Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/56eb7d72-b0f0-376a-8498-e21bf781c8d3.roa
File:                     56eb7d72-b0f0-376a-8498-e21bf781c8d3.roa (raw, json)
Hash identifier:          zezidecPbLlmERH80Aa50CRfDxxJtLCKX+mdG7Y29Os=
Subject key identifier:   9D:06:B6:91:AE:C1:AF:82:6F:5D:A6:F1:D8:14:7B:28:68:90:49:69
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16695B4698D
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/56eb7d72-b0f0-376a-8498-e21bf781c8d3.roa
Signing time:             Sun 21 Oct 2018 08:18:40 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     38895
IP address blocks:        54.178.0.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b4:69:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=7f48cf7d-2728-415b-ba09-f0524937d030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:85:ee:79:98:c5:b9:79:0e:81:70:99:00:e0:
                    83:91:d7:9f:04:09:d0:2d:2f:fc:a6:b8:5d:05:56:
                    3f:e0:c3:cd:6d:ea:18:58:35:59:66:da:2f:30:e4:
                    a6:9f:31:89:4e:b6:6a:a3:e0:f1:01:de:70:94:dc:
                    80:20:50:26:53:7a:95:13:a3:69:94:09:77:a7:9d:
                    3d:7c:0c:6a:fe:a4:4b:bd:5c:cf:c9:dd:47:18:36:
                    5f:8b:66:d8:64:e9:a8:52:72:18:fe:fa:28:7c:a1:
                    fd:97:d7:2c:05:d7:b0:57:7f:80:d5:53:b0:d5:65:
                    cf:8d:98:96:ac:c7:c8:02:d2:14:2e:d3:3c:4b:2f:
                    4a:9e:a7:2d:e8:84:cb:f6:c7:27:39:f2:ec:9e:e3:
                    d0:8d:5f:27:95:3a:01:70:cc:b9:60:ce:7b:6a:80:
                    5d:34:c7:2e:26:ea:7c:73:50:d1:f5:03:66:5e:13:
                    d8:b0:66:85:9b:48:c4:78:e2:6f:bb:40:df:fc:97:
                    00:82:f0:ea:ca:57:d8:4c:96:5f:14:56:db:db:f9:
                    b1:c8:e0:29:07:7e:f6:48:23:db:d0:06:9a:df:85:
                    54:18:3f:ab:bc:af:b5:95:91:fa:49:0a:40:78:ae:
                    eb:50:a0:11:32:03:aa:29:87:7f:2d:37:f9:a8:3f:
                    f3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:06:B6:91:AE:C1:AF:82:6F:5D:A6:F1:D8:14:7B:28:68:90:49:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/56eb7d72-b0f0-376a-8498-e21bf781c8d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.178.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:56:4e:13:ec:fc:bb:d5:b1:6c:ce:b7:80:76:19:2e:ee:1d:
         7c:f6:d5:e0:4d:44:62:06:ac:38:44:84:50:ad:64:ec:96:87:
         c4:be:3c:d2:84:ec:31:2c:ea:63:79:ee:1a:5c:0d:82:2b:02:
         43:fa:cf:9b:cf:4f:81:38:fa:bf:9a:ac:cd:c8:72:a1:94:d1:
         cc:24:e4:6e:04:30:0d:fb:94:7c:05:85:9e:a1:49:2d:f1:e9:
         0d:48:76:be:67:5b:30:a6:8f:db:bc:e3:0b:eb:07:39:46:4d:
         3e:bb:28:a7:a8:97:78:89:3c:57:88:61:04:b0:97:82:93:b1:
         90:22:f2:eb:57:a5:8c:d4:a9:2a:cc:c2:97:d3:66:f2:1b:34:
         67:10:9f:2b:8d:22:2d:e0:ae:cb:7a:3f:f9:63:ed:5e:e6:ef:
         6f:a8:d1:3f:ea:5a:7d:89:45:88:30:9f:40:7c:4b:6e:63:8c:
         6c:69:e7:11:d6:7c:77:49:9d:5a:ea:c1:aa:79:69:fe:76:de:
         db:62:d2:da:72:db:9c:ee:0e:b6:ef:b2:36:82:08:5b:e2:fa:
         67:e1:b3:e1:c0:07:6e:2e:f5:8e:59:06:d8:13:6e:4e:0e:cc:
         a0:fe:d5:57:85:b9:04:01:80:60:3a:ba:10:31:1a:56:ff:d1:
         25:cf:e9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:37:11 2023 by rpki-client on console.sobornost.net