Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b20d07d0-614d-3141-9024-42f503210db2.roa
File:                     b20d07d0-614d-3141-9024-42f503210db2.roa (raw, json)
Hash identifier:          y03cYQT/RMo4Txj1k2GrdrHG7PCZGrow/JIJ/uSr4W0=
Subject key identifier:   B8:65:3C:AE:37:CF:B6:3E:11:09:75:2D:58:0E:1E:DB:32:81:C9:39
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C491B261
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b20d07d0-614d-3141-9024-42f503210db2.roa
Signing time:             Wed 19 Dec 2018 03:45:41 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.218.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:91:b2:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=82d0bb65-03dd-4add-b65e-cee1c556eeb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9b:bd:96:98:1e:35:47:7a:58:70:bf:c7:71:
                    9c:fd:f8:20:02:eb:23:ee:0d:63:8a:34:78:f5:22:
                    c2:b3:62:00:e0:28:04:84:f4:62:82:3f:5c:e9:92:
                    8d:95:e7:01:a0:61:d2:09:d3:9d:27:5d:f5:91:22:
                    75:09:57:d3:f7:57:6e:93:42:cf:39:4a:3f:01:76:
                    c0:25:d0:ce:39:a7:b1:0b:57:85:c8:5a:1b:a9:58:
                    48:25:a8:53:6f:52:83:a8:2c:4a:55:46:45:0e:4e:
                    15:00:0f:05:76:5b:6b:5e:fc:33:4d:6d:68:0f:aa:
                    03:49:cf:8c:36:87:4d:4f:ed:39:2b:61:71:12:98:
                    c0:fc:2a:d8:a5:4b:60:c3:13:ab:b3:71:54:f2:dc:
                    d2:b4:d5:31:7b:a3:c4:23:5f:4b:f3:5e:11:36:b7:
                    8a:1d:ac:93:50:60:3e:88:e4:03:64:30:da:51:aa:
                    85:4e:7f:1d:d4:f0:71:90:62:c3:59:11:a8:e7:d1:
                    8a:ff:4e:2c:e7:50:aa:dd:f1:da:2c:35:96:8e:49:
                    02:50:c3:01:46:e3:2d:cc:57:ca:fb:da:88:35:72:
                    63:e6:d0:1e:f2:d9:c1:2e:c4:e3:16:a0:9c:18:12:
                    1a:dc:20:79:19:24:6f:92:dc:5c:aa:b7:e5:9f:d4:
                    72:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:65:3C:AE:37:CF:B6:3E:11:09:75:2D:58:0E:1E:DB:32:81:C9:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b20d07d0-614d-3141-9024-42f503210db2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.218.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:fc:6e:ad:fa:19:ca:74:78:e9:e7:b0:35:af:60:12:d4:d4:
         bd:f0:47:ba:f7:30:d8:00:1a:81:00:ca:a8:d5:04:30:c4:c2:
         e9:0a:d0:15:e5:1b:15:8d:7e:a8:1b:cb:61:c0:f0:31:01:17:
         14:1d:08:3a:52:7c:93:ac:db:ab:eb:e5:8c:af:66:a7:1e:b2:
         d5:11:90:91:90:3f:68:f5:6e:01:eb:34:4d:c9:06:ca:c7:4d:
         4f:28:ef:f2:0f:b1:98:92:35:0d:6e:e7:98:f3:2a:b0:f8:49:
         c7:52:92:21:d4:b5:87:ff:2a:90:3f:a6:5c:b3:4a:3e:32:fc:
         4e:76:ab:ae:88:68:26:3b:55:fa:a0:98:eb:f4:b5:01:98:d7:
         c9:e8:c9:ed:d4:5d:6a:22:0e:c7:7e:1f:c5:f1:d7:95:04:3a:
         61:97:d3:6c:85:c7:11:82:21:f1:1a:5e:a6:f5:3b:b3:ed:8e:
         05:d3:33:b0:26:b0:9e:64:cc:b7:d5:45:25:29:3b:93:b6:45:
         e0:52:f6:7f:e3:8b:2d:bc:b9:b7:af:d4:eb:ea:db:b3:20:c1:
         4f:7f:d8:15:ba:56:51:ed:c9:c4:b5:5a:07:40:b2:5f:3b:9f:
         ce:ad:53:9a:e1:b7:9c:9f:96:d2:48:38:2f:dc:88:dc:28:7e:
         7d:32:d3:68
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ8SRsmEwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEyMTkwNTAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJDgy
ZDBiYjY1LTAzZGQtNGFkZC1iNjVlLWNlZTFjNTU2ZWViMjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALabvZaYHjVHelhwv8dxnP34IALrI+4NY4o0ePUi
wrNiAOAoBIT0YoI/XOmSjZXnAaBh0gnTnSdd9ZEidQlX0/dXbpNCzzlKPwF2wCXQ
zjmnsQtXhchaG6lYSCWoU29Sg6gsSlVGRQ5OFQAPBXZba178M01taA+qA0nPjDaH
TU/tOSthcRKYwPwq2KVLYMMTq7NxVPLc0rTVMXujxCNfS/NeETa3ih2sk1BgPojk
A2Qw2lGqhU5/HdTwcZBiw1kRqOfRiv9OLOdQqt3x2iw1lo5JAlDDAUbjLcxXyvva
iDVyY+bQHvLZwS7E4xagnBgSGtwgeRkkb5LcXKq35Z/UcqkCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBS4ZTyuN8+2PhEJdS1YDh7bMoHJOTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjL2IyMGQwN2QwLTYxNGQtMzE0
MS05MDI0LTQyZjUwMzIxMGRiMi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADTa9DBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAHPxurfoZynR46eewNa9gEtTUvfBHuvcw2AAagQDKqNUEMMTC6QrQFeUbFY1+
qBvLYcDwMQEXFB0IOlJ8k6zbq+vljK9mpx6y1RGQkZA/aPVuAes0TckGysdNTyjv
8g+xmJI1DW7nmPMqsPhJx1KSIdS1h/8qkD+mXLNKPjL8TnarrohoJjtV+qCY6/S1
AZjXyejJ7dRdaiIOx34fxfHXlQQ6YZfTbIXHEYIh8RpepvU7s+2OBdMzsCawnmTM
t9VFJSk7k7ZF4FL2f+OLLby5t6/U6+rbsyDBT3/YFbpWUe3JxLVaB0CyXzufzq1T
muG3nJ+W0kg4L9yI3Ch+fTLTaA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:34:36 2023 by rpki-client on console-fra.rpki-client.org