Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3549f400-409d-3889-9ae4-989c88d9cc29.roa
File:                     3549f400-409d-3889-9ae4-989c88d9cc29.roa (raw, json)
Hash identifier:          IQFmge3AikyCW380DMj9lTUo19B7kqQlOUmi2ogxnTI=
Subject key identifier:   23:A3:F6:B3:75:AA:46:F1:FD:7F:51:15:69:44:9E:79:E7:09:05:00
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858407DB3C51839AC4E61B30EED80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3549f400-409d-3889-9ae4-989c88d9cc29.roa
Signing time:             Fri 06 Jan 2023 12:00:00 +0000
ROA not before:           Fri 06 Jan 2023 12:00:00 +0000
ROA not after:            Sat 11 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        16.30.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:7d:b3:c5:18:39:ac:4e:61:b3:0e:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  6 12:00:00 2023 GMT
            Not After : Feb 11 05:00:00 2023 GMT
        Subject: CN=5d898377-39d4-465a-9f7c-48d89281f368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c3:d2:8e:26:53:91:27:12:be:af:86:0b:05:
                    27:d0:82:29:7e:95:12:03:32:ee:d1:6e:1c:92:91:
                    fe:b7:81:9a:7d:5a:92:74:78:a6:ee:18:b6:ea:87:
                    39:68:94:e8:f2:e3:ce:74:16:49:ba:cd:2a:c1:fe:
                    2f:72:3b:66:96:dd:09:25:37:29:80:0d:34:27:2e:
                    4a:e6:f3:5e:10:70:b5:f0:9f:ca:66:5d:e1:52:2c:
                    49:bf:6c:f1:1b:e2:da:cd:8f:83:59:f5:50:08:5b:
                    33:60:a9:e2:de:e4:2d:a1:aa:f2:41:05:8a:12:b5:
                    65:e8:1f:73:6c:fd:ac:83:a7:8c:d0:51:61:88:e5:
                    27:b3:27:97:1a:fa:1e:c6:6f:91:00:26:5a:c9:5a:
                    a7:b5:85:ba:07:0a:b6:be:9b:1d:e9:10:f2:b9:ca:
                    92:d4:fd:13:8e:e8:e0:18:df:c4:d3:ab:fd:e5:53:
                    9a:bf:72:e1:63:43:85:e4:dd:f6:c0:b1:f0:ab:cf:
                    3c:27:90:9b:e4:b6:d3:c5:45:7c:13:df:ac:6d:c0:
                    b3:75:aa:8e:58:34:28:3f:96:13:2f:1b:e3:1e:d3:
                    91:7c:d2:a1:7a:48:69:c3:50:55:13:3c:40:45:9e:
                    fe:8b:bb:bb:8b:46:54:d7:6c:cc:f3:be:00:f8:5e:
                    17:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A3:F6:B3:75:AA:46:F1:FD:7F:51:15:69:44:9E:79:E7:09:05:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3549f400-409d-3889-9ae4-989c88d9cc29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.30.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:8d:e4:cb:74:ed:1b:a7:0a:12:6f:b4:8d:62:fa:89:ac:70:
         9b:c6:14:72:22:b7:53:5d:76:8c:16:46:a7:5f:e7:8b:54:be:
         29:ff:a0:f8:ea:d4:2f:8c:4d:fb:db:7f:41:8f:2c:54:89:4a:
         92:f0:a4:62:04:58:42:a6:2e:e0:c3:90:30:99:9d:78:c7:a5:
         ae:ed:3d:06:80:81:fd:98:78:69:a1:5c:bb:3c:29:00:da:26:
         3e:df:22:51:5e:3d:10:bc:52:31:e4:1f:d9:5b:40:8c:bf:6f:
         27:e1:21:03:a7:ea:51:03:58:64:64:45:3a:e1:e0:f1:d1:25:
         a2:76:f2:f7:c4:61:a3:66:f0:7d:34:6b:5b:a8:04:3b:c3:da:
         73:6d:db:c5:23:9c:be:68:63:21:ff:c4:af:ce:fb:c4:e5:66:
         15:b9:0f:52:ee:e2:17:af:37:1d:db:61:5b:5d:05:a9:17:08:
         ac:7b:d6:ba:52:d9:2e:ca:5f:85:a4:e4:06:1e:1b:ac:d5:50:
         3d:12:ac:fd:48:06:89:6d:5b:65:f4:1f:3f:bf:30:c9:21:ec:
         e7:19:ff:82:0f:b2:6d:18:7c:c1:f0:db:cc:d1:f6:44:b1:b4:
         80:d6:25:82:34:36:ee:93:bb:6d:9a:98:69:50:9b:79:e9:ff:
         04:21:40:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:24:37 2023 by rpki-client on console-ams.rpki-client.org