Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dab7e7d4-02b7-322e-a902-07b3f50a9456.roa
File:                     dab7e7d4-02b7-322e-a902-07b3f50a9456.roa (raw, json)
Hash identifier:          SCinKHGXohobtlnsf2SR8VsqGqlTEeTlpDbej5pZQZs=
Subject key identifier:   5B:FE:97:2C:8D:A9:15:A8:53:0B:C8:38:19:8F:B3:87:E1:D8:51:55
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1664BD37C37
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dab7e7d4-02b7-322e-a902-07b3f50a9456.roa
Signing time:             Sun 07 Oct 2018 00:00:43 +0000
ROA not before:           Sun 07 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.75.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:4b:d3:7c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct  7 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=782854a3-1a26-416d-893b-96bc4b18ae4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7d:ab:28:b2:ec:f7:bb:d5:29:30:9f:a6:11:
                    35:1d:ee:a2:f3:4a:bf:a6:b8:94:88:68:66:ef:c6:
                    15:2e:b4:6b:85:da:54:f6:39:f2:99:83:2f:6f:56:
                    66:e0:ff:a4:84:36:3e:ca:7c:1a:b3:00:39:05:14:
                    04:59:72:4a:73:de:a1:c8:90:8d:d8:0b:de:9f:44:
                    92:0c:af:43:77:43:fd:80:9b:3d:c9:60:64:6b:45:
                    cd:be:bf:29:be:e2:53:4d:46:0e:66:cf:cf:23:8c:
                    36:5d:46:7b:65:89:51:47:35:4c:4f:00:68:fa:79:
                    ba:42:95:92:01:bf:e5:c0:4d:ea:13:ae:c2:17:93:
                    ff:e7:ac:a5:1a:5d:53:66:8d:26:3c:54:8c:4c:58:
                    0f:ad:96:63:dc:97:76:2b:58:60:0a:ed:b2:02:ee:
                    04:41:8d:94:91:4f:3a:aa:3c:b4:b2:51:7f:3b:18:
                    24:f8:e3:ae:d8:15:98:bd:55:19:24:57:7e:32:2a:
                    b2:a1:59:e3:22:33:43:6b:4d:eb:40:12:46:35:ba:
                    5f:3c:1f:c5:b2:35:ec:62:6a:9f:48:b6:41:5d:0b:
                    76:43:01:0e:07:38:74:5c:02:9b:58:81:5e:03:7c:
                    85:5c:84:15:6d:82:54:c2:74:21:a1:88:9a:50:04:
                    13:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FE:97:2C:8D:A9:15:A8:53:0B:C8:38:19:8F:B3:87:E1:D8:51:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dab7e7d4-02b7-322e-a902-07b3f50a9456.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.75.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:c0:62:1f:15:c9:bb:70:58:80:ec:7b:e5:d9:f3:39:a4:45:
         46:15:e1:5a:01:1d:13:7c:f2:36:2c:63:56:ed:8f:82:f2:4b:
         88:e6:cf:c2:8a:67:e2:2c:f4:df:15:72:14:bd:17:49:d8:9d:
         2c:9c:50:6a:a2:a8:36:02:b1:02:ff:e7:aa:1c:da:ba:4f:8f:
         49:d1:3c:5b:ee:5a:41:32:2d:42:51:02:bd:36:3b:ba:6b:b4:
         3d:34:c8:c4:be:38:b9:4d:ec:5a:76:8d:37:3e:fa:76:37:db:
         f3:78:ef:a1:cf:2b:c7:4c:ea:56:81:54:76:16:91:87:2d:50:
         46:3d:9b:3e:5b:02:85:2d:c7:85:f7:eb:16:76:7e:23:cd:ad:
         86:c2:b8:e8:e5:65:e3:54:96:c2:4a:de:ce:12:dc:1c:c0:16:
         d5:c1:1f:7d:51:b0:e4:a9:15:a9:f0:9f:b9:e1:60:71:23:d2:
         4c:e4:ea:f6:c7:0c:76:e2:0f:1d:9a:67:fc:ca:4a:92:74:88:
         c0:53:a7:40:c7:93:58:59:06:8d:dd:38:87:99:f2:2b:ee:17:
         de:29:4f:40:52:eb:5d:e7:eb:4e:c5:4d:bf:4e:ee:cc:e6:87:
         93:41:94:f8:65:b7:6a:aa:7c:e5:33:f6:d5:c8:d4:1d:04:cc:
         4f:c9:da:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:35:55 2023 by rpki-client on console-fra.rpki-client.org