Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0665f515-0a77-345f-8de3-92e3d254684e.roa
File:                     0665f515-0a77-345f-8de3-92e3d254684e.roa (raw, json)
Hash identifier:          0elYeQ3rgAkv9WXO+1mwX0dYMGhZMiGE7nTVsy/TAqc=
Subject key identifier:   F8:67:DC:23:D4:23:19:85:7B:53:05:06:D6:ED:3E:A4:8E:D8:6C:D4
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858408B8417B06B78419BCCC9CAC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0665f515-0a77-345f-8de3-92e3d254684e.roa
Signing time:             Wed 11 Jan 2023 12:00:00 +0000
ROA not before:           Wed 11 Jan 2023 12:00:00 +0000
ROA not after:            Thu 16 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        136.17.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:8b:84:17:b0:6b:78:41:9b:cc:c9:ca:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 11 12:00:00 2023 GMT
            Not After : Feb 16 05:00:00 2023 GMT
        Subject: CN=3ba1ef7f-52d8-4c92-9146-0908575667a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c5:ef:eb:b8:ea:07:d1:70:57:6d:8b:cf:6e:
                    0e:30:a0:66:bc:f5:7b:79:42:6f:8b:fd:79:2b:0b:
                    7b:ce:66:70:c5:34:c4:b3:8b:9f:a3:d2:50:54:79:
                    e8:c1:78:16:5d:16:82:34:11:a9:1d:05:87:2f:a3:
                    6b:1b:51:66:17:1f:c6:70:39:c9:15:2c:9c:e8:a8:
                    6d:ac:f2:df:4d:23:6e:93:ec:10:56:72:c7:e7:d2:
                    4e:2e:33:52:26:28:5d:05:07:af:2d:49:95:44:cb:
                    79:5a:ef:b2:cc:0e:ec:11:29:53:83:a5:d0:47:7a:
                    03:09:f3:64:ec:66:61:6b:c4:ed:eb:c2:fa:01:ea:
                    e5:dd:d3:96:4c:63:22:b4:87:95:22:11:7b:57:44:
                    38:2c:82:be:b1:a7:ed:89:27:2f:63:b1:eb:fb:72:
                    10:f2:80:58:89:3b:32:ee:fe:9d:b3:3d:46:9b:f7:
                    33:16:b9:4f:86:e9:6c:36:4a:72:fe:8e:f8:02:56:
                    f2:9f:3e:d4:15:92:99:e6:4e:55:9e:a3:e9:e6:36:
                    88:13:aa:da:ae:f0:60:14:b3:8f:72:8f:4f:66:53:
                    84:b4:4a:78:76:f3:16:38:66:b8:50:29:ca:cf:b8:
                    cc:bc:61:94:0a:6e:3c:37:63:8f:32:f1:5d:34:a4:
                    f5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:67:DC:23:D4:23:19:85:7B:53:05:06:D6:ED:3E:A4:8E:D8:6C:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0665f515-0a77-345f-8de3-92e3d254684e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.17.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:dd:7f:0d:87:f7:69:f1:89:4b:6d:60:13:81:fb:30:5e:d1:
         59:a3:34:d1:ad:c4:1f:a1:72:05:ef:90:7b:a6:53:31:00:84:
         e3:9e:49:0f:bf:62:9b:24:7e:39:d3:5d:73:1f:30:18:74:c2:
         f6:de:1e:88:cf:ee:50:5a:cc:6b:9b:22:5b:35:ea:f5:bf:64:
         dc:dd:1e:46:22:4f:6f:fc:80:c7:a1:e1:66:1a:f2:ea:b9:12:
         66:89:52:fc:31:66:cc:83:e3:b1:94:d7:ae:aa:87:e0:74:6f:
         bb:11:18:28:d2:d9:6c:c2:80:72:1b:f4:25:b2:a6:7b:12:e4:
         f9:81:78:c3:0a:55:1d:bc:79:ba:f6:78:a4:14:c2:b4:52:36:
         4e:9b:9e:24:80:fe:b3:9e:9b:15:64:fb:6f:89:16:df:24:4c:
         65:30:ec:68:5a:cf:5f:bc:79:60:75:52:99:e1:47:7e:b4:18:
         b6:86:00:08:d1:b2:d5:0c:5e:24:c2:c5:4e:49:c8:9b:2e:e2:
         fc:72:17:a4:29:65:8a:3d:d4:4c:37:be:29:01:8d:d0:b4:f0:
         ef:2e:87:a6:f7:2b:43:26:a4:44:61:d5:5e:69:05:60:f8:35:
         56:30:05:7a:b9:f2:54:da:8f:3e:12:31:bc:62:40:7c:e1:8e:
         1a:fa:1f:36
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECLhBewa3hBm8zJysAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDExMTEyMDAwMFoXDTIzMDIxNjA1MDAwMFowLzEtMCsGA1UEAxMk
M2JhMWVmN2YtNTJkOC00YzkyLTkxNDYtMDkwODU3NTY2N2EzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8Xv67jqB9FwV22Lz24OMKBmvPV7eUJvi/15
Kwt7zmZwxTTEs4ufo9JQVHnowXgWXRaCNBGpHQWHL6NrG1FmFx/GcDnJFSyc6Kht
rPLfTSNuk+wQVnLH59JOLjNSJihdBQevLUmVRMt5Wu+yzA7sESlTg6XQR3oDCfNk
7GZha8Tt68L6Aerl3dOWTGMitIeVIhF7V0Q4LIK+saftiScvY7Hr+3IQ8oBYiTsy
7v6dsz1Gm/czFrlPhulsNkpy/o74Albynz7UFZKZ5k5VnqPp5jaIE6rarvBgFLOP
co9PZlOEtEp4dvMWOGa4UCnKz7jMvGGUCm48N2OPMvFdNKT1LQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPhn3CPUIxmFe1MFBtbtPqSO2GzUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMDY2NWY1MTUtMGE3Ny0z
NDVmLThkZTMtOTJlM2QyNTQ2ODRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiBEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAU91/DYf3afGJS21gE4H7MF7RWaM00a3EH6FyBe+Qe6ZTMQCE455JD79i
myR+OdNdcx8wGHTC9t4eiM/uUFrMa5siWzXq9b9k3N0eRiJPb/yAx6HhZhry6rkS
ZolS/DFmzIPjsZTXrqqH4HRvuxEYKNLZbMKAchv0JbKmexLk+YF4wwpVHbx5uvZ4
pBTCtFI2TpueJID+s56bFWT7b4kW3yRMZTDsaFrPX7x5YHVSmeFHfrQYtoYACNGy
1QxeJMLFTknImy7i/HIXpCllij3UTDe+KQGN0LTw7y6HpvcrQyakRGHVXmkFYPg1
VjAFernyVNqPPhIxvGJAfOGOGvofNg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:31 2023 by rpki-client on console-ams.rpki-client.org