Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2017b8ab-8ec5-31a0-873b-20691a2b022c.roa
File:                     2017b8ab-8ec5-31a0-873b-20691a2b022c.roa (raw, json)
Hash identifier:          IlGaAdcrUHB7BRmlWE8+8i4dZz5iR+GgipSu1vzIrjE=
Subject key identifier:   8B:8E:92:5B:D5:25:95:2D:AC:17:CD:7F:7A:97:99:D0:A1:E5:19:EE
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858407ACB4CC94B95FFC4536A6880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2017b8ab-8ec5-31a0-873b-20691a2b022c.roa
Signing time:             Thu 05 Jan 2023 12:00:00 +0000
ROA not before:           Thu 05 Jan 2023 12:00:00 +0000
ROA not after:            Fri 10 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        160.223.128.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:7a:cb:4c:c9:4b:95:ff:c4:53:6a:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  5 12:00:00 2023 GMT
            Not After : Feb 10 05:00:00 2023 GMT
        Subject: CN=18a1c3cf-2b59-4d34-b6d8-0207a4e4241e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:05:43:3d:7e:94:74:23:02:45:0f:9e:bc:00:
                    7e:6a:a5:96:03:ba:a1:e3:32:74:c4:57:65:b5:42:
                    40:2d:f3:2e:d2:18:9b:53:53:e0:da:8e:44:1d:5a:
                    12:b0:8b:b1:53:cf:8d:af:d1:60:22:1c:fd:2e:74:
                    f8:05:65:48:d5:2c:f4:73:a7:8e:ec:43:e2:16:f4:
                    66:7a:0b:67:53:7b:83:cb:5a:6f:e5:03:10:70:0f:
                    44:8b:39:c9:53:5f:ee:71:12:4f:c2:34:1c:44:af:
                    92:84:81:f5:af:3d:c8:32:72:bc:76:ab:58:0b:63:
                    ee:21:76:53:70:4e:18:51:db:3d:4f:fd:66:c8:dd:
                    90:b2:27:1d:b8:d4:3f:56:89:9c:03:d5:96:3f:84:
                    93:0a:13:96:1e:94:7f:ed:e7:59:49:12:03:fc:e9:
                    99:75:a8:24:65:bb:21:76:5c:ca:17:6d:c9:0a:7d:
                    8f:c3:21:14:bd:ef:97:07:fe:e8:be:e9:9e:cc:f8:
                    ea:c0:1f:59:85:c1:4c:ee:9c:d1:11:09:7d:1f:a4:
                    cc:ab:05:64:d9:ad:a9:13:ec:9e:71:40:e0:43:a7:
                    93:28:c6:b2:7f:00:80:81:13:56:ab:1d:80:fa:57:
                    aa:fc:3d:fc:83:5d:7c:70:b0:7a:ec:02:38:21:86:
                    3a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8E:92:5B:D5:25:95:2D:AC:17:CD:7F:7A:97:99:D0:A1:E5:19:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2017b8ab-8ec5-31a0-873b-20691a2b022c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.223.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:4f:f5:d1:eb:b7:77:00:46:c2:10:ce:a7:96:f2:ea:3c:58:
         e9:cb:c5:78:3f:a4:ec:08:a6:96:22:be:98:f2:33:a0:57:48:
         e2:58:4f:e8:c2:32:33:24:fc:b3:84:d8:99:41:56:21:8d:82:
         61:52:12:53:11:31:db:55:d5:f0:85:d3:54:da:ec:f1:aa:b0:
         57:6d:4d:ef:ba:e7:70:de:60:97:93:6f:f8:0f:4a:f3:95:85:
         0e:05:ba:27:f9:bb:1d:3a:a7:75:96:d1:93:6a:75:b5:0a:ab:
         55:48:d3:c2:6a:63:8a:a7:2d:87:d9:7f:9a:7d:dc:36:cb:74:
         ce:d6:02:09:e1:c6:c8:4f:d5:a6:6e:e3:0b:72:99:35:a1:85:
         16:03:fb:81:f9:30:aa:d0:b9:a8:09:ad:61:7d:bd:ac:61:3f:
         59:c8:02:ac:86:73:7e:3d:3e:a6:0f:83:8b:b1:eb:2e:9f:ae:
         f4:48:bc:b7:48:2b:2b:71:23:96:2f:df:e9:05:b5:47:08:0c:
         0c:80:15:ad:47:12:b2:82:4f:c8:d9:a6:76:c6:c3:82:25:42:
         c9:0b:81:32:af:83:c9:7c:ec:d0:ad:6b:86:f9:82:05:18:37:
         8a:93:38:12:ec:02:b2:35:bd:49:f5:56:88:e5:58:92:58:a3:
         56:7f:52:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:08:56 2024 by rpki-client on console-ams.rpki-client.org