Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bdb9ec14-7b53-35a9-9330-fcd78b439648.roa
File:                     bdb9ec14-7b53-35a9-9330-fcd78b439648.roa (raw, json)
Hash identifier:          oWG0wcRRYiZ3y34T77VV0yjUs8PfX/dPX1V0QKGlNcw=
Subject key identifier:   F4:10:BC:68:F2:0E:6C:36:4D:FA:FD:14:7D:56:F5:CA:33:B8:0F:E8
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665C2E9683
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bdb9ec14-7b53-35a9-9330-fcd78b439648.roa
Signing time:             Wed 10 Oct 2018 04:14:09 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.46.216.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:2e:96:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=99dba1dc-47f2-460d-802d-295e1630313b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:81:71:88:e8:3f:f0:79:18:80:93:97:e3:3a:
                    99:4f:23:3a:b5:ab:2f:9f:91:88:ac:68:03:ea:57:
                    62:13:29:3a:80:68:0e:09:88:d2:a8:aa:a1:7e:06:
                    a4:8b:c1:aa:79:7a:f6:be:76:dc:3a:bc:31:84:ef:
                    ec:4f:fb:01:b4:21:a8:e8:0f:f5:32:cb:19:4d:6b:
                    1d:48:25:c1:43:d6:45:34:56:1f:8a:c2:2f:2b:70:
                    5c:17:5d:a8:82:69:d7:09:4b:ea:37:ce:12:df:3d:
                    f9:6a:3c:96:38:2e:da:76:4a:4f:88:7f:8c:d3:f5:
                    31:f2:84:38:0f:65:78:d2:35:73:d2:0a:37:b6:3a:
                    09:1b:03:ea:4d:fa:31:ee:1d:6c:61:18:fc:01:28:
                    08:00:5a:1a:26:d7:01:21:84:10:e3:e7:8f:63:d0:
                    55:1e:88:20:15:6e:55:96:e3:5b:50:72:0f:e4:48:
                    15:ce:bb:9d:ff:92:16:be:f5:f2:41:3e:99:0f:13:
                    58:b4:79:61:2a:f4:c0:0a:98:70:22:9f:2d:64:5f:
                    8d:cb:31:56:ae:6f:92:0a:06:8b:1a:e8:69:7a:2e:
                    ac:45:2c:70:bf:db:00:c2:38:71:75:52:92:20:85:
                    5b:81:9b:5a:4f:e2:6a:e4:d1:9f:5a:e9:dd:ff:54:
                    0e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:10:BC:68:F2:0E:6C:36:4D:FA:FD:14:7D:56:F5:CA:33:B8:0F:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bdb9ec14-7b53-35a9-9330-fcd78b439648.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.46.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:0b:ab:28:78:6f:91:23:55:24:89:30:56:03:2c:87:a4:12:
         b4:96:37:12:7e:e3:50:e7:21:b4:d2:41:74:e4:6e:3b:c3:c3:
         56:59:73:de:3d:86:88:9d:e0:42:1c:a9:85:82:2d:83:32:c1:
         d2:76:b2:50:54:30:ec:d7:18:77:c2:5e:fa:3e:f3:38:b5:40:
         f8:b2:8e:93:f3:d4:63:82:ca:56:c4:24:eb:a3:13:82:ea:19:
         c7:bf:61:41:12:53:73:e7:49:ea:f4:57:29:a0:fa:45:44:d3:
         43:70:fb:c2:6c:fe:5c:ac:a2:c5:09:7e:b5:81:fb:4d:b9:8a:
         b8:c4:e1:71:5a:f0:b3:a6:4d:91:35:4a:e5:a7:62:4c:79:f2:
         a7:04:dc:26:43:89:05:d8:90:f1:5e:95:22:57:95:8a:91:e3:
         25:7e:6d:0b:b9:57:0f:b7:0c:0d:2f:bd:35:52:f4:fb:c8:a7:
         f4:33:56:57:07:c0:29:27:72:06:df:ab:64:59:cc:29:8b:ad:
         4f:db:c6:65:a5:c9:bc:b3:55:a3:2d:cb:3e:6c:91:16:5f:37:
         71:fd:ef:d8:86:19:40:01:42:8e:be:ee:90:3e:c9:a4:68:a7:
         42:6b:81:f9:da:cd:09:e5:96:ef:58:1f:09:4f:78:d4:26:0c:
         bd:bf:66:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:13 2023 by rpki-client on console-ams.rpki-client.org