Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/26352733-5347-30cb-822b-5201c47fe108.roa
File:                     26352733-5347-30cb-822b-5201c47fe108.roa (raw, json)
Hash identifier:          s55VkgqBw31SgzKUzZLbQ1GtTMMie8eXLoAGoHDaeA0=
Subject key identifier:   4E:C4:FD:8A:51:FA:ED:AA:FA:19:05:A3:12:56:C6:74:46:5F:EA:13
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858409CCA13562A131065CA1FA9C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/26352733-5347-30cb-822b-5201c47fe108.roa
Signing time:             Tue 17 Jan 2023 12:00:00 +0000
ROA not before:           Tue 17 Jan 2023 12:00:00 +0000
ROA not after:            Wed 22 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        40.172.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:9c:ca:13:56:2a:13:10:65:ca:1f:a9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 17 12:00:00 2023 GMT
            Not After : Feb 22 05:00:00 2023 GMT
        Subject: CN=f2a2545b-ec09-4426-ba74-2565bf9109ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:28:f9:5d:2a:6c:48:67:ae:5e:ff:d9:dc:21:
                    2a:16:9e:b5:3e:f5:1d:c3:09:25:2a:7d:48:38:21:
                    e4:a0:57:08:a0:c4:41:8c:dc:c8:38:04:d0:c2:90:
                    20:08:94:69:67:36:9c:6d:1b:98:15:4d:b1:0f:82:
                    ff:a4:dd:f2:17:8a:1e:a1:8b:f3:8c:38:89:de:a6:
                    f7:40:49:69:4f:0b:65:c9:28:0d:0d:65:cb:e1:86:
                    86:fe:68:b4:ac:4a:31:d8:53:38:88:a6:bd:c7:dd:
                    80:7d:00:86:76:11:b9:0f:c0:1f:ff:64:e4:bf:94:
                    81:26:8a:24:52:bb:ed:f6:7e:9d:4f:38:36:13:18:
                    27:7a:72:c5:4b:f9:5e:0a:09:b8:01:3b:c2:21:df:
                    57:7d:c6:e2:d1:d8:7b:8d:d1:ae:1e:bf:62:b8:52:
                    78:1f:59:58:e5:ff:5c:f0:dd:58:06:85:2f:49:38:
                    f9:ac:8c:35:9d:bf:a1:8f:a9:20:c5:a0:78:a4:39:
                    61:ea:3a:a0:50:13:91:f2:7f:45:c8:b1:8c:1f:11:
                    18:5b:0a:e1:dd:40:0b:8c:0a:92:5e:31:cd:74:75:
                    0b:a7:d1:1e:54:e6:f8:4b:28:00:e0:d7:f4:14:95:
                    e1:4c:59:89:05:14:6d:f7:31:76:3a:d7:ae:92:a3:
                    1e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C4:FD:8A:51:FA:ED:AA:FA:19:05:A3:12:56:C6:74:46:5F:EA:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/26352733-5347-30cb-822b-5201c47fe108.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.172.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:5c:e8:b1:a9:3f:8f:02:45:a0:6f:e8:56:95:75:8c:d1:e4:
         69:63:99:0b:9a:4f:66:7f:f5:b1:21:98:0f:92:9e:1c:6d:73:
         e6:99:17:0a:e0:94:0d:b4:34:8e:6b:47:ec:fe:fc:82:90:94:
         33:18:54:1a:e0:41:2a:b1:3f:88:4e:75:1c:b1:ba:ed:d4:e3:
         26:9a:34:b3:ff:00:ef:19:a0:ee:b6:0b:1d:52:38:09:1a:c1:
         c0:fe:96:16:f5:33:71:c7:6d:d7:83:47:97:8b:fa:4a:65:56:
         cb:d2:57:e3:d0:53:fc:ff:24:70:f6:68:35:a4:72:19:62:4e:
         fd:9f:0c:c1:8b:e4:0b:6b:6f:4a:f2:5d:db:c0:5b:f7:0a:56:
         9c:c6:0b:df:11:95:ea:25:7d:26:79:78:08:43:3d:b1:c9:48:
         ea:b9:77:b1:0d:ce:05:04:c7:ee:3f:60:25:ff:eb:a4:57:d4:
         6a:7b:b3:60:32:46:e7:20:6c:bf:da:82:ca:a9:7b:1e:26:b3:
         e0:b8:d2:af:8a:4d:e2:42:b4:cd:7b:b6:0e:5f:ff:e8:61:a6:
         4d:91:e2:09:9d:46:2c:9f:4e:33:5c:98:23:2b:38:4c:23:67:
         c0:e6:b7:e0:a4:9c:4b:28:ca:cd:77:a7:44:51:c2:9b:a3:03:
         74:7e:08:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:45 2023 by rpki-client on console-fra.rpki-client.org