Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5638f2c0-3bbb-3d80-8f77-bfb339e5a14c.roa
File:                     5638f2c0-3bbb-3d80-8f77-bfb339e5a14c.roa (raw, json)
Hash identifier:          ZzweiqHWQztbgidOhMB+xUyncXg5yCmViuznabsfPE0=
Subject key identifier:   21:6C:C2:0E:BB:D2:C2:3B:6A:B2:A6:8C:81:57:D9:82:69:7D:FB:D3
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DA82C0755C65E8DB94728C840
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5638f2c0-3bbb-3d80-8f77-bfb339e5a14c.roa
Signing time:             Thu 21 Apr 2022 12:00:00 +0000
ROA not before:           Thu 21 Apr 2022 12:00:00 +0000
ROA not after:            Fri 27 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        63.246.112.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a8:2c:07:55:c6:5e:8d:b9:47:28:c8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 21 12:00:00 2022 GMT
            Not After : May 27 04:00:00 2022 GMT
        Subject: CN=a1d8cdc9-5610-4e1a-a54d-776b19738f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e0:3b:cb:31:f8:e8:f0:c4:23:47:40:ad:c0:
                    65:3c:28:b3:bd:d4:2e:d6:67:da:04:da:8c:8c:27:
                    ea:dd:23:eb:73:83:4c:96:6b:d8:ab:fb:60:06:74:
                    8e:ea:f0:9a:08:41:0a:54:4a:13:60:57:83:f9:d5:
                    85:82:96:28:3d:1b:58:e7:57:9b:ce:88:91:37:4e:
                    c0:83:69:d6:2e:96:2c:d6:09:92:69:47:40:3e:a6:
                    ce:bd:bc:f4:81:a4:9f:35:4f:b5:bc:ee:97:fe:9c:
                    c6:6a:20:2a:d0:54:10:99:a4:d2:85:66:af:65:6c:
                    d1:1c:8b:03:db:be:b0:2e:3f:bd:3f:2d:53:6e:19:
                    c2:2b:55:6a:fc:6a:ed:cf:41:41:40:69:db:65:23:
                    9f:67:63:c3:51:29:89:b4:6b:9a:af:4f:ad:c3:af:
                    de:02:26:aa:2a:d8:e5:10:ab:7c:ae:87:01:b1:1b:
                    d5:58:4f:c5:a2:32:00:31:7e:a1:b6:d8:9b:30:c0:
                    96:7c:f7:1c:f3:b2:9d:99:b9:50:0a:f0:49:60:b4:
                    e1:87:d0:d6:c7:58:9b:3e:bc:7f:61:7f:b6:e6:60:
                    48:60:d7:1b:db:c6:8e:8a:e2:f4:09:58:99:a0:46:
                    8f:b7:20:cf:95:6d:ef:c3:ca:53:84:75:e4:b9:20:
                    5d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:6C:C2:0E:BB:D2:C2:3B:6A:B2:A6:8C:81:57:D9:82:69:7D:FB:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5638f2c0-3bbb-3d80-8f77-bfb339e5a14c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.246.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:9f:0f:5f:0a:46:0c:0d:bc:fb:69:a7:15:7a:5b:7c:b3:68:
         b6:4b:c0:14:68:44:44:25:10:8d:df:60:96:5e:7a:83:35:5c:
         02:d6:c0:89:be:8e:80:13:53:fd:85:9a:ec:e6:fd:48:38:8e:
         af:3a:50:a4:23:80:7e:d5:73:c0:d6:68:75:b7:5d:3d:bd:4e:
         3b:ed:d7:ce:22:49:10:ea:33:59:f4:3a:37:42:a5:2d:86:f2:
         88:6b:73:bb:ac:55:cd:43:46:65:50:86:94:9c:7c:da:ee:a1:
         93:57:5c:cc:6e:15:42:da:53:c0:f3:30:f0:a7:b2:02:73:68:
         63:98:73:a2:56:e9:1e:3f:cc:20:69:03:b1:52:56:d1:0a:24:
         1c:65:43:ea:fc:55:79:2a:d0:21:d2:9e:9a:e0:9d:21:74:99:
         36:3f:0c:50:ad:59:31:ec:34:3c:b6:64:30:a6:93:82:f6:8f:
         4b:a3:c3:84:92:fe:bc:c8:32:a2:91:9f:8d:ac:e8:23:c5:c1:
         92:27:87:c2:7f:ef:c2:90:68:36:ca:a7:8c:76:b8:39:74:eb:
         b5:92:4e:da:50:bb:34:70:59:fc:cf:e4:98:ea:6b:3f:0c:d9:
         ac:7a:7a:12:8e:aa:a0:b2:69:4d:af:e3:85:99:43:34:ff:ef:
         d6:76:14:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:24:25 2023 by rpki-client on console-fra.rpki-client.org