Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/05acb2ce-dd41-322c-a206-62ea33d2a7ab.roa
File:                     05acb2ce-dd41-322c-a206-62ea33d2a7ab.roa (raw, json)
Hash identifier:          SyCfZPjooLlaKCuMwfh5WilmCE1zSV9R5lOwXesGZaI=
Subject key identifier:   16:98:5B:D9:67:D5:F2:FB:A2:DE:79:EE:BC:74:29:51:29:C8:35:52
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858409259B9FBB2579E6EA804DB80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/05acb2ce-dd41-322c-a206-62ea33d2a7ab.roa
Signing time:             Fri 13 Jan 2023 12:00:00 +0000
ROA not before:           Fri 13 Jan 2023 12:00:00 +0000
ROA not after:            Sat 18 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        208.86.88.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:92:59:b9:fb:b2:57:9e:6e:a8:04:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 13 12:00:00 2023 GMT
            Not After : Feb 18 05:00:00 2023 GMT
        Subject: CN=4de6a94f-054f-46ef-8ea3-ba06eaca85d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d2:34:5b:0b:d6:dc:31:73:50:fd:d2:21:69:
                    6b:0d:99:97:c3:58:3a:16:58:6b:44:fc:41:fe:3b:
                    34:62:20:98:26:a3:ce:4d:84:0a:a2:6b:82:95:e6:
                    a0:f6:35:15:e5:0f:78:c4:ac:ce:d2:9c:50:7e:41:
                    b4:72:d9:87:a1:ed:a0:7d:4a:d0:79:26:dc:9c:75:
                    9b:d1:c3:6e:43:9a:d9:4e:b6:b1:e3:f5:dc:4e:b5:
                    16:e6:77:be:9e:7c:a8:d6:53:b1:4d:89:d0:a5:13:
                    bb:92:0e:1d:15:1f:0b:8f:a0:5d:9c:7a:21:0a:7a:
                    80:bf:d6:c8:f2:ae:f9:52:75:e9:56:2b:31:8f:b3:
                    50:02:62:7a:dd:36:1c:c3:f6:2e:5b:2f:bf:65:19:
                    46:c3:cb:d2:46:52:cb:38:be:52:e0:62:66:0b:9a:
                    df:dc:03:33:ea:d2:dd:54:2b:44:6e:d4:8f:58:54:
                    f9:5d:a4:62:55:5f:b5:f4:13:47:5f:74:15:96:31:
                    88:b3:4d:8f:16:2d:53:61:c1:c3:44:a8:54:3e:87:
                    c7:5d:af:d1:93:b2:bd:c2:f5:75:d6:03:fb:16:8b:
                    75:2a:9f:15:d1:3d:05:f7:e9:00:fb:6a:fb:ec:51:
                    0e:8d:b8:0d:f9:d9:6e:4f:12:81:27:b3:3c:8d:fc:
                    e5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:98:5B:D9:67:D5:F2:FB:A2:DE:79:EE:BC:74:29:51:29:C8:35:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/05acb2ce-dd41-322c-a206-62ea33d2a7ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.86.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:66:9d:b1:99:8f:df:38:f9:29:02:67:60:54:0e:35:d9:36:
         03:6f:4f:1c:38:0f:17:74:80:2c:b4:92:aa:e4:6c:c4:9d:b3:
         07:6f:30:e7:94:76:48:78:e9:8a:bb:c3:e9:53:f8:03:ee:dd:
         a6:33:f6:00:3a:e5:eb:3a:91:9e:d2:96:68:e1:b4:9f:14:ab:
         76:34:13:b3:5f:75:5e:19:2b:f6:75:03:03:d4:13:a5:6d:f4:
         07:92:c6:76:91:df:5e:c2:26:a8:d2:0b:e9:1c:ac:3c:42:66:
         a6:b5:89:0e:6d:f1:8e:59:65:1c:14:2d:24:4f:62:24:01:a9:
         47:91:98:7c:1d:78:49:88:af:48:47:23:ad:c6:50:39:6d:00:
         b7:5f:d1:b7:b0:89:e2:0a:9e:79:f3:f6:07:67:16:d4:f2:6c:
         60:89:42:2d:f7:c9:61:f1:24:a7:8e:04:c5:0a:53:7c:ac:e1:
         6e:13:8f:bb:f8:a8:b2:00:de:d2:4e:23:e1:25:68:82:58:ad:
         01:03:b6:42:36:de:e5:31:31:4d:80:27:7c:1c:1d:17:46:a1:
         0f:1f:ca:25:a1:5d:aa:17:7a:6a:73:66:7d:86:61:51:a1:b8:
         bd:4f:b9:07:7b:e0:2d:c1:80:34:bc:49:68:34:fb:c1:25:0f:
         36:ce:37:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:31 2023 by rpki-client on console-ams.rpki-client.org