Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bb80e03a-a1f0-30de-9e5b-f636309bff39.roa
File:                     bb80e03a-a1f0-30de-9e5b-f636309bff39.roa (raw, json)
Hash identifier:          nvIjDO/cMo3KOzn5U0D4FN3L7UgnzYqELlB20fsVwdo=
Subject key identifier:   A6:4E:BB:E3:2A:5B:52:B6:CD:F5:4C:93:9B:63:FF:DA:4E:44:7B:47
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1664294E4A3
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bb80e03a-a1f0-30de-9e5b-f636309bff39.roa
Signing time:             Fri 05 Oct 2018 04:55:46 +0000
ROA not before:           Fri 05 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.151.0.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:42:94:e4:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct  5 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=c28725ab-3050-4033-868c-65cc9bd96d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e1:f4:c4:eb:0b:ac:ea:ad:72:99:5e:43:83:
                    66:96:7a:4a:38:67:01:71:76:45:95:0e:11:86:fc:
                    ae:e3:6b:51:69:af:3b:1a:53:74:93:51:c0:fa:17:
                    d9:63:2b:37:f1:0f:d1:4c:b4:62:84:76:57:00:a1:
                    a9:6a:5a:90:50:bd:9a:9e:31:2e:95:ac:df:c6:26:
                    8c:7b:6d:37:4e:02:79:8a:f4:ff:39:25:a2:d9:af:
                    6b:33:c5:c5:e6:6b:ef:58:a5:0a:2e:d1:7a:22:7e:
                    32:89:a9:65:79:06:0f:3a:99:7b:9e:a4:07:12:a3:
                    cb:3d:9a:47:e0:29:c3:ff:18:e4:68:6a:98:40:5a:
                    be:40:1f:ee:89:5a:db:22:8d:51:b9:a7:b7:77:ee:
                    80:78:b1:40:5c:b7:6c:ee:88:9a:e9:34:59:a8:dd:
                    a3:69:9a:51:ca:8f:b5:59:0c:0e:41:08:5a:09:3a:
                    54:4f:b5:94:e1:82:5d:13:3f:83:0f:45:3c:dc:e9:
                    a5:15:11:e2:f4:32:af:c2:42:4b:ee:88:91:fa:90:
                    2c:15:14:88:e5:bf:e5:3c:9d:1b:ba:c5:c9:93:25:
                    2e:31:48:3b:bb:2e:f7:86:bd:a3:6a:c3:81:c9:59:
                    26:8c:55:b1:ee:62:2c:4f:55:95:8c:07:17:4b:6d:
                    a3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:4E:BB:E3:2A:5B:52:B6:CD:F5:4C:93:9B:63:FF:DA:4E:44:7B:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bb80e03a-a1f0-30de-9e5b-f636309bff39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.151.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:3d:ae:c1:e6:4e:1b:c0:be:7a:f6:dc:98:ef:86:9f:49:66:
         30:5e:ee:77:6a:a0:1b:91:1d:83:ec:52:a8:1d:e9:80:59:b1:
         60:20:e0:b5:76:b3:e6:78:91:df:16:46:fb:ec:41:9f:c2:0d:
         99:59:2d:81:54:90:66:cc:24:37:51:2e:86:ca:27:5a:97:19:
         47:d3:66:58:56:94:5d:6e:31:c2:29:56:ed:69:b0:e7:d1:1b:
         de:4d:8b:b5:44:30:d7:af:65:5f:bc:0a:5c:ff:84:ff:24:c9:
         00:8c:11:60:e3:65:f5:f0:9f:65:41:bf:3d:74:2e:51:93:b6:
         1e:72:cf:79:b1:c3:ef:a5:ba:e5:a6:c3:59:a7:5a:48:8a:6c:
         c4:98:fa:6a:6b:d8:74:a5:ec:e7:f8:a4:c9:3c:1f:ae:c2:05:
         35:fa:5c:cc:9c:3f:38:64:f4:88:2f:28:8a:66:eb:fe:40:32:
         a1:c5:1d:b4:f7:e0:18:21:58:a0:dd:31:fa:67:e2:5c:c2:93:
         b6:36:6b:d4:4d:fc:d2:3d:e8:48:4d:71:ea:60:27:c7:09:57:
         ac:81:d5:d4:e2:ad:98:9c:83:ff:ef:4c:61:32:47:ef:e6:a3:
         eb:f2:01:c4:3d:d2:19:c5:6e:5c:75:0d:b7:cf:d4:3c:d2:ae:
         a0:2d:70:2b
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZkKU5KMwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEwMDUwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJGMy
ODcyNWFiLTMwNTAtNDAzMy04NjhjLTY1Y2M5YmQ5NmQxNDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMPh9MTrC6zqrXKZXkODZpZ6SjhnAXF2RZUOEYb8
ruNrUWmvOxpTdJNRwPoX2WMrN/EP0Uy0YoR2VwChqWpakFC9mp4xLpWs38YmjHtt
N04CeYr0/zklotmvazPFxeZr71ilCi7ReiJ+MompZXkGDzqZe56kBxKjyz2aR+Ap
w/8Y5GhqmEBavkAf7ola2yKNUbmnt3fugHixQFy3bO6Imuk0Wajdo2maUcqPtVkM
DkEIWgk6VE+1lOGCXRM/gw9FPNzppRUR4vQyr8JCS+6IkfqQLBUUiOW/5TydG7rF
yZMlLjFIO7su94a9o2rDgclZJoxVse5iLE9VlYwHF0tto7UCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSmTrvjKltSts31TJObY//aTkR7RzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjL2JiODBlMDNhLWExZjAtMzBk
ZS05ZTViLWY2MzYzMDliZmYzOS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBzaXADBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAgT2uweZOG8C+evbcmO+Gn0lmMF7ud2qgG5Edg+xSqB3pgFmxYCDgtXaz5niR
3xZG++xBn8INmVktgVSQZswkN1EuhsonWpcZR9NmWFaUXW4xwilW7Wmw59Eb3k2L
tUQw169lX7wKXP+E/yTJAIwRYONl9fCfZUG/PXQuUZO2HnLPebHD76W65abDWada
SIpsxJj6amvYdKXs5/ikyTwfrsIFNfpczJw/OGT0iC8oimbr/kAyocUdtPfgGCFY
oN0x+mfiXMKTtjZr1E380j3oSE1x6mAnxwlXrIHV1OKtmJyD/+9MYTJH7+aj6/IB
xD3SGcVuXHUNt8/UPNKuoC1wKw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:11 2023 by rpki-client on console-ams.rpki-client.org