
                    58:54:de:48:c5:d9:19:1d:1a:77:7a:84:75:88:c9:
                    04:fd:a8:01:03:44:3c:9b:93:6a:c0:5d:72:b8:3a:
                    b3:7e:c5:f4:a5:13:7a:5f:86:17:c8:2b:cd:4b:6b:
                    e4:a2:ee:0c:6e:79:1e:cc:64:a7:0a:b8:75:46:ea:
                    0e:cf:b1:a3:50:3e:62:15:c9:2f:8e:ba:9b:79:90:
                    2f:49:dc:b2:ad:72:ae:4b:55:c1:73:79:c5:62:51:
                    fd:98:40:e3:69:64:a0:1c:30:8e:a4:c7:32:b6:fe:
                    41:f2:16:9a:de:b4:4f:de:46:e3:24:b5:f8:a9:51:
                    4f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D5:71:1C:C4:A3:CD:8D:21:30:8E:02:8F:CC:13:25:BA:D3:6D:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a36e641c-926a-3895-8bfe-20ade97982a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.94.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:0d:69:59:8e:2f:7f:0f:9f:b1:b2:38:54:71:cf:55:67:4b:
         33:fe:b9:62:1c:95:fc:e8:66:be:05:74:5c:5b:b3:d2:c3:4d:
         53:4c:a4:0f:d8:22:cf:05:a9:76:f9:25:63:a3:a6:32:66:38:
         7f:31:64:33:a8:91:1b:2c:b2:66:2f:59:20:f0:76:be:15:6b:
         f7:bd:fa:41:33:10:d1:e9:aa:64:cf:12:29:ba:1e:d1:ff:5f:
         7f:f4:a4:6c:5f:3e:3c:2d:97:34:eb:09:f8:37:9a:1e:55:58:
         63:b4:98:42:cb:75:05:1e:0a:4f:6b:d7:3c:98:83:08:74:b9:
         7f:be:f0:b5:b0:ee:ee:3e:51:d2:b6:db:0a:22:5f:9e:2e:6c:
         29:07:d6:14:27:de:95:93:a8:a1:48:11:ac:de:e0:90:87:e4:
         3c:1e:90:77:8f:4c:ad:64:06:7d:94:54:7d:c7:8e:81:14:bf:
         60:5e:fd:29:7f:8b:b3:0c:dd:f8:0f:35:d3:01:d2:f1:ae:17:
         64:26:25:de:07:98:db:28:c7:b1:26:37:ec:f4:42:3b:40:74:
         fb:0c:ad:c5:01:dc:0e:a7:92:d5:35:c5:c1:84:49:d1:e9:37:
         87:3a:24:e4:9f:f0:65:ab:5b:f0:30:7c:16:f4:ae:e1:cf:ec:
         2d:64:7b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:34:08 2023 by rpki-client on console-fra.rpki-client.org