Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/60da2dde-5ade-3ca5-81c7-ae3ef4e2c5d3.roa
File:                     60da2dde-5ade-3ca5-81c7-ae3ef4e2c5d3.roa (raw, json)
Hash identifier:          2xmR0CT/isQXJC8w6KxyPwnT2A6hSrEmGPyOV9F3jv4=
Subject key identifier:   18:CC:33:33:EE:B8:19:6A:5C:EB:8F:37:CD:31:62:36:D2:8E:5F:EA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840BDE9D412E28E84EA2A402280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/60da2dde-5ade-3ca5-81c7-ae3ef4e2c5d3.roa
Signing time:             Sun 29 Jan 2023 12:00:00 +0000
ROA not before:           Sun 29 Jan 2023 12:00:00 +0000
ROA not after:            Mon 06 Mar 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        130.101.0.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:bd:e9:d4:12:e2:8e:84:ea:2a:40:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 29 12:00:00 2023 GMT
            Not After : Mar  6 05:00:00 2023 GMT
        Subject: CN=60dcef3f-dc60-4a2b-b167-ceebea28a8e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a1:60:99:02:37:fe:53:87:ec:4e:73:25:44:
                    89:53:c6:b8:bb:a7:e4:a2:84:88:4d:8b:49:0f:39:
                    90:21:73:e7:61:f8:01:fa:78:6f:51:64:a0:36:15:
                    95:7c:63:45:ee:3b:fb:61:9b:b9:2e:87:e0:7c:29:
                    d8:50:0b:df:9a:d8:37:f0:f4:b4:bf:49:97:86:8a:
                    69:38:67:f3:8e:44:5a:3f:66:4e:30:85:f7:0d:c0:
                    87:1d:fd:c4:59:63:9a:8a:2a:ab:83:5a:9c:d7:22:
                    f4:52:5c:15:d2:2f:f1:5c:e3:57:f4:cd:81:32:92:
                    fb:f5:5c:f0:25:9a:6b:9b:08:e3:d9:e0:dc:37:c5:
                    22:cb:0e:69:68:ed:b6:fd:e2:19:47:b0:d7:07:c5:
                    dd:62:28:73:c4:89:ba:72:86:f1:ad:80:22:2d:dd:
                    4a:78:c5:2b:54:b7:0f:53:37:dd:88:88:6f:a7:cd:
                    ad:95:a4:cb:1c:2c:e2:e6:bc:07:fc:fe:9f:8f:fe:
                    b9:da:fc:2c:82:a7:02:f8:57:d2:de:a7:0e:9e:1b:
                    ad:c6:04:0b:cb:26:87:05:7a:72:fa:79:b8:34:5f:
                    f0:94:23:33:b0:8f:d2:d5:89:20:d9:5c:8e:1b:6c:
                    ca:57:5a:f0:ae:2e:ab:82:3c:cd:73:96:6a:87:13:
                    7e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:CC:33:33:EE:B8:19:6A:5C:EB:8F:37:CD:31:62:36:D2:8E:5F:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/60da2dde-5ade-3ca5-81c7-ae3ef4e2c5d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.101.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:ba:7c:86:f0:d4:06:12:39:28:82:ce:2d:42:91:c1:b0:13:
         e7:d5:3d:e6:fd:2d:75:5e:34:b5:7f:a1:89:34:2f:68:9a:bd:
         43:63:3b:2e:1c:2f:ff:2f:3d:45:48:36:ac:85:bd:bf:19:cc:
         be:c2:5d:4c:62:0e:c3:86:59:26:5b:fd:aa:4d:01:5d:c0:75:
         4f:8a:42:ab:6d:23:c4:ad:13:6f:ca:56:05:de:d5:f4:ca:36:
         4b:ba:de:d4:2e:4b:9a:d6:5a:44:82:1b:a7:8c:ee:d4:69:ac:
         6b:26:c9:38:f0:b1:9e:18:31:8f:6f:35:65:2e:b0:30:d1:84:
         ce:e2:6a:54:da:b8:33:9e:da:23:91:a2:02:b4:77:59:ff:6e:
         f6:52:0b:f5:51:b4:de:b7:54:2f:ae:c7:f5:2f:ff:2e:15:a2:
         ce:db:81:4e:17:14:88:fb:5f:46:f6:7e:29:77:84:06:c7:07:
         8c:eb:20:b9:7f:fc:e3:66:be:87:d4:7b:10:62:b1:42:23:4d:
         54:10:c6:d8:f8:70:46:f0:78:e5:47:bd:5b:01:cb:b7:92:be:
         fc:55:2b:6b:97:c6:6f:c9:82:05:70:05:d3:20:4f:ce:a9:d7:
         75:84:c1:0b:4d:0f:dc:a4:1c:22:32:eb:66:43:fe:54:9f:7e:
         c4:44:67:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:26:03 2023 by rpki-client on console-ams.rpki-client.org