Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0855cee0-89e3-353b-aa06-9bcf68975079.roa
File:                     0855cee0-89e3-353b-aa06-9bcf68975079.roa (raw, json)
Hash identifier:          N2bg4mO4BpVwg47lF9jZeF2zEGZh0F08HGQPvE+zJss=
Subject key identifier:   1A:9B:18:75:1D:B3:33:19:2A:8F:BC:B3:72:15:44:1A:00:CF:F6:F2
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858407AE1DA7E417E542197327C00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0855cee0-89e3-353b-aa06-9bcf68975079.roa
Signing time:             Thu 05 Jan 2023 12:00:00 +0000
ROA not before:           Thu 05 Jan 2023 12:00:00 +0000
ROA not after:            Fri 10 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        182.28.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:7a:e1:da:7e:41:7e:54:21:97:32:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  5 12:00:00 2023 GMT
            Not After : Feb 10 05:00:00 2023 GMT
        Subject: CN=37bb4150-1f9c-4350-9c35-55b6fb58c37e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:43:31:44:00:be:3c:0f:fd:e9:c9:db:bd:1f:
                    20:e7:21:6b:86:06:c1:18:69:f3:fc:1e:74:5a:7e:
                    3d:7f:06:99:67:26:dd:04:89:ff:d2:39:20:c1:3b:
                    f0:20:cd:06:97:41:d0:bd:1a:7a:9a:0d:2a:bb:9c:
                    14:80:cf:8e:5d:4a:ea:44:9b:7f:9d:6b:e9:e1:5f:
                    fb:8c:49:0a:b9:52:39:a8:7e:3a:fd:4d:50:3c:d8:
                    90:22:3e:4f:fa:60:68:3b:0d:a1:32:35:74:0b:f4:
                    57:c7:af:ae:7d:a0:87:51:31:a7:73:45:70:64:48:
                    ef:fc:0f:c9:26:8f:55:12:0d:64:16:87:16:cd:14:
                    13:b4:f8:6c:a8:63:34:73:44:d4:5e:2b:c7:82:e1:
                    b5:62:24:b1:df:c8:79:31:d4:88:1b:85:ae:68:d8:
                    8b:ea:ea:6a:02:7e:f8:6a:aa:bd:39:ca:f4:1d:26:
                    f2:31:f0:e0:64:dc:67:b3:f3:27:05:1f:2a:16:b2:
                    d9:98:a1:db:51:d4:ef:4a:ae:0e:78:af:59:c7:79:
                    73:6f:4e:d8:34:c8:0e:14:c2:b0:0d:97:9c:17:34:
                    92:8d:7d:57:4f:b3:77:e3:90:de:82:af:1c:30:0e:
                    e1:c8:f8:25:2d:82:84:f9:f3:42:f6:66:10:d4:b2:
                    7a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:9B:18:75:1D:B3:33:19:2A:8F:BC:B3:72:15:44:1A:00:CF:F6:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0855cee0-89e3-353b-aa06-9bcf68975079.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.28.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:4a:2c:ea:5d:12:7e:67:71:9d:47:91:bb:f7:dc:a4:56:d1:
         d8:88:49:a8:46:68:40:ea:1b:08:a6:81:d3:e7:07:45:c6:01:
         e3:34:ac:46:a7:08:9c:e6:8a:88:f8:cc:d0:c8:ac:01:6f:d6:
         38:49:b2:09:4a:41:e0:e2:e5:70:8a:51:25:13:f7:6a:88:31:
         a4:d6:04:e9:dc:f6:e9:b0:93:95:ad:0a:52:61:6e:2b:ea:41:
         0d:7c:e4:2f:a7:11:47:57:b3:88:ce:c6:bb:0c:04:4a:50:82:
         86:26:3c:72:86:0c:fe:16:2a:52:82:f3:4b:f5:8f:c8:28:88:
         90:18:24:1d:fe:a8:84:fe:1c:52:2e:f4:98:d6:ae:6a:7d:da:
         ab:f2:7e:44:24:50:0b:7e:f7:49:0f:da:a6:f6:65:5b:1d:ab:
         1a:56:10:47:ed:ad:6a:f9:43:bb:08:6f:80:69:a7:27:7b:52:
         32:c4:2c:f4:02:d6:3b:a7:ac:08:6c:cf:83:dc:aa:36:88:1a:
         03:2f:96:81:ed:7f:99:f1:6e:28:4f:a8:5e:6e:cc:91:d9:de:
         23:88:c7:b9:67:89:38:f3:bd:8a:4a:e4:16:98:86:c9:f6:42:
         f6:09:03:e7:8f:e8:d3:61:6b:11:0d:af:1b:25:5b:d7:97:14:
         9d:53:b0:d1
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEB64dp+QX5UIZcyfAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEwNTEyMDAwMFoXDTIzMDIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
MzdiYjQxNTAtMWY5Yy00MzUwLTljMzUtNTViNmZiNThjMzdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUMxRAC+PA/96cnbvR8g5yFrhgbBGGnz/B50
Wn49fwaZZybdBIn/0jkgwTvwIM0Gl0HQvRp6mg0qu5wUgM+OXUrqRJt/nWvp4V/7
jEkKuVI5qH46/U1QPNiQIj5P+mBoOw2hMjV0C/RXx6+ufaCHUTGnc0VwZEjv/A/J
Jo9VEg1kFocWzRQTtPhsqGM0c0TUXivHguG1YiSx38h5MdSIG4WuaNiL6upqAn74
aqq9Ocr0HSbyMfDgZNxns/MnBR8qFrLZmKHbUdTvSq4OeK9Zx3lzb07YNMgOFMKw
DZecFzSSjX1XT7N345Degq8cMA7hyPglLYKE+fNC9mYQ1LJ60QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBqbGHUdszMZKo+8s3IVRBoAz/byMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMDg1NWNlZTAtODllMy0z
NTNiLWFhMDYtOWJjZjY4OTc1MDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAthwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAs0os6l0SfmdxnUeRu/fcpFbR2IhJqEZoQOobCKaB0+cHRcYB4zSsRqcI
nOaKiPjM0MisAW/WOEmyCUpB4OLlcIpRJRP3aogxpNYE6dz26bCTla0KUmFuK+pB
DXzkL6cRR1eziM7GuwwESlCChiY8coYM/hYqUoLzS/WPyCiIkBgkHf6ohP4cUi70
mNauan3aq/J+RCRQC373SQ/apvZlWx2rGlYQR+2tavlDuwhvgGmnJ3tSMsQs9ALW
O6esCGzPg9yqNogaAy+Wge1/mfFuKE+oXm7MkdneI4jHuWeJOPO9ikrkFpiGyfZC
9gkD54/o02FrEQ2vGyVb15cUnVOw0Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:26 2023 by rpki-client on console-fra.rpki-client.org