Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b4623ef8-e57b-3d70-86ae-7ddd3a8378c8.roa
File:                     b4623ef8-e57b-3d70-86ae-7ddd3a8378c8.roa (raw, json)
Hash identifier:          pasWJPuxlE0j4hrzEsQsGfF2TzH5k608SEtRDkt8v5c=
Subject key identifier:   95:BE:BB:73:A3:6D:A8:64:0B:75:E9:61:AD:60:A8:08:02:7E:92:2F
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16695B40CF2
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b4623ef8-e57b-3d70-86ae-7ddd3a8378c8.roa
Signing time:             Sun 21 Oct 2018 08:18:16 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.64.0.0/15 maxlen: 15

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b4:0c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=97c0aac4-8881-4382-8612-9d9b04a2abec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:00:ca:ff:c0:a4:b5:0e:72:be:7d:b1:81:75:
                    a0:a0:5d:88:05:24:75:76:67:92:45:f7:37:3e:bb:
                    4c:c2:89:c5:96:4b:71:dc:c3:4b:ca:24:41:66:11:
                    6b:47:0c:ec:3a:0b:f4:18:18:c6:02:4d:d9:35:5d:
                    d4:87:84:b2:a1:ef:61:3d:9e:2e:ce:74:34:8b:21:
                    93:5a:73:02:c8:7a:b9:08:fa:fb:2e:51:c0:55:46:
                    19:b5:6a:47:e8:b6:2d:85:f1:26:d7:e6:62:5f:69:
                    f0:34:24:b5:10:5b:3a:f4:87:61:28:03:2f:08:16:
                    ea:5e:8f:50:7c:22:aa:3f:35:b5:9d:8c:4c:ce:a2:
                    96:1d:b0:2f:ab:5f:cf:1a:9d:c6:07:17:63:1f:d4:
                    3e:d2:00:10:c3:fb:f1:94:a7:90:1f:7d:67:db:e2:
                    e0:2e:77:52:8f:57:52:3f:ef:76:4f:92:e1:41:f5:
                    25:9c:4c:b3:18:c8:f5:b4:2c:85:3a:21:49:6b:1d:
                    84:e2:64:eb:fd:3f:69:4d:f5:ba:93:05:5d:00:80:
                    53:72:b1:72:11:8f:54:a6:58:ab:0b:4f:f0:45:ad:
                    7c:c4:1c:75:7a:89:ad:43:1a:df:ad:24:d4:cd:1b:
                    cd:da:a4:d3:c5:b1:e7:92:57:c3:22:e3:e0:fa:96:
                    e4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:BE:BB:73:A3:6D:A8:64:0B:75:E9:61:AD:60:A8:08:02:7E:92:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b4623ef8-e57b-3d70-86ae-7ddd3a8378c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.64.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:01:12:2e:96:94:9e:12:ea:e5:a5:0a:b3:1c:69:d1:f7:14:
         26:dd:8d:43:96:08:4d:78:d9:04:48:07:20:ca:33:4d:4e:c7:
         e8:58:1b:37:6e:e7:11:82:e7:57:67:46:7a:ef:e5:de:27:00:
         78:81:a6:d1:ab:eb:5c:56:e9:81:c5:39:1c:38:e1:7d:8d:d7:
         27:43:d2:89:0b:00:0c:fc:88:66:96:27:03:21:fd:e3:2c:8d:
         4c:c5:e9:02:7d:3f:08:29:cd:9d:a0:7b:de:fe:ee:16:a2:5e:
         36:4c:f7:87:36:32:9f:3f:09:f9:4e:7a:2c:bc:f6:8a:e7:33:
         cd:cc:65:2f:21:8a:e6:d7:29:bc:ac:42:53:6a:d9:fd:17:2a:
         1f:86:9a:8f:31:4a:80:96:9b:69:3a:05:ac:21:0f:cf:b0:90:
         46:11:75:a0:eb:22:72:4d:d8:79:1d:d5:5a:90:b9:ce:16:13:
         87:54:dc:3f:af:fc:11:68:2c:78:24:75:e4:f6:90:63:14:df:
         8c:f2:ba:71:72:64:fd:92:04:9f:fd:53:fd:b0:f4:41:a8:84:
         9d:00:96:9f:2b:fd:c3:39:ff:f9:09:7b:51:3e:02:c7:3c:63:
         88:5f:dc:77:ed:9d:87:31:3e:de:02:d5:66:d0:9a:d0:b6:4d:
         7c:a7:b2:87
-----BEGIN CERTIFICATE-----
MIIGPjCCBSigAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZpW0DPIwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEwMjEwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJDk3
YzBhYWM0LTg4ODEtNDM4Mi04NjEyLTlkOWIwNGEyYWJlYzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAM0Ayv/ApLUOcr59sYF1oKBdiAUkdXZnkkX3Nz67
TMKJxZZLcdzDS8okQWYRa0cM7DoL9BgYxgJN2TVd1IeEsqHvYT2eLs50NIshk1pz
Ash6uQj6+y5RwFVGGbVqR+i2LYXxJtfmYl9p8DQktRBbOvSHYSgDLwgW6l6PUHwi
qj81tZ2MTM6ilh2wL6tfzxqdxgcXYx/UPtIAEMP78ZSnkB99Z9vi4C53Uo9XUj/v
dk+S4UH1JZxMsxjI9bQshTohSWsdhOJk6/0/aU31upMFXQCAU3KxchGPVKZYqwtP
8EWtfMQcdXqJrUMa360k1M0bzdqk08Wx55JXwyLj4PqW5BMCAwEAAaOCA1QwggNQ
MB0GA1UdDgQWBBSVvrtzo22oZAt16WGtYKgIAn6SLzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjL2I0NjIzZWY4LWU1N2ItM2Q3
MC04NmFlLTdkZGQzYTgzNzhjOC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATZAMFQGA1Ud
IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu
YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwCwYJKoZIhvcNAQELA4IB
AQCRARIulpSeEurlpQqzHGnR9xQm3Y1DlghNeNkESAcgyjNNTsfoWBs3bucRgudX
Z0Z67+XeJwB4gabRq+tcVumBxTkcOOF9jdcnQ9KJCwAM/IhmlicDIf3jLI1MxekC
fT8IKc2doHve/u4Wol42TPeHNjKfPwn5TnosvPaK5zPNzGUvIYrm1ym8rEJTatn9
FyofhpqPMUqAlptpOgWsIQ/PsJBGEXWg6yJyTdh5HdVakLnOFhOHVNw/r/wRaCx4
JHXk9pBjFN+M8rpxcmT9kgSf/VP9sPRBqISdAJafK/3DOf/5CXtRPgLHPGOIX9x3
7Z2HMT7eAtVm0JrQtk18p7KH
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:44 2023 by rpki-client on console-ams.rpki-client.org