Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6002cab1-ff11-3ae3-bac1-c30f55c918db.roa
File:                     6002cab1-ff11-3ae3-bac1-c30f55c918db.roa (raw, json)
Hash identifier:          Ap5mPXoKROIl2OfbCHof44uXPCn5oxHYdkaxzoGOfsA=
Subject key identifier:   0A:0A:11:A3:51:8A:6F:B9:A4:00:C8:07:B8:D1:BB:0C:06:EB:67:70
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840AA8BA5C01721D0BA0E3A9E80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6002cab1-ff11-3ae3-bac1-c30f55c918db.roa
Signing time:             Sun 22 Jan 2023 12:00:00 +0000
ROA not before:           Sun 22 Jan 2023 12:00:00 +0000
ROA not after:            Mon 27 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        156.4.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:aa:8b:a5:c0:17:21:d0:ba:0e:3a:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 22 12:00:00 2023 GMT
            Not After : Feb 27 05:00:00 2023 GMT
        Subject: CN=072f3bff-1623-46b1-bccf-6b19bee3f18e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:9b:1d:ef:5a:11:b5:c7:53:b7:65:0d:26:ff:
                    cb:ab:64:df:dd:3b:c6:58:04:4a:8c:35:5a:fe:d0:
                    97:06:b9:d8:f3:cf:5f:45:bb:8f:b4:90:8b:98:60:
                    3d:63:0a:3d:13:b7:48:04:12:29:9c:72:fa:72:85:
                    04:48:e4:58:1a:49:ec:73:29:2a:9c:3b:da:9d:b8:
                    ca:58:bc:e0:bf:0b:fb:37:48:fb:77:4a:34:d8:ea:
                    53:21:65:92:a2:79:0f:69:cb:80:4a:30:32:cb:68:
                    bf:d3:2a:e3:d4:18:b5:2d:bf:56:0b:6d:b2:0a:03:
                    f3:a4:2e:59:36:91:67:2d:1b:0b:9d:37:06:35:60:
                    c7:1c:08:a8:9b:57:cc:4f:a8:0a:f1:7d:19:ee:db:
                    bc:1b:0c:b9:1d:6d:ad:51:0b:ef:10:98:48:fc:ca:
                    42:8b:e0:6e:5b:4c:57:9b:2d:ec:6b:33:8f:78:33:
                    33:38:8a:ce:94:cf:db:67:2e:ec:9d:2b:62:94:e0:
                    a5:bd:56:aa:df:42:4c:cd:1c:ce:e2:64:42:98:16:
                    8a:2b:8d:ec:bf:1e:84:dd:2f:d1:69:24:02:4a:fd:
                    9c:7a:7c:13:25:68:df:5b:00:0e:b0:94:33:ea:05:
                    e5:10:3d:49:df:80:74:b6:e6:e5:17:11:0e:e2:e3:
                    9e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:0A:11:A3:51:8A:6F:B9:A4:00:C8:07:B8:D1:BB:0C:06:EB:67:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6002cab1-ff11-3ae3-bac1-c30f55c918db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.4.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:1f:02:d5:a7:90:8a:07:22:04:f9:50:a2:f2:91:d5:46:81:
         5c:e2:b0:d6:a7:0c:b9:97:a2:33:6f:80:b9:a8:84:3b:2b:4e:
         ad:54:9e:f7:6e:63:fe:b6:78:cd:b8:71:8e:b5:f4:79:14:21:
         cb:9d:f3:1d:d1:2a:a9:17:ca:68:5c:83:dc:9e:98:0e:e4:8c:
         d6:9d:19:07:41:5a:19:30:a3:29:28:38:87:af:f4:c8:d5:e3:
         e6:7c:f6:b0:db:7b:ad:01:a8:cb:67:30:82:8d:2a:c2:0c:29:
         87:9f:75:e5:f2:49:b8:67:f6:08:57:c3:86:dd:c8:9f:02:ac:
         68:c6:48:61:fd:36:18:c2:3d:46:c9:f8:98:3d:19:07:5f:55:
         9a:2e:26:af:f3:73:a7:6b:5f:89:fe:8d:e7:9c:f4:03:e0:e8:
         fa:6d:98:3c:f9:6b:6a:2d:bd:03:b5:e1:69:7c:df:88:bf:76:
         0c:d9:8a:6a:b7:fe:72:34:2c:ac:18:2e:9c:12:33:e2:d3:0c:
         bd:b6:0b:d6:11:38:c9:d4:6f:6f:28:d3:4e:28:bd:40:b2:23:
         69:95:f0:b6:3f:8b:f4:28:d0:c3:15:90:e5:06:09:99:9d:4b:
         0c:8f:2e:9c:89:91:a9:c8:8e:2d:4d:c9:c6:ba:0b:75:4a:46:
         47:b5:16:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:53:00 2024 by rpki-client on console-fra.rpki-client.org