Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/eb1fc6d0-9188-3eb4-ac00-d4beb6c52c47.roa
File:                     eb1fc6d0-9188-3eb4-ac00-d4beb6c52c47.roa (raw, json)
Hash identifier:          qR24O/ijQBA5zmAUyEaRWUSas2+zvUJva3shjld0ep0=
Subject key identifier:   8D:C4:B1:D8:5E:A1:91:12:48:1A:E9:3D:78:AD:0E:AE:FA:A1:C3:9D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665CD3B4BD
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/eb1fc6d0-9188-3eb4-ac00-d4beb6c52c47.roa
Signing time:             Wed 10 Oct 2018 07:14:30 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     38895
IP address blocks:        13.228.0.0/15 maxlen: 15

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:d3:b4:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=bc5fa460-857d-4544-8483-132f13687d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e2:3a:24:29:2a:c7:e1:55:b4:16:33:48:23:
                    4b:26:24:b2:99:2b:3c:d1:7b:87:b3:38:e0:a5:2d:
                    47:16:7f:b0:b4:5c:96:67:c4:aa:eb:8f:66:28:bf:
                    01:b3:75:12:86:d9:76:63:5a:1b:71:ee:f1:b6:90:
                    b2:d5:48:b2:1f:44:e9:38:10:16:db:c8:43:9a:c3:
                    43:4a:e3:85:d9:23:dc:f0:29:fe:bf:b4:a4:da:d5:
                    aa:9e:ac:09:20:e1:e1:19:27:6a:bb:54:3e:37:a8:
                    f5:88:0f:8e:fe:05:c9:80:8e:85:ab:de:69:59:bc:
                    d6:6e:67:40:ae:7f:60:3f:b9:c4:bc:d6:8f:ed:b8:
                    83:91:cf:04:4f:85:af:2f:ab:bf:bc:50:a9:ee:27:
                    c5:b6:36:d3:5b:82:49:ac:c5:5c:96:53:2a:86:a9:
                    12:2f:48:3f:4f:78:0f:43:03:f3:1e:86:2b:3a:21:
                    2e:d6:bd:80:ea:36:d2:16:19:5a:a0:dd:0d:00:0a:
                    9c:95:b2:7f:ac:a9:a6:50:26:05:f9:1a:f1:95:a8:
                    0e:f6:e7:03:a4:31:68:38:84:55:3b:e6:15:00:a4:
                    1f:1b:fb:65:94:35:45:a2:95:41:62:13:a6:42:5c:
                    65:d4:1e:3b:3e:4f:fd:83:de:ae:88:17:05:89:bd:
                    8d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C4:B1:D8:5E:A1:91:12:48:1A:E9:3D:78:AD:0E:AE:FA:A1:C3:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/eb1fc6d0-9188-3eb4-ac00-d4beb6c52c47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.228.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:91:01:31:6d:f7:ec:26:e8:b4:a6:28:5a:8f:ed:03:f9:0c:
         32:58:ab:d1:10:da:dd:55:8d:d4:d6:42:f1:c7:a7:cf:d3:61:
         dc:e9:32:2d:fe:91:27:09:05:37:64:02:57:34:aa:94:47:2c:
         33:6f:c6:8c:87:f6:4e:62:a1:37:68:cd:8a:85:1e:d5:a4:89:
         59:24:a9:e1:48:5e:7f:c8:3e:f8:2f:1a:4c:1f:5d:79:3b:6c:
         de:85:2b:23:77:f0:e1:23:0e:d0:74:e6:f0:0f:d6:b7:f6:63:
         03:e4:cf:a9:26:f1:dc:df:5b:c4:8f:bd:e7:15:8d:7a:47:5c:
         54:13:0f:87:29:6a:b3:d4:4c:19:93:d1:8c:b6:d5:25:f9:76:
         a3:cf:a1:6b:7b:b9:ad:f0:6a:75:54:c1:0a:cc:d0:cc:d4:13:
         b3:94:ee:8c:4d:9f:9e:2a:07:33:01:73:af:9d:66:89:79:c9:
         d4:f9:89:f7:68:61:31:72:27:52:76:1d:2e:fd:e4:e8:53:73:
         2e:33:5a:1a:ad:75:e0:da:12:df:25:c6:38:0a:9c:ac:50:af:
         cd:2f:f2:b4:60:96:6a:98:3b:ec:79:8f:42:f3:87:bf:4b:ba:
         20:0e:2b:07:20:b6:3f:e5:62:1b:c8:ae:59:e9:1b:1b:5e:e0:
         14:d1:0a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:36:29 2023 by rpki-client on console-fra.rpki-client.org