Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fe9dde9f-9188-336a-bcd1-f79e963d65a7.roa
File:                     fe9dde9f-9188-336a-bcd1-f79e963d65a7.roa (raw, json)
Hash identifier:          Hos+NANsUHU3mbLBVQuwn0u8SGZVfQ2j07ovZR/xDxQ=
Subject key identifier:   82:1E:2C:B4:97:2C:1B:BE:EC:42:E0:B5:E6:EC:D9:A6:D4:8F:5D:DC
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DD3E8C3D37EB373D8A6D08180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fe9dde9f-9188-336a-bcd1-f79e963d65a7.roa
Signing time:             Sat 07 May 2022 12:00:00 +0000
ROA not before:           Sat 07 May 2022 12:00:00 +0000
ROA not after:            Sun 12 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.48.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d3:e8:c3:d3:7e:b3:73:d8:a6:d0:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May  7 12:00:00 2022 GMT
            Not After : Jun 12 04:00:00 2022 GMT
        Subject: CN=a699ddc6-5ee8-4b25-b982-83bdc7e56316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:20:b8:3d:67:40:36:e8:be:48:05:8d:e0:49:
                    c5:07:d0:ee:62:a4:c5:6b:23:22:3a:43:48:9c:5d:
                    0f:84:b4:a5:ae:e5:97:e1:39:f6:b9:7e:db:ec:5d:
                    fc:6a:85:23:f1:62:50:ef:cf:bd:82:b5:98:ff:2f:
                    0a:18:e7:c1:18:ae:87:60:f6:18:53:dc:17:36:cc:
                    fa:2a:5b:bf:00:6f:7b:a8:af:ef:ce:85:a3:2d:2f:
                    2f:71:4a:d2:e7:e3:4c:f2:ae:66:0f:83:c4:33:61:
                    c2:39:a8:e1:80:30:6d:f7:e4:41:17:05:cc:03:50:
                    fb:e4:66:3e:60:a4:2b:b3:8b:65:0b:a5:ce:48:8d:
                    0f:65:fa:7d:a9:50:0a:95:c1:41:f6:d0:ed:10:b9:
                    a0:13:0e:b7:60:bc:a4:ec:c0:64:1f:75:2d:19:e2:
                    b4:84:73:58:4c:30:b5:19:ec:1a:4c:de:3b:3f:a8:
                    bf:92:12:3d:c2:c8:6b:1f:58:34:b0:f3:4c:9a:f9:
                    bc:85:21:ee:bb:4e:dc:34:ee:cb:6b:8b:4a:84:be:
                    c6:97:a2:5a:63:69:7b:77:ba:5c:36:7b:70:12:0a:
                    fd:13:87:12:e9:b5:5c:2f:a3:3e:f6:5b:f2:32:49:
                    dc:c9:04:f9:4b:62:fd:ec:7c:2e:6e:06:d6:bd:b6:
                    0b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:1E:2C:B4:97:2C:1B:BE:EC:42:E0:B5:E6:EC:D9:A6:D4:8F:5D:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fe9dde9f-9188-336a-bcd1-f79e963d65a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.48.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:8b:a4:19:f0:0b:cc:3b:1d:c3:ba:95:c0:f8:e8:70:0f:8c:
         f9:f2:f9:1d:e7:39:d4:32:86:cd:74:05:66:60:cc:1b:f1:d5:
         90:f2:ca:be:e4:4c:3d:83:1d:70:a7:01:0c:ef:56:df:ab:cd:
         16:93:90:5b:0b:0d:6d:ba:2a:dc:b0:03:0e:b0:46:5e:7a:9d:
         42:9b:83:ba:46:4a:9c:2b:56:0e:46:41:ab:42:5a:ce:de:ba:
         09:82:1d:71:9e:f2:7f:b1:cd:de:bb:69:6a:27:8a:16:69:03:
         5d:02:48:f6:93:b2:7e:e8:86:fb:40:25:7d:2e:fc:98:85:fb:
         7d:7a:91:51:b5:bc:f7:1f:33:b0:7e:73:97:03:3c:f1:78:40:
         3a:85:13:54:48:30:d2:38:60:1c:42:5f:90:b1:b5:07:ee:06:
         63:a7:73:c0:6e:ea:c0:4d:03:17:23:b7:57:cb:92:68:9d:49:
         7d:98:8d:e6:75:44:46:69:96:47:84:61:89:6e:4f:62:f2:fb:
         07:cc:75:68:30:db:6e:10:bd:b9:1a:7d:de:0a:95:98:8a:51:
         66:6e:e2:0e:4d:2a:a2:68:9b:90:7d:87:e0:ac:02:43:2b:36:
         55:d4:65:ca:98:fa:4d:1c:03:c0:42:0d:2e:05:4d:e5:52:94:
         5b:da:64:a4
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD3T6MPTfrNz2KbQgYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUwNzEyMDAwMFoXDTIyMDYxMjA0MDAwMFowLzEtMCsGA1UEAxMk
YTY5OWRkYzYtNWVlOC00YjI1LWI5ODItODNiZGM3ZTU2MzE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CC4PWdANui+SAWN4EnFB9DuYqTFayMiOkNI
nF0PhLSlruWX4Tn2uX7b7F38aoUj8WJQ78+9grWY/y8KGOfBGK6HYPYYU9wXNsz6
Klu/AG97qK/vzoWjLS8vcUrS5+NM8q5mD4PEM2HCOajhgDBt9+RBFwXMA1D75GY+
YKQrs4tlC6XOSI0PZfp9qVAKlcFB9tDtELmgEw63YLyk7MBkH3UtGeK0hHNYTDC1
GewaTN47P6i/khI9wshrH1g0sPNMmvm8hSHuu07cNO7La4tKhL7Gl6JaY2l7d7pc
NntwEgr9E4cS6bVcL6M+9lvyMkncyQT5S2L97HwubgbWvbYLOwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIIeLLSXLBu+7ELgtebs2abUj13cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZmU5ZGRlOWYtOTE4OC0z
MzZhLWJjZDEtZjc5ZTk2M2Q2NWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEjAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAd4ukGfALzDsdw7qVwPjocA+M+fL5Hec51DKGzXQFZmDMG/HVkPLKvuRM
PYMdcKcBDO9W36vNFpOQWwsNbboq3LADDrBGXnqdQpuDukZKnCtWDkZBq0Jazt66
CYIdcZ7yf7HN3rtpaieKFmkDXQJI9pOyfuiG+0AlfS78mIX7fXqRUbW89x8zsH5z
lwM88XhAOoUTVEgw0jhgHEJfkLG1B+4GY6dzwG7qwE0DFyO3V8uSaJ1JfZiN5nVE
RmmWR4RhiW5PYvL7B8x1aDDbbhC9uRp93gqVmIpRZm7iDk0qomibkH2H4KwCQys2
VdRlypj6TRwDwEINLgVN5VKUW9pkpA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:37:01 2023 by rpki-client on console-fra.rpki-client.org