Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4fd2542f-3b77-3e40-a4b4-acf59f80e97e.roa
File:                     4fd2542f-3b77-3e40-a4b4-acf59f80e97e.roa (raw, json)
Hash identifier:          1N2a2yMnUfzyPzNB1mWotY5F/PXlMTaw3eWH+Rng570=
Subject key identifier:   B4:06:80:0C:BA:E6:8C:BA:AC:23:B9:A2:D6:22:01:3D:94:88:15:C5
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858405F8BB039AD0B50D967BECE00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4fd2542f-3b77-3e40-a4b4-acf59f80e97e.roa
Signing time:             Mon 26 Dec 2022 12:00:00 +0000
ROA not before:           Mon 26 Dec 2022 12:00:00 +0000
ROA not after:            Tue 31 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        139.56.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:5f:8b:b0:39:ad:0b:50:d9:67:be:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 26 12:00:00 2022 GMT
            Not After : Jan 31 05:00:00 2023 GMT
        Subject: CN=c15b5d0e-afd5-4269-9ba4-2a8af5ad359f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:75:e7:0a:b5:7e:c9:79:7b:93:2a:b8:87:fc:
                    8a:92:bb:0c:ed:4e:19:74:3d:53:2d:db:e4:42:e7:
                    0b:f4:26:1d:41:35:84:c4:9d:05:8b:51:ae:d0:a6:
                    9d:ac:5b:80:4c:60:01:fa:63:10:e1:8b:60:23:95:
                    3e:78:78:4e:eb:0b:53:dc:eb:8a:79:33:b2:1c:41:
                    67:0c:e7:3d:a2:81:b4:e6:6a:cd:5a:d8:0b:b0:38:
                    7e:35:90:6c:ae:c4:3e:7c:dc:7e:fe:27:28:dc:cd:
                    bf:c8:d4:86:50:49:a8:5b:6f:3e:09:37:34:46:3d:
                    ef:66:ee:bd:d4:25:4d:1e:93:69:5d:9c:51:fd:99:
                    a2:60:a1:bd:10:cd:f6:02:ed:7a:2e:cc:ab:c0:b8:
                    42:57:5d:13:42:16:d3:61:60:42:f5:07:88:ee:24:
                    f6:63:c2:2e:0e:ba:b2:0b:3f:25:b8:2b:83:45:c7:
                    d6:d8:e6:3b:f9:2c:31:27:ba:8b:b0:30:7d:0a:3e:
                    36:00:8b:cd:12:2f:29:a4:f1:21:25:75:35:15:4a:
                    e6:86:09:c4:9f:e5:c9:41:fa:c3:ed:78:39:fb:60:
                    1a:0d:ac:6e:ba:bb:a7:05:52:27:e8:37:c2:c7:fa:
                    dc:7b:21:e6:4f:c6:6a:79:c1:6c:4f:bb:23:d8:72:
                    2c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:06:80:0C:BA:E6:8C:BA:AC:23:B9:A2:D6:22:01:3D:94:88:15:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4fd2542f-3b77-3e40-a4b4-acf59f80e97e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:07:3b:db:0b:d0:22:6d:7e:aa:82:8a:22:62:68:03:c1:57:
         47:bb:92:31:8e:83:2a:27:3c:28:56:e7:36:29:d7:c0:ac:97:
         20:a6:e4:5c:ef:46:fe:56:4c:46:96:a6:ed:8a:81:ff:66:bd:
         92:78:d5:d5:20:69:2b:48:78:78:15:a5:e8:8f:38:b4:46:62:
         ea:65:61:90:0a:37:f9:83:94:72:84:f4:d4:43:4b:5d:9a:cd:
         eb:02:27:68:a1:89:69:3f:0b:37:cd:d0:c6:1c:1a:20:f6:1a:
         09:a4:96:30:65:ff:3e:e5:49:e2:31:a6:f2:bb:48:87:e1:65:
         53:1f:36:a4:75:bd:44:77:6f:e2:4c:b8:e3:bf:ff:3c:1d:a4:
         d5:31:3c:79:4b:62:57:81:67:8b:0b:b5:49:8d:7e:ea:c0:de:
         60:e9:f8:0c:49:ed:04:76:60:a4:38:34:c4:7d:b4:a6:4f:48:
         62:e2:b2:cb:be:a7:bd:34:00:ce:da:9a:66:1b:28:45:e0:bf:
         32:59:db:b7:47:44:27:75:b1:ab:60:46:8d:8f:a0:aa:f8:f1:
         4c:31:24:73:6e:f9:c2:dd:c4:51:bc:be:47:bc:6a:72:9e:c8:
         0f:f6:ad:19:76:9a:e7:20:e3:c4:38:84:cd:c9:0f:85:3f:e9:
         c6:fe:cf:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:25:21 2023 by rpki-client on console-ams.rpki-client.org