Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/288013b5-ec5c-3282-9baf-49d1fd4aa0a8.roa
File:                     288013b5-ec5c-3282-9baf-49d1fd4aa0a8.roa (raw, json)
Hash identifier:          T4hPQdwsJgbnGr3A5ZlpLuaVw+BnDny5uloBfpej84k=
Subject key identifier:   9E:8C:43:AE:6F:8D:99:BF:58:53:A9:B4:B6:57:B7:3A:95:B6:C2:92
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858408C4D02C95CCCB494FEB30A00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/288013b5-ec5c-3282-9baf-49d1fd4aa0a8.roa
Signing time:             Wed 11 Jan 2023 12:00:00 +0000
ROA not before:           Wed 11 Jan 2023 12:00:00 +0000
ROA not after:            Thu 16 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        16.151.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:8c:4d:02:c9:5c:cc:b4:94:fe:b3:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 11 12:00:00 2023 GMT
            Not After : Feb 16 05:00:00 2023 GMT
        Subject: CN=af2e807a-6cc6-4ae0-80f4-ae55e362c784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f5:35:a9:7d:5d:2a:e5:ce:3d:f9:eb:54:26:
                    80:77:08:87:06:ed:71:32:35:df:a7:f2:a6:d3:f5:
                    98:95:a0:dd:65:40:53:a9:d4:7d:b2:fe:21:7c:43:
                    3a:7a:53:8d:de:81:bc:1a:4e:e3:71:55:db:43:00:
                    d8:9f:e7:e7:18:7c:60:7c:57:e8:4f:a6:8f:6f:60:
                    92:ee:8e:76:98:fa:09:ec:d3:af:7d:91:4e:46:84:
                    c2:87:67:5f:6c:68:82:8f:cf:a3:a7:2d:be:9b:5b:
                    72:70:cc:fa:7f:cb:db:bb:49:26:c1:e3:a0:4e:8d:
                    b3:7a:7e:df:fc:6c:09:7a:c0:aa:58:57:61:02:00:
                    50:14:6c:7c:86:73:e3:4e:f9:e7:4e:ab:32:af:80:
                    82:10:c8:0d:56:ef:db:2d:b1:6d:8d:e7:6c:58:56:
                    f6:b1:67:1b:62:53:f9:fb:83:c6:5d:72:ef:dd:7b:
                    dd:4f:65:39:5f:2b:6d:d2:95:99:1f:a5:87:ae:f0:
                    d4:4a:ef:3b:58:1d:dc:29:99:38:d5:b9:8d:7c:37:
                    64:bb:74:f8:29:af:23:dd:13:ee:d4:45:3b:ed:2e:
                    2c:46:7e:0d:47:b3:d1:f1:1a:0a:54:8a:aa:02:3d:
                    5e:ee:45:db:2c:5e:cf:cf:c8:de:85:3c:79:df:75:
                    d6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:8C:43:AE:6F:8D:99:BF:58:53:A9:B4:B6:57:B7:3A:95:B6:C2:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/288013b5-ec5c-3282-9baf-49d1fd4aa0a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.151.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:d6:d9:de:3e:db:ec:64:51:de:52:49:38:2e:c0:c8:26:25:
         08:dc:f5:4b:ea:64:e7:0c:cb:fa:8f:d5:49:f3:23:5d:c8:b8:
         61:75:86:7a:88:93:54:d6:80:20:2b:b9:61:de:4e:f5:34:2a:
         6b:f2:ce:f3:69:a4:c0:7f:fb:63:f5:4b:7b:90:f8:31:0b:8b:
         a1:e4:06:3e:ea:9e:8a:cc:e8:29:a8:0e:41:88:0c:11:c6:41:
         8b:b5:b4:15:da:b6:35:1f:5a:d6:97:c5:e0:b3:c4:08:dc:64:
         cb:dc:87:5e:da:8d:da:64:4b:1a:a2:3d:f7:e0:d7:6c:2a:ee:
         10:12:35:63:0b:68:af:cf:c0:99:b7:96:99:70:f9:8f:f8:9d:
         7c:38:f4:a6:e9:1f:44:9e:a3:71:e0:b6:5b:4f:67:c6:46:1b:
         a3:68:27:f1:86:2b:9e:ba:15:b9:32:86:75:eb:37:63:38:74:
         c3:ac:9f:a5:37:c1:ee:0c:de:b5:f5:a4:b5:af:9b:f1:6d:3e:
         81:34:f0:17:e1:3e:a2:88:80:a5:5d:c7:da:74:e7:12:da:af:
         05:8e:17:ec:af:8d:fa:3b:27:c7:90:be:55:b2:d3:aa:0e:e6:
         fb:a0:4d:98:2e:8c:2e:66:4b:3d:08:df:63:76:75:87:9e:fd:
         40:fd:0b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:47 2023 by rpki-client on console-fra.rpki-client.org