Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dfa2db9c-5452-33b9-8453-7f3b3c08c121.roa
File:                     dfa2db9c-5452-33b9-8453-7f3b3c08c121.roa (raw, json)
Hash identifier:          SJToeAC4SaO1HGX973NYYeWimBRq0NF7vZsGbn1TCCs=
Subject key identifier:   98:90:4E:A5:C8:F0:FB:F4:0D:18:CF:1B:45:1A:53:1C:AF:C2:D7:9F
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665C074C17
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dfa2db9c-5452-33b9-8453-7f3b3c08c121.roa
Signing time:             Wed 10 Oct 2018 03:31:14 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.46.182.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:07:4c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=b5c00909-4da3-4a22-b0cd-33333c956981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e1:27:df:87:06:c7:a1:bd:78:d7:84:33:45:
                    84:9e:65:ba:cd:8d:49:41:93:ff:12:fa:12:dd:3b:
                    9c:7e:57:43:04:6f:de:ed:39:21:92:e2:f6:e5:4f:
                    a5:cd:61:e2:b4:00:14:91:00:4f:93:5a:9e:da:15:
                    5c:b3:55:d6:11:d1:9f:39:69:42:f1:46:43:7d:11:
                    e0:a3:17:1e:72:e8:65:32:3e:9e:f2:9f:17:a3:ee:
                    0d:ea:cf:3d:69:ef:f7:7b:06:2f:10:46:56:08:bc:
                    97:c8:a7:6a:d0:93:76:97:b3:00:39:e2:ef:b6:21:
                    ff:e0:bd:53:22:15:04:81:39:d9:c6:d4:43:d7:c9:
                    eb:de:18:58:45:04:03:60:59:53:d8:0a:3f:5b:75:
                    61:be:12:30:eb:e5:0f:aa:d1:60:0c:63:f9:f0:ca:
                    09:78:9a:a8:21:2a:75:5a:5f:ff:7a:48:4e:cf:2a:
                    d7:78:b0:e0:f5:b2:af:2e:c6:1a:d7:99:39:a6:40:
                    a5:72:5c:ab:05:a0:41:07:38:2d:76:2f:ab:71:90:
                    d4:63:29:bc:42:de:60:e7:ef:75:e7:4e:65:a4:00:
                    6c:34:7c:59:e5:cc:44:ae:87:8c:a9:bd:6e:df:8f:
                    7c:72:6c:76:12:03:d6:49:1d:fa:b7:e2:0b:23:9a:
                    70:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:90:4E:A5:C8:F0:FB:F4:0D:18:CF:1B:45:1A:53:1C:AF:C2:D7:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dfa2db9c-5452-33b9-8453-7f3b3c08c121.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.46.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:dd:18:83:9a:66:f4:93:ef:5e:ef:85:f2:ca:f2:80:aa:14:
         21:11:3f:5f:7c:49:65:de:97:ff:f5:ba:97:50:4e:d0:7e:e6:
         1a:86:d9:a6:83:c5:e9:35:e1:0b:63:ae:dc:d2:f7:2e:53:00:
         eb:d2:2b:68:09:60:c7:c1:f4:1f:d4:20:6b:9b:10:8d:45:c4:
         58:88:08:bc:31:e5:db:55:8e:01:bc:d2:e9:98:93:e1:d3:b0:
         e8:3e:88:56:32:7f:e9:bd:48:e6:22:7b:32:df:59:39:50:e4:
         f7:88:d7:74:e3:25:02:ba:b7:d4:ab:75:08:1b:b7:9d:13:04:
         c7:ca:81:c5:1c:a7:26:9d:be:3c:a9:04:65:0c:f5:a7:3a:c2:
         21:51:1d:5f:4e:7c:b5:8f:f9:de:9d:98:ad:65:1d:9e:b2:89:
         96:c0:b8:0f:ef:d4:19:38:3a:9a:13:b0:9d:51:22:bd:5c:45:
         a5:99:ff:8a:6f:c8:2c:16:d2:42:bd:b6:48:f1:dc:56:29:f0:
         19:c0:7f:e0:43:23:cc:60:3b:87:58:cf:8c:eb:08:8f:2f:80:
         df:c8:f1:46:e2:53:5c:82:42:f5:ff:66:46:65:a8:c8:9f:6b:
         83:41:68:07:39:f7:e3:85:53:27:b2:90:4f:e7:2c:1a:cf:4c:
         22:43:75:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:36:04 2023 by rpki-client on console-fra.rpki-client.org