Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/065fbee4-e06a-35aa-854d-cf469c7f05cf.roa
File:                     065fbee4-e06a-35aa-854d-cf469c7f05cf.roa (raw, json)
Hash identifier:          1Lz6EAnSCS0IhYUwO6nHhcXRTCAkW9Q2zUOB1R9YVkw=
Subject key identifier:   F7:5E:AB:09:31:1A:23:8B:28:9D:D7:CB:1C:6A:0A:EA:3E:5D:76:75
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840C1E573DDD211D7624AF0D740
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/065fbee4-e06a-35aa-854d-cf469c7f05cf.roa
Signing time:             Mon 30 Jan 2023 22:42:07 +0000
ROA not before:           Mon 30 Jan 2023 22:42:07 +0000
ROA not after:            Tue 07 Mar 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        149.186.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c1:e5:73:dd:d2:11:d7:62:4a:f0:d7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 30 22:42:07 2023 GMT
            Not After : Mar  7 05:00:00 2023 GMT
        Subject: CN=8ddc6034-0557-4277-9cc6-e331e92bb484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b1:f0:5d:80:08:8a:40:f2:07:1a:a3:11:fb:
                    c7:43:e4:0a:91:fc:da:85:83:cd:48:b7:bc:83:9f:
                    da:76:0a:d1:a7:ae:81:af:9e:11:5f:56:6b:71:16:
                    be:42:83:cb:fe:5f:bf:a5:4e:d2:ad:28:0e:56:2d:
                    ec:fb:03:3e:49:29:b4:71:17:22:47:fd:8a:32:95:
                    5d:e0:7c:95:e7:29:b1:fc:01:da:34:3a:3e:78:ef:
                    64:03:6c:c9:02:2c:55:e3:4e:32:fb:82:fb:5a:46:
                    74:5d:29:77:c2:8f:d6:4c:b3:23:a7:2f:b1:e5:41:
                    e6:76:3b:eb:02:71:7d:a6:0d:d3:50:f6:1b:03:31:
                    33:05:81:aa:af:11:1c:57:9f:83:10:88:8f:f2:4b:
                    b1:0d:f4:3f:02:1b:94:6d:ab:8c:b8:4c:76:20:1d:
                    7c:1b:59:8a:88:99:c2:79:b0:fc:8f:e1:6d:65:da:
                    fa:3a:5c:20:69:a4:f0:47:bb:e9:5f:81:84:1b:d6:
                    38:ad:f5:70:b0:ac:f2:a6:09:15:46:f8:d2:7f:26:
                    61:13:e3:4c:a1:ff:6a:e2:5d:9d:32:18:6b:a1:01:
                    9e:d5:aa:91:97:6b:35:64:9a:cf:eb:28:18:f5:58:
                    1e:24:6f:aa:b5:99:ea:ba:9c:61:af:81:ef:bb:51:
                    d5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5E:AB:09:31:1A:23:8B:28:9D:D7:CB:1C:6A:0A:EA:3E:5D:76:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/065fbee4-e06a-35aa-854d-cf469c7f05cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.186.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:0c:81:78:fe:53:dd:18:23:84:69:4a:23:c1:94:ff:b7:61:
         95:e0:64:c3:f5:25:5b:29:0c:0a:bd:ba:ac:1e:f9:21:4f:36:
         76:47:d5:d3:b4:36:ed:b2:59:ba:97:d0:cb:1e:92:c4:c9:ee:
         d8:d1:8a:46:4b:9f:10:33:67:98:05:2a:1e:ed:c3:8e:8b:76:
         ee:ec:81:2c:4e:5e:12:09:d4:52:b3:4d:56:f1:8e:99:b2:13:
         7d:88:7d:9d:ea:54:c1:1b:8d:f0:ad:a2:d6:c9:f5:40:02:8c:
         9f:ad:37:a8:1b:fb:b2:5a:05:e8:22:f2:b7:42:2e:0a:f8:28:
         4d:1d:b8:07:66:36:34:98:47:98:21:5b:b1:78:31:41:4f:fe:
         8f:a1:62:96:7e:11:08:57:80:0e:0d:8b:90:18:86:78:ae:89:
         31:9a:d6:2a:9e:dc:c5:1d:a3:99:5f:97:c1:87:b2:86:d3:e6:
         63:fe:ac:68:2b:05:57:be:93:3c:1f:83:e4:b9:4d:e4:df:46:
         dd:5b:31:65:d8:64:66:9c:b7:71:74:26:5b:38:81:a0:b8:eb:
         88:77:ef:a2:d2:36:f7:d9:f1:6f:da:4a:a3:af:13:79:c6:a3:
         7e:f8:8b:49:79:04:08:d5:10:4c:9a:0e:0f:58:f8:60:f9:d0:
         d8:95:20:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:07:53 2024 by rpki-client on console-ams.rpki-client.org