Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/58e192b7-169d-365a-a0eb-a5aa53c34ff6.roa
File:                     58e192b7-169d-365a-a0eb-a5aa53c34ff6.roa (raw, json)
Hash identifier:          Rz4MvnZMUKKdRLCxiDcMESjEMa9NMSwABtrfMpctlPc=
Subject key identifier:   2F:DB:B5:F0:B0:AD:10:F7:41:FC:60:4E:E5:01:E8:B9:13:BA:FA:37
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840837D7B5D1BB9EC55D00F0A80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/58e192b7-169d-365a-a0eb-a5aa53c34ff6.roa
Signing time:             Sun 08 Jan 2023 12:00:00 +0000
ROA not before:           Sun 08 Jan 2023 12:00:00 +0000
ROA not after:            Mon 13 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        192.157.72.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:83:7d:7b:5d:1b:b9:ec:55:d0:0f:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  8 12:00:00 2023 GMT
            Not After : Feb 13 05:00:00 2023 GMT
        Subject: CN=8889b547-45f5-4d46-8d92-c56db80d5a2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f8:8b:b8:d9:65:dd:d0:d9:1c:b2:de:20:9a:
                    b3:0f:c7:61:bb:ef:9f:c1:04:2f:b6:3f:e8:49:0b:
                    f5:54:16:ef:b1:d6:ca:ba:c6:1f:d3:cc:b2:98:eb:
                    3c:6c:98:f9:8f:e1:15:91:66:ab:bc:9d:20:f2:b3:
                    7b:4d:41:ae:57:06:5d:57:b5:23:f6:cd:e5:e9:dc:
                    04:dd:0b:1c:32:b0:c3:7e:ae:28:c3:a3:55:fa:b9:
                    3f:5f:6c:26:f8:bb:78:33:b7:94:7b:07:6a:a4:61:
                    58:89:57:e7:0f:d8:f6:f2:45:46:e9:64:21:29:22:
                    a6:e8:96:d8:30:7e:9b:29:4f:27:3f:2a:c4:13:cb:
                    71:f5:58:15:55:ed:db:c8:10:d0:66:28:0c:84:5f:
                    8c:e5:a0:9e:a4:ca:5b:03:77:01:6b:42:62:75:91:
                    e2:23:d5:cf:97:e2:46:0b:c7:3d:33:68:2e:4c:74:
                    9e:59:f6:1d:70:71:b6:10:ad:c5:c3:69:cf:14:44:
                    fc:53:be:e3:7a:61:79:79:22:42:92:1b:2f:47:9b:
                    d4:de:09:2b:7b:22:b1:6f:10:64:ae:fc:b0:e5:21:
                    ac:ab:a7:92:9e:fd:df:e0:fc:f6:8c:81:9a:e0:0c:
                    94:e9:08:dd:df:8f:43:b0:1f:13:38:4f:87:f6:bc:
                    06:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DB:B5:F0:B0:AD:10:F7:41:FC:60:4E:E5:01:E8:B9:13:BA:FA:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/58e192b7-169d-365a-a0eb-a5aa53c34ff6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:b6:78:8c:26:72:81:6a:21:63:27:3a:c1:0c:1b:f6:0f:e5:
         45:57:f1:cb:ba:02:a5:3f:33:bc:9d:8d:d8:35:af:fd:6d:0f:
         6c:0d:ab:90:1a:a5:9f:e3:f2:5f:e0:ab:13:68:79:15:28:4f:
         e6:c9:48:9c:89:91:c0:99:3e:e0:b8:4b:ac:60:f3:e5:fa:43:
         5c:e9:dc:94:de:ae:96:68:f6:43:48:fc:8f:05:1d:2e:8a:cd:
         87:49:70:fe:e6:48:c5:3d:b8:b9:92:e9:e8:30:5f:83:e3:a0:
         5a:93:fb:d7:11:64:4f:c8:17:f6:33:87:94:c9:92:b8:08:07:
         25:60:54:bf:55:e5:37:14:40:3e:78:8b:82:78:eb:f9:6f:41:
         32:c8:14:fd:79:0c:c7:ef:2c:30:e5:09:27:fe:36:84:9e:c1:
         2e:cf:c2:43:15:d3:97:64:6a:f2:56:7f:0c:4e:af:cd:cb:2e:
         da:1f:77:60:00:73:02:2c:35:8c:3f:4b:cd:a7:01:6d:77:d5:
         d5:5b:fe:91:1c:9d:89:e1:7f:38:f7:60:0c:66:e8:73:99:9a:
         85:76:6b:75:38:87:d2:98:88:98:a3:d8:1e:51:da:86:b2:70:
         82:a8:6c:5c:d9:f6:b0:ad:22:18:a2:1a:f3:5b:c7:d3:da:b3:
         53:a4:39:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:25:35 2023 by rpki-client on console-ams.rpki-client.org