Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/282c5fd5-aaac-36dc-92e4-a25dcd42721a.roa
File:                     282c5fd5-aaac-36dc-92e4-a25dcd42721a.roa (raw, json)
Hash identifier:          afS1aUFo8fIOM5f/Qziuqn7vEK9aNO0EjqEuly8JQu8=
Subject key identifier:   85:48:DD:16:87:E9:C8:6B:66:95:5D:16:91:29:CA:E2:83:8E:11:EF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840D4646F2E5E4D7456A71605C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/282c5fd5-aaac-36dc-92e4-a25dcd42721a.roa
Signing time:             Mon 06 Feb 2023 12:00:00 +0000
ROA not before:           Mon 06 Feb 2023 12:00:00 +0000
ROA not after:            Tue 14 Mar 2023 04:00:00 +0000
asID:                     7224
IP address blocks:        162.221.160.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:d4:64:6f:2e:5e:4d:74:56:a7:16:05:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  6 12:00:00 2023 GMT
            Not After : Mar 14 04:00:00 2023 GMT
        Subject: CN=a1871283-9966-4957-86f9-8a7c2d01a8ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:05:f0:f1:74:2b:21:c7:87:4f:31:21:f9:22:
                    f2:b8:40:45:bf:4e:1b:cf:d1:a1:42:b4:32:cd:db:
                    60:44:3d:7f:f9:d3:d9:13:ec:63:c9:e7:5b:d6:82:
                    ef:c4:cb:50:a2:61:24:1f:07:b1:d7:7a:64:00:32:
                    14:16:91:b9:7f:7b:f2:dc:49:97:65:b3:94:ae:b0:
                    86:05:8a:81:2f:48:5f:41:d6:b3:b5:c3:03:a2:9f:
                    89:0d:92:53:63:23:b2:00:46:2a:89:ca:94:15:45:
                    02:c1:32:c2:95:5f:9d:54:1d:03:3e:51:c6:28:ce:
                    8e:dd:83:40:77:e4:bf:7f:ab:80:6a:b1:66:e7:7d:
                    29:3c:9a:a3:19:73:c2:63:e8:c8:bd:85:bd:47:27:
                    c7:a6:5d:e6:b7:5a:ce:16:73:73:69:9c:ea:57:6f:
                    30:0d:75:30:88:38:bc:68:29:59:2d:ea:fc:84:94:
                    e9:25:0f:d9:fc:c2:42:9b:72:a0:98:76:e8:45:71:
                    40:b8:54:ec:a0:38:e6:0a:f1:0a:49:0e:09:20:b2:
                    16:ea:fb:07:89:e7:9f:5b:40:18:50:a9:a3:3f:66:
                    34:08:78:11:fa:34:e7:39:30:ad:12:28:3e:ab:c5:
                    69:f1:ca:ac:89:f5:b1:a0:e4:6b:3b:9f:52:92:39:
                    fe:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:48:DD:16:87:E9:C8:6B:66:95:5D:16:91:29:CA:E2:83:8E:11:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/282c5fd5-aaac-36dc-92e4-a25dcd42721a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:91:8f:7f:69:23:1e:5e:94:f1:f5:e6:e5:a5:d3:24:ec:93:
         f2:6a:2f:93:6f:a8:0e:d2:4f:ae:f2:af:50:36:cc:8a:22:f2:
         98:cd:2b:50:c3:3e:ba:1f:cb:fd:b3:17:31:7b:81:9a:8a:88:
         27:4f:de:ac:f9:92:f4:89:f8:f0:81:be:be:f0:e1:1c:45:77:
         7c:ff:1d:6e:71:94:3e:8f:3e:52:38:72:fc:f2:a0:6c:17:fc:
         9e:df:98:c2:c5:86:5e:45:fb:07:e6:e1:01:95:01:cb:c3:71:
         7a:0c:db:38:b8:6d:db:1f:06:af:50:19:60:e7:2d:b0:a3:4a:
         8a:88:08:3b:3b:e6:01:21:6a:8c:2e:cd:8e:0f:5c:25:17:56:
         58:f5:a7:4e:94:c8:2d:f5:26:d2:67:12:47:d5:cf:83:9a:89:
         7a:3e:54:cf:19:33:7f:01:bd:a5:a5:a2:57:4d:7b:87:98:30:
         a1:14:ad:38:33:03:fc:37:5a:3f:05:df:19:5c:f8:8a:0a:22:
         98:b7:40:e4:a9:ca:df:62:92:78:55:54:cc:9b:b2:f9:48:9a:
         1d:60:53:00:8d:1f:64:b4:3b:6f:ae:85:30:d7:73:77:20:5d:
         2e:8a:2f:c3:47:dc:42:b2:0f:3b:d7:6b:e6:e5:28:b8:18:b2:
         ed:45:57:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:47 2023 by rpki-client on console-fra.rpki-client.org