Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a67483c4-816b-317b-9fdb-3c3c40ffc935.roa
File:                     a67483c4-816b-317b-9fdb-3c3c40ffc935.roa (raw, json)
Hash identifier:          yYbkCthjew/LvpRJOJhIhod1nh5g/R5wvSS3t2VTse4=
Subject key identifier:   D3:97:AD:35:47:64:FE:32:5E:68:08:27:CE:73:81:56:94:71:54:5A
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16695B31663
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a67483c4-816b-317b-9fdb-3c3c40ffc935.roa
Signing time:             Sun 21 Oct 2018 08:17:13 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.95.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b3:16:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=3ae93564-c41b-40de-a0c3-c41512857473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ff:6a:f4:d4:c0:28:4a:94:3d:2b:f2:58:c4:
                    99:33:8f:ae:8d:98:21:56:7c:c4:ea:76:4b:89:3e:
                    f0:ee:96:60:04:a1:e7:25:de:b0:1b:ee:0b:f6:ac:
                    f6:e3:eb:ea:18:3d:6d:e1:ec:a3:8d:41:66:2e:41:
                    17:a2:ab:a4:55:f5:9e:bf:fc:55:6e:33:0d:51:a6:
                    6e:76:c4:7f:1e:b7:9e:f8:05:94:b6:ca:cf:35:77:
                    6e:6c:25:6b:3b:33:f5:62:f4:1b:9f:74:05:b2:75:
                    62:eb:06:1a:d9:bc:f5:d1:c5:86:60:7b:23:45:46:
                    55:ce:1a:05:bf:c5:00:b0:cc:b0:b5:b0:cf:70:cd:
                    0e:17:32:c2:00:f1:df:de:41:8a:74:d5:35:72:b5:
                    87:b4:55:53:64:5a:be:17:42:91:98:02:84:3f:92:
                    7e:f1:0b:48:4d:f3:98:f2:08:f3:67:47:c4:99:0e:
                    f3:c9:32:bc:56:18:46:0a:4a:c0:72:fa:8c:04:6a:
                    92:22:35:53:b6:28:c8:ef:15:9e:e5:50:0e:b9:1d:
                    9a:a5:7b:50:82:1d:28:28:94:0f:b7:d7:fe:23:e4:
                    f1:44:80:34:26:21:18:1c:68:1f:f5:f2:28:c4:2d:
                    35:35:36:a2:9f:4c:28:7b:2b:f6:5a:df:01:2c:af:
                    69:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:97:AD:35:47:64:FE:32:5E:68:08:27:CE:73:81:56:94:71:54:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a67483c4-816b-317b-9fdb-3c3c40ffc935.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.95.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:79:b1:65:e2:db:62:4c:3b:b3:9c:d4:37:36:bf:e2:5c:11:
         02:a7:08:56:7d:3f:43:06:d4:99:da:46:9b:f5:54:88:0d:c7:
         d1:6b:b1:a2:e6:bb:33:af:53:73:4b:97:d3:29:2c:59:7d:68:
         20:ab:aa:ef:a9:7a:58:2a:3b:cd:36:7f:9f:e2:85:14:2b:96:
         92:e7:fa:78:90:3e:c1:76:56:df:b2:8d:4f:cd:bd:39:c5:3d:
         7e:6e:fd:b9:ed:0c:9d:50:85:4f:19:47:21:93:0b:5f:e1:85:
         70:f6:d0:af:b8:52:a4:bd:26:b3:69:77:14:70:3e:6c:96:90:
         8c:f5:7f:35:8b:0b:7b:ba:1b:66:da:2a:32:75:04:59:07:8f:
         11:db:34:f2:67:a2:fc:7e:4a:eb:69:d6:a0:46:a5:fa:81:a7:
         b8:6b:94:6f:68:5a:dc:8c:23:be:d1:67:d8:11:74:bf:e1:82:
         eb:35:dc:b3:b0:ff:5a:fe:30:9b:ed:48:23:99:63:dc:01:32:
         2c:34:ed:99:a8:13:89:eb:78:28:e1:db:0a:98:b2:25:64:92:
         24:c1:8d:82:d4:52:12:f3:31:7a:78:63:08:ba:3b:26:cd:e5:
         13:f6:a1:1a:d2:a9:aa:f9:77:11:31:bf:6b:c6:73:1c:c8:1c:
         6a:59:da:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:34:16 2023 by rpki-client on console-fra.rpki-client.org