Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c29bb331-0f17-3867-a29c-31e51eb05420.roa
File:                     c29bb331-0f17-3867-a29c-31e51eb05420.roa (raw, json)
Hash identifier:          JQLCsgU5wCp3nVIq7+cNz80BIioBsyQw0fcSdKKA8X8=
Subject key identifier:   00:05:34:AC:8C:22:F7:6B:16:56:EC:77:17:E8:C4:E8:3D:3C:9F:BA
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1669631A754
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c29bb331-0f17-3867-a29c-31e51eb05420.roa
Signing time:             Sun 21 Oct 2018 10:35:28 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.56.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:96:31:a7:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=d3785fbc-c7a3-4d14-b8a9-bb4e1f6ab8b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fb:35:83:0a:5f:d3:d0:7a:98:ba:03:c1:57:
                    71:89:03:74:30:93:81:85:f7:b5:58:c3:62:5c:c9:
                    be:66:cc:36:00:a7:3f:ea:57:3b:38:a2:af:df:81:
                    9f:53:c4:53:0d:c2:9f:4e:13:c9:58:38:6c:33:12:
                    c2:a8:ee:3a:a3:8f:99:7e:1e:2a:ea:77:c0:56:c7:
                    8a:72:3d:b8:99:bd:91:85:10:ea:df:a9:f9:ba:e9:
                    19:c4:1b:45:ea:4e:1e:2d:9a:30:e2:1e:47:17:45:
                    b2:35:90:2a:1a:34:05:ce:7d:13:39:cc:b9:48:fd:
                    34:b7:ea:ef:bd:e9:37:e2:65:25:c5:ee:2c:57:b0:
                    37:d3:66:e4:4d:e2:87:de:a3:dc:d3:7c:f1:4c:0b:
                    2d:17:cc:fd:66:0d:e0:39:80:87:d9:a0:34:73:35:
                    f0:0b:1b:fc:19:31:72:19:6d:9f:3d:20:2f:b0:dd:
                    32:76:20:3a:b9:75:97:e1:1a:47:00:a3:d9:29:d2:
                    6d:30:e0:7e:05:fd:2e:0f:01:00:4c:0c:82:37:d4:
                    df:68:1c:8d:a5:70:a1:f7:81:56:9d:28:c1:71:62:
                    77:aa:7f:6d:33:37:59:f9:8b:d1:76:d3:b7:7e:ab:
                    d6:76:24:15:c2:20:35:04:27:de:f3:aa:64:34:61:
                    a7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:05:34:AC:8C:22:F7:6B:16:56:EC:77:17:E8:C4:E8:3D:3C:9F:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c29bb331-0f17-3867-a29c-31e51eb05420.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.56.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:b9:47:7a:06:61:8a:19:a6:a2:44:c0:f6:e7:36:93:b2:7d:
         9f:b1:54:f4:44:7c:e7:47:80:91:e7:d2:33:c6:9f:d5:76:ea:
         d4:ae:d4:56:ba:29:c1:3f:76:c7:8d:38:89:f8:18:aa:16:8d:
         7a:ff:59:8d:b5:48:1e:ce:21:71:49:d1:38:8b:38:8e:18:49:
         6e:21:55:9f:4c:ac:a2:bc:0c:5c:93:c9:cc:18:28:74:f7:c9:
         a2:82:31:6a:65:b5:d2:08:a1:1b:e3:d0:a8:e8:25:2c:d6:a8:
         96:0d:cd:11:a2:31:0e:d2:4f:e9:9d:40:01:92:26:6d:fd:1b:
         ed:0e:2a:63:58:88:4e:e4:4f:cb:47:f3:c7:4c:b7:84:67:9c:
         e4:cf:67:00:eb:ad:3b:bd:3c:59:52:7c:2e:1b:12:f0:5b:f9:
         66:d7:b0:73:97:29:b8:f6:60:e3:6b:62:50:e7:ea:5a:ce:95:
         04:c8:91:31:37:af:81:b9:33:10:25:1f:75:f4:81:2e:94:91:
         ad:17:1c:a4:3c:db:d3:bd:d4:ca:cb:96:56:84:86:7f:4c:f3:
         43:76:ce:cb:e5:c6:fa:2c:ff:93:e8:b4:4c:f8:49:24:c3:f0:
         6b:bf:81:14:02:06:0c:90:31:96:69:9f:ff:8d:35:ac:04:0f:
         a7:be:d9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:35:07 2023 by rpki-client on console-fra.rpki-client.org