Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a64988f6-7fde-3f54-80a3-4ca40908fc7c.roa
File:                     a64988f6-7fde-3f54-80a3-4ca40908fc7c.roa (raw, json)
Hash identifier:          euJxcR5tDKyTGcN8LOefwP9Wog3KgHN7pWLyNUZYjBM=
Subject key identifier:   28:BD:F9:AC:14:A0:CE:2F:0B:14:67:6C:35:94:70:43:17:C0:18:96
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16695B48ED6
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a64988f6-7fde-3f54-80a3-4ca40908fc7c.roa
Signing time:             Sun 21 Oct 2018 08:18:50 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     38895
IP address blocks:        54.199.0.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b4:8e:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=008aff13-9b7a-4cc0-9251-eebcf5b8682e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fc:be:58:76:84:f5:d7:43:ba:5f:18:06:2b:
                    f1:50:3f:2a:47:a5:e5:28:ec:14:6d:1a:8b:de:f3:
                    dc:e2:c3:31:69:b8:ae:9e:d2:23:64:e6:1a:a5:b9:
                    30:db:e0:27:23:7d:1d:3c:7f:34:e5:48:91:12:68:
                    ef:e0:52:99:6d:53:d8:2c:22:e7:42:37:d1:65:77:
                    c3:e5:70:56:36:b7:56:1b:be:89:38:7d:4f:66:b0:
                    29:c8:f0:19:32:be:4d:3e:49:52:2c:3a:63:bf:23:
                    d1:d7:48:a5:ad:e3:00:99:fe:4d:25:ac:6f:f1:94:
                    02:43:d0:a7:40:d1:cc:9d:25:35:97:b0:21:87:3d:
                    0c:27:b2:02:e5:26:50:36:02:4e:94:d6:75:20:76:
                    9b:3e:45:0e:fe:5f:b0:80:9f:fb:57:1b:16:07:94:
                    40:01:0d:cd:42:26:42:b0:4d:06:ea:40:48:c9:c0:
                    02:45:7e:db:0a:19:ef:be:40:23:b4:42:ac:cd:92:
                    b9:1e:83:46:1c:87:60:52:21:2c:87:eb:e3:33:cc:
                    c2:1d:e0:03:d0:12:6c:fb:fa:f3:91:69:d3:5c:a4:
                    5d:85:35:04:3d:36:78:9a:30:6a:c3:f2:15:17:fb:
                    94:d5:e2:c0:19:11:e5:d4:13:48:d1:7d:7d:a3:6b:
                    c4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BD:F9:AC:14:A0:CE:2F:0B:14:67:6C:35:94:70:43:17:C0:18:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a64988f6-7fde-3f54-80a3-4ca40908fc7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.199.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:c2:db:cf:d8:89:b2:f8:25:dd:c4:a5:cc:cb:55:05:d2:f1:
         0d:ac:e0:dd:c3:79:bc:f8:ec:de:a1:f7:a3:28:08:f5:a0:86:
         de:69:86:af:0c:84:46:33:66:dd:aa:d3:10:10:14:59:99:ae:
         5c:1f:17:dd:54:a5:c3:1e:67:96:ec:32:1b:45:39:c9:56:50:
         30:8e:88:4c:16:2a:2c:a6:b8:f6:6e:d9:1d:b5:91:97:73:d0:
         52:57:0e:93:2e:89:88:22:8d:3e:43:21:83:c3:72:53:ca:0f:
         97:3f:91:5b:f1:d0:52:69:ee:d0:10:8a:5c:57:31:ee:55:1a:
         cd:8c:03:43:b8:5e:45:d8:e4:64:9c:4c:c1:dc:b6:a1:23:dd:
         07:dd:93:94:96:b4:01:a3:67:63:62:68:e0:00:57:5e:4e:fe:
         5a:97:22:82:69:6e:bf:0d:d4:0f:5b:d8:d2:e0:7c:1d:e6:50:
         ca:56:ae:98:01:12:06:74:88:f6:bf:ad:0a:18:a8:cf:fa:41:
         85:cc:07:b6:ec:2f:59:bd:87:c9:ab:7c:31:89:00:1c:5e:d0:
         52:eb:24:23:00:02:fd:6d:7e:00:0e:51:6a:dd:2e:b3:ca:27:
         d0:5c:f5:c0:81:e9:1f:93:83:a1:16:a7:08:2d:fa:45:2d:b3:
         5c:39:30:bb
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZpW0jtYwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEwMjEwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJDAw
OGFmZjEzLTliN2EtNGNjMC05MjUxLWVlYmNmNWI4NjgyZTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAKb8vlh2hPXXQ7pfGAYr8VA/Kkel5SjsFG0ai97z
3OLDMWm4rp7SI2TmGqW5MNvgJyN9HTx/NOVIkRJo7+BSmW1T2Cwi50I30WV3w+Vw
Vja3Vhu+iTh9T2awKcjwGTK+TT5JUiw6Y78j0ddIpa3jAJn+TSWsb/GUAkPQp0DR
zJ0lNZewIYc9DCeyAuUmUDYCTpTWdSB2mz5FDv5fsICf+1cbFgeUQAENzUImQrBN
BupASMnAAkV+2woZ775AI7RCrM2SuR6DRhyHYFIhLIfr4zPMwh3gA9ASbPv685Fp
01ykXYU1BD02eJowasPyFRf7lNXiwBkR5dQTSNF9faNrxDMCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQovfmsFKDOLwsUZ2w1lHBDF8AYljCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjL2E2NDk4OGY2LTdmZGUtM2Y1
NC04MGEzLTRjYTQwOTA4ZmM3Yy5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBzbHADBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAhcLbz9iJsvgl3cSlzMtVBdLxDazg3cN5vPjs3qH3oygI9aCG3mmGrwyERjNm
3arTEBAUWZmuXB8X3VSlwx5nluwyG0U5yVZQMI6ITBYqLKa49m7ZHbWRl3PQUlcO
ky6JiCKNPkMhg8NyU8oPlz+RW/HQUmnu0BCKXFcx7lUazYwDQ7heRdjkZJxMwdy2
oSPdB92TlJa0AaNnY2Jo4ABXXk7+Wpcigmluvw3UD1vY0uB8HeZQylaumAESBnSI
9r+tChioz/pBhcwHtuwvWb2Hyat8MYkAHF7QUuskIwAC/W1+AA5Rat0us8on0Fz1
wIHpH5ODoRanCC36RS2zXDkwuw==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:37:18 2023 by rpki-client on console.sobornost.net