Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/32633a09-7073-32d5-9462-bad035539e27.roa
File:                     32633a09-7073-32d5-9462-bad035539e27.roa (raw, json)
Hash identifier:          tWllbeOecdjNsQ8pKktNVMrWk94yxrIvsxOmPNLKxRE=
Subject key identifier:   98:7C:E6:F9:A1:F8:85:22:3B:33:30:67:A6:D7:C9:A9:E1:B2:95:79
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858406B3CB0B703D6F33AC6C92580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/32633a09-7073-32d5-9462-bad035539e27.roa
Signing time:             Fri 30 Dec 2022 19:54:08 +0000
ROA not before:           Fri 30 Dec 2022 19:54:08 +0000
ROA not after:            Sat 04 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        192.189.198.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:6b:3c:b0:b7:03:d6:f3:3a:c6:c9:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 30 19:54:08 2022 GMT
            Not After : Feb  4 05:00:00 2023 GMT
        Subject: CN=60574569-8d56-4b8e-89a4-58d4c9f068ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b5:f8:9e:87:76:57:47:73:13:df:8b:a2:e0:
                    00:23:a3:d8:90:6e:74:68:94:4f:0a:77:22:40:39:
                    14:95:7a:24:92:9c:bd:ce:8b:50:4c:15:1d:d0:cd:
                    59:a2:8d:dd:de:f3:28:f6:c4:2e:a2:af:37:11:73:
                    08:a9:92:90:64:00:73:14:15:6a:b0:40:ea:af:0f:
                    f5:4b:f6:09:6a:cb:a6:98:25:7b:9c:0c:61:c1:11:
                    be:ff:a0:96:e4:de:b2:94:1b:37:e2:51:c8:06:1d:
                    07:76:67:78:7f:44:f3:b4:c9:b2:d5:53:7e:4d:a5:
                    58:e0:ba:75:52:bc:97:6c:4d:fc:c9:60:71:19:dc:
                    c4:23:6f:6c:7f:85:36:e7:30:07:9a:ab:c1:57:80:
                    8b:12:1f:8b:30:ab:42:ae:4a:1f:e8:02:47:07:4d:
                    05:62:a5:e4:e2:c3:db:77:31:14:66:23:96:b2:ca:
                    5f:85:cb:86:bc:49:db:da:cb:26:ec:0e:9c:fd:40:
                    e6:29:0f:2d:52:70:52:62:92:72:1d:79:b7:3c:a4:
                    86:f2:b3:39:f1:bb:a1:1a:f4:c6:91:b6:a0:c1:a6:
                    7f:a8:b5:57:a5:5d:85:9c:dc:9a:be:a5:72:d3:a4:
                    59:c1:25:ee:33:2d:86:89:65:4d:b6:03:85:84:9c:
                    56:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:7C:E6:F9:A1:F8:85:22:3B:33:30:67:A6:D7:C9:A9:E1:B2:95:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/32633a09-7073-32d5-9462-bad035539e27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.189.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:f7:bd:99:8a:19:c3:d4:49:72:12:18:b8:15:f4:89:dc:1f:
         4b:b1:a3:7c:37:9f:c9:e8:c5:d8:16:da:40:ce:45:64:d9:66:
         71:9f:01:0f:ad:fa:0a:6d:4c:c1:d4:2b:b3:fb:c1:41:48:b9:
         01:04:ae:9c:1e:e8:14:89:3e:be:25:d3:a3:f7:3d:5b:58:10:
         74:c5:7f:b3:9f:95:23:79:c5:23:79:b6:e6:7c:0c:ef:47:5c:
         40:34:81:34:4a:c0:c6:c1:b1:36:fb:dd:b7:6d:06:e1:6d:5e:
         82:c1:3b:d6:87:1f:f1:6a:db:f5:01:15:91:b4:4a:07:04:48:
         b9:dc:df:e5:93:fb:13:92:a1:de:0e:65:2b:8e:2f:04:86:31:
         4b:c3:60:63:ae:d3:ec:79:de:14:eb:66:6e:5f:02:18:49:2b:
         5f:d1:e5:3d:ce:d5:24:77:9b:33:3b:cd:dd:75:e4:c0:37:49:
         8a:72:dd:7a:f4:30:91:44:6e:c6:2f:8a:99:1e:f2:18:58:8b:
         d5:36:22:85:e9:36:9d:0e:79:17:d0:b1:67:d9:14:32:31:04:
         ab:b2:d1:77:23:eb:75:ea:a7:4b:24:c3:75:a2:09:b6:36:ce:
         a8:26:40:59:3a:c7:96:65:fc:d0:4e:fb:84:f7:7d:43:f5:93:
         94:62:db:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:54 2023 by rpki-client on console-fra.rpki-client.org