Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/354fb1ab-60ed-30eb-85fb-ba44bf383394.roa
File:                     354fb1ab-60ed-30eb-85fb-ba44bf383394.roa (raw, json)
Hash identifier:          wvrBH9E4kAIWrNt/sYMvBdv1URFWXFX4xuGvL84lfaA=
Subject key identifier:   11:C4:71:C2:93:6E:AA:37:2D:E4:14:03:23:98:B4:0B:EC:A3:13:BB
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665D250FA0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/354fb1ab-60ed-30eb-85fb-ba44bf383394.roa
Signing time:             Wed 10 Oct 2018 08:43:21 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     38895
IP address blocks:        54.179.192.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5d:25:0f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=fafb871e-ba9c-447f-aebb-490eb2cae03b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:de:6b:e7:0a:05:6d:ef:cf:49:8f:36:c5:69:
                    52:08:f7:e8:76:4f:a7:c6:3a:83:4b:68:6e:97:b3:
                    1a:5f:f2:81:6d:56:04:55:96:ea:fd:30:61:4d:11:
                    81:b9:85:79:d9:62:93:9e:dc:7f:78:bc:93:a6:f6:
                    b7:b3:f5:c1:97:3d:6f:6d:15:bf:8c:29:46:68:28:
                    4c:0f:98:02:d9:13:cf:e1:12:00:ed:0f:9f:e1:d5:
                    ad:4f:02:eb:06:8d:0f:0d:50:14:6a:c6:5f:d1:c1:
                    49:22:9e:d2:ba:35:bc:32:03:71:c7:1f:25:06:f3:
                    98:73:7b:5a:8a:4f:ab:d8:8e:43:12:52:70:98:33:
                    ee:b3:d8:38:94:c7:04:26:18:99:87:1d:b6:7a:00:
                    cf:b0:23:c4:89:c3:e0:99:2b:03:ca:f3:3d:68:f4:
                    76:79:19:04:2b:ae:4d:5e:dd:c5:83:04:f2:1e:2e:
                    09:a7:e5:88:da:85:ec:5c:55:97:44:2a:95:70:d8:
                    3d:c3:b4:06:0e:88:f7:e9:9b:17:9f:27:90:c5:17:
                    fd:06:64:f6:79:bb:bf:41:ca:24:5b:af:e9:42:1b:
                    a8:ee:5d:39:54:d5:f5:97:a1:66:49:3b:d0:64:2f:
                    d2:13:31:e6:d7:8b:f0:a6:ee:f6:c9:78:c7:29:3f:
                    ee:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C4:71:C2:93:6E:AA:37:2D:E4:14:03:23:98:B4:0B:EC:A3:13:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/354fb1ab-60ed-30eb-85fb-ba44bf383394.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.179.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:7d:e1:e6:e6:be:4d:f9:11:cf:1c:61:44:69:56:58:3d:fb:
         03:dd:72:e6:78:a6:98:3c:0a:25:03:f4:a3:5d:02:a3:2f:68:
         53:76:ec:f2:16:6c:0c:7f:74:5c:7b:50:3d:df:1b:ae:68:f4:
         fa:4f:2b:43:09:94:2d:67:c0:ff:8e:cc:6a:9c:4c:6d:46:8d:
         a7:f8:2c:86:e3:c7:68:9f:2a:b7:53:10:df:dd:0c:db:f0:c1:
         c9:cc:70:7b:4e:de:2c:15:cc:fb:5b:56:00:78:61:97:9a:3b:
         7a:14:37:99:e9:27:64:2c:c0:a7:b4:a6:6e:ed:85:40:77:d2:
         14:ff:81:5e:e0:48:f5:f7:97:79:ab:1b:e9:43:b4:46:d0:fb:
         d3:4d:a2:8d:56:ca:c0:92:76:38:08:1a:4f:6a:7b:6e:d3:eb:
         ed:c5:53:7b:02:df:2e:15:b3:1a:cf:de:21:af:9c:94:c8:0b:
         b0:4d:05:32:d1:83:72:d1:b7:20:13:5c:5b:20:01:dd:59:15:
         1c:e5:02:e7:95:70:2d:a7:08:a2:47:d8:95:f6:32:24:39:bb:
         45:e2:78:03:af:cc:7d:de:65:63:d3:bb:b1:1a:ac:ea:20:4e:
         36:19:07:95:eb:8f:74:92:3f:b9:59:86:5c:75:22:6e:6d:9c:
         1e:e8:ff:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:37:07 2023 by rpki-client on console.sobornost.net