Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/03e1337d-fc5b-3091-821b-5f45b2c88f1f.roa
File:                     03e1337d-fc5b-3091-821b-5f45b2c88f1f.roa (raw, json)
Hash identifier:          8iXAStkYqhaRumkRnBCY3/mUTUtwYJHXEJtCbQAIU1k=
Subject key identifier:   32:6E:BB:7D:58:6F:D6:8B:E9:64:E7:A1:CB:32:9A:67:8B:32:D5:8D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858406DCBBB96973C13EC07638D80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/03e1337d-fc5b-3091-821b-5f45b2c88f1f.roa
Signing time:             Sat 31 Dec 2022 12:00:00 +0000
ROA not before:           Sat 31 Dec 2022 12:00:00 +0000
ROA not after:            Sun 05 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        162.87.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:6d:cb:bb:96:97:3c:13:ec:07:63:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 31 12:00:00 2022 GMT
            Not After : Feb  5 05:00:00 2023 GMT
        Subject: CN=cb703866-6732-4f1d-9ee1-4f393d3d08f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:79:f8:cc:02:af:f1:08:3c:11:fc:8b:c8:b7:
                    07:ff:44:17:c5:5d:b0:e2:ca:6c:ed:b9:84:33:0a:
                    fa:a7:87:65:02:bc:4b:dd:b6:b1:6e:5f:7c:8a:2a:
                    01:9d:15:fe:b2:07:28:dc:3e:78:c8:ef:1d:28:50:
                    a0:45:25:89:58:5a:00:5d:8f:98:ff:93:13:6b:8b:
                    5c:48:32:ef:2c:4a:1d:22:9f:eb:cf:c4:0f:c3:7a:
                    10:12:a1:27:7e:09:60:67:9a:fc:0a:ef:b8:ea:f6:
                    e7:4e:83:5b:fd:e0:81:e9:9d:27:8d:05:b0:c1:cb:
                    86:dd:ed:c4:c4:98:6a:b5:d3:48:f2:35:94:e3:bb:
                    72:c4:05:5c:78:d9:75:b5:39:40:26:ac:5e:fa:ac:
                    f2:3e:cb:95:fe:3b:8c:a0:fe:a5:9d:e7:88:54:3e:
                    b5:aa:c4:34:ef:54:85:c4:b1:0e:ef:c0:b0:b6:8d:
                    a1:12:68:a4:1b:ee:52:b7:24:47:6a:0c:de:47:24:
                    93:76:a1:eb:cf:ee:ef:79:cd:2a:38:dd:ec:8a:8b:
                    38:19:25:79:5d:33:f6:29:38:16:c3:11:1a:f3:e1:
                    7f:32:96:70:f8:a5:84:1a:61:76:68:12:6a:33:78:
                    02:b4:73:c4:b8:a7:0e:98:ba:9d:3e:6f:7c:25:77:
                    8f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6E:BB:7D:58:6F:D6:8B:E9:64:E7:A1:CB:32:9A:67:8B:32:D5:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/03e1337d-fc5b-3091-821b-5f45b2c88f1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.87.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:be:d9:d1:b4:b8:36:24:42:a5:34:20:ec:d5:44:5b:00:8c:
         e0:db:cd:23:4e:b4:89:c8:9e:3a:18:4a:17:63:66:29:ca:73:
         02:a9:e0:82:c0:66:be:8a:08:41:ef:7e:ff:3b:08:06:50:6c:
         dd:d9:9e:75:4f:ee:b5:cf:da:42:2c:ca:71:9f:63:e2:10:d0:
         ba:9e:0f:bc:bd:d9:38:04:c9:fb:1e:20:0d:b7:0e:97:3f:c5:
         2d:de:9e:c0:86:f0:de:85:ea:39:05:9d:e4:c5:61:90:60:f9:
         c5:a4:a8:ef:97:33:6d:33:fd:af:1a:f6:0d:80:84:b6:8d:24:
         0d:44:95:93:60:64:c5:bb:ce:2e:47:31:0b:19:66:de:44:b1:
         fb:bc:f5:b3:06:53:1f:0e:e6:b7:94:44:0a:a6:41:0a:60:6a:
         31:b2:af:d6:25:2e:8e:ec:0a:8b:08:c6:7d:03:66:be:ef:13:
         9c:68:e9:12:c9:c5:19:2f:11:78:f9:95:49:90:7a:b2:11:e4:
         ad:e7:6c:9b:38:51:be:f2:9c:9c:32:f8:5c:b6:13:de:ee:3b:
         a2:42:05:2c:d2:52:6b:b3:7d:3c:29:b0:cf:0b:ae:ab:93:31:
         94:2a:6f:93:8f:46:ec:e4:a2:19:7e:f9:57:0c:2c:3a:e7:ae:
         a3:25:05:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:24 2023 by rpki-client on console-fra.rpki-client.org