Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/63ab7051-2f65-3a53-b3e4-ba66b3e712b8.roa
File:                     63ab7051-2f65-3a53-b3e4-ba66b3e712b8.roa (raw, json)
Hash identifier:          c/tWLxgmL9i7f/wRLHhfFNVEUWVuXx2oIAoDuG8Avjk=
Subject key identifier:   A0:06:95:FA:E5:A6:5A:BB:BA:DF:3C:C6:8E:D0:8A:22:0E:68:98:1A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840C0C357955E1A8313EB32EE98
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/63ab7051-2f65-3a53-b3e4-ba66b3e712b8.roa
Signing time:             Mon 30 Jan 2023 22:42:07 +0000
ROA not before:           Mon 30 Jan 2023 22:42:07 +0000
ROA not after:            Tue 07 Mar 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        16.86.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c0:c3:57:95:5e:1a:83:13:eb:32:ee:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 30 22:42:07 2023 GMT
            Not After : Mar  7 05:00:00 2023 GMT
        Subject: CN=dc64a424-9174-4ee3-b14b-53c8d236f8d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d3:e7:dc:66:71:0d:98:bd:b3:bf:8e:c9:67:
                    c4:3d:6d:c7:86:bc:95:b2:9b:8c:95:04:24:29:87:
                    8f:b9:63:f9:fd:71:e5:17:22:ce:bc:27:77:fd:91:
                    1b:96:e2:16:5d:f5:d0:c2:bf:a1:b1:bf:34:49:54:
                    a5:de:47:fd:a5:37:2c:09:d7:9d:4c:c1:b1:c9:8c:
                    7d:8f:f2:a5:69:a9:04:90:9b:d6:de:9d:f0:2c:7b:
                    3b:5b:97:e7:57:1b:aa:69:a6:e8:df:10:80:3d:e6:
                    10:7d:2d:1d:6f:26:b8:cd:61:88:36:26:92:9f:9a:
                    5a:c2:ba:16:26:3b:a3:f7:a7:66:ef:48:a4:93:1e:
                    83:7e:81:aa:12:65:c4:e2:77:a8:40:58:9d:c8:ab:
                    f0:50:da:ab:09:b4:db:88:8b:94:a3:5b:dc:0b:d6:
                    b1:6e:bc:90:6e:1b:c1:2b:9d:a0:2d:03:3d:1e:17:
                    57:67:94:fa:df:1f:4c:97:96:41:ef:4a:1a:af:c2:
                    b5:93:af:28:aa:3e:08:ff:b7:8e:35:9a:f8:81:bd:
                    d5:70:20:d0:ed:d5:9b:28:44:3b:62:6e:b5:0a:b8:
                    38:0e:71:68:4d:cd:53:1f:62:be:52:8e:33:8a:50:
                    88:96:41:c7:8d:3d:cd:01:a0:dc:7d:35:c4:9e:13:
                    a9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:06:95:FA:E5:A6:5A:BB:BA:DF:3C:C6:8E:D0:8A:22:0E:68:98:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/63ab7051-2f65-3a53-b3e4-ba66b3e712b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.86.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:21:06:b3:2e:f3:9e:25:a4:2a:29:57:d7:7d:38:d5:62:d6:
         c7:2f:0a:55:4b:7f:96:c0:4a:ac:5b:da:74:d8:5a:f5:a9:88:
         64:be:64:7f:de:5d:89:48:3d:b1:2b:fc:8b:25:81:39:3d:58:
         30:18:4f:b3:f0:4c:1e:67:1e:f3:59:3f:fb:8b:92:d4:9b:48:
         94:a7:d0:04:62:19:74:31:e4:36:c0:f4:9f:cc:07:37:71:01:
         bd:e5:e8:b8:68:f4:94:ea:c6:8b:e8:58:c4:d5:51:3e:42:84:
         1d:ba:01:d6:aa:04:f5:f2:17:ff:cc:b1:0c:e1:36:9a:3b:ae:
         ff:cb:aa:2f:f8:ce:d8:8a:44:75:70:5e:eb:7f:67:26:ba:b8:
         a3:4a:e8:25:7c:b0:42:cb:a0:e0:fc:e2:de:b3:e9:8d:b6:84:
         03:7e:d1:af:38:1c:02:28:dc:f7:6b:4a:c6:5e:01:dc:01:0f:
         b0:4d:30:c2:1f:c8:c0:ac:b3:64:4e:e4:8f:9c:ba:e6:e9:1e:
         27:46:6a:82:1d:3f:92:db:48:27:9a:31:83:76:1a:9f:01:04:
         57:2d:23:24:de:3a:3b:6b:1b:5a:0f:6f:9b:aa:f7:6d:2c:72:
         b5:d9:fd:2c:3b:ba:84:31:d4:e0:0e:7d:50:52:a1:1e:fb:b5:
         8a:d2:3b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:26:08 2023 by rpki-client on console-ams.rpki-client.org