Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/13183d65-9d8f-398c-932d-db0ddc5523d3.roa
File:                     13183d65-9d8f-398c-932d-db0ddc5523d3.roa (raw, json)
Hash identifier:          XZ8LZQ1ibjceOoMNa2P0zF97H7t5cc36HaRD/Nj5dIg=
Subject key identifier:   0C:65:8E:C6:13:BB:25:0C:E5:34:27:22:5E:56:74:31:04:3C:C0:40
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16834375687
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/13183d65-9d8f-398c-932d-db0ddc5523d3.roa
Signing time:             Wed 09 Jan 2019 20:04:28 +0000
ROA not before:           Wed 09 Jan 2019 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     8987
IP address blocks:        52.32.0.0/11 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:68:34:37:56:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan  9 05:00:00 2019 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=05acf904-bf6c-4d64-98b5-95b56158158e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:81:34:63:38:6f:5f:22:ca:7d:5a:45:86:93:
                    34:2d:43:0a:2f:4a:78:c1:6e:67:4d:9f:f0:5f:13:
                    21:4c:c4:10:cf:b5:e6:0c:f9:db:da:f8:b9:50:35:
                    60:06:47:cb:9b:1b:01:c5:b7:ec:c9:45:37:fe:01:
                    e7:78:e3:0e:11:37:cb:2d:1c:b4:33:dc:3e:27:10:
                    40:d3:49:02:90:c5:6c:83:4d:10:30:22:93:9f:0a:
                    04:db:30:0f:20:b2:38:69:ef:75:a9:68:3b:c1:77:
                    a8:2a:3d:b8:20:74:85:75:8b:32:3c:44:54:c9:cc:
                    34:3f:8d:dd:ab:c2:44:3a:78:2a:84:5d:20:fe:f3:
                    df:a8:12:30:3d:92:62:e4:f2:41:d3:4b:fe:15:fa:
                    2c:c4:1e:29:26:a6:dc:ed:f9:9e:87:53:aa:7d:67:
                    71:f8:7c:31:e6:04:8d:cf:d4:70:6a:f0:db:b3:4b:
                    07:64:58:91:c5:83:48:2d:11:30:10:31:e1:ca:1c:
                    e9:a5:c1:04:a2:10:d7:49:1e:0f:2d:30:54:31:53:
                    fa:81:57:17:99:ff:d4:e7:b3:da:d6:98:39:6d:d6:
                    f1:7d:8c:b2:26:4a:b9:7a:1e:94:54:72:4d:a8:94:
                    b1:96:1e:73:59:31:fc:d0:61:be:20:f1:f7:98:03:
                    fd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:65:8E:C6:13:BB:25:0C:E5:34:27:22:5E:56:74:31:04:3C:C0:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/13183d65-9d8f-398c-932d-db0ddc5523d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.32.0.0/11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:8c:9c:d2:10:64:31:a6:00:10:8d:db:d9:eb:11:68:8a:97:
         6d:ea:fa:54:58:ad:08:46:44:fc:a5:66:ee:84:3c:25:39:49:
         ba:f4:17:cc:a1:3f:47:5f:49:28:95:b5:2b:94:1f:3e:71:91:
         27:4b:52:da:27:97:41:63:1f:a9:cd:99:30:a4:50:ec:96:ba:
         74:13:b2:f1:ec:26:7a:05:a1:0e:8b:46:48:14:7c:9d:0d:4a:
         bd:4b:63:bb:97:ae:82:28:60:e4:ae:38:37:64:29:c8:af:0a:
         24:b6:9c:06:ed:f0:3a:b1:e9:b8:34:22:c5:97:93:ed:f6:9f:
         19:50:1a:6e:8d:d5:80:76:d0:a4:a8:3d:99:a0:b7:20:ac:24:
         44:d0:51:b7:8c:43:b9:1e:e7:fc:9e:41:24:a4:01:99:a0:bc:
         ff:0c:cd:69:7c:58:c3:66:45:bf:52:26:5f:e8:7f:02:3d:7a:
         e5:0f:d6:c8:1f:eb:b2:65:f2:cc:c7:e8:ba:c3:2d:91:cf:69:
         5a:af:dc:8e:cf:5f:7a:15:d1:c5:4e:31:e2:12:9a:41:70:61:
         9f:b9:6e:64:14:e0:f6:f2:90:17:0a:00:06:b3:0a:e8:38:58:
         9b:fc:35:93:f9:e5:92:a7:b9:7a:41:1e:23:8a:99:63:f3:cd:
         73:48:40:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:33:28 2023 by rpki-client on console-ams.rpki-client.org