Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/66bb5de0-d8cf-341d-a616-ac5c4cc40821.roa
File:                     66bb5de0-d8cf-341d-a616-ac5c4cc40821.roa (raw, json)
Hash identifier:          FU64cfV2pjLFko6tdcKPWi4OVA7v/+3yMsKUncL+qcM=
Subject key identifier:   D5:B9:32:9E:F5:C3:E9:26:66:9E:9F:48:B3:25:29:DA:AF:79:0D:9F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DCC0E745336B999CE0FF4B3B0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/66bb5de0-d8cf-341d-a616-ac5c4cc40821.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Thu 09 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.29.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cc:0e:74:53:36:b9:99:ce:0f:f4:b3:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : Jun  9 04:00:00 2022 GMT
        Subject: CN=8164ee8d-7645-4fe6-87d2-7286efb32c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e9:25:c8:5c:65:ef:03:a4:2d:11:d1:e5:bc:
                    fd:61:48:81:c5:f0:f1:27:4f:9f:e6:cc:27:3a:00:
                    17:21:bd:ae:9b:bd:bb:0e:20:2a:60:11:6f:1b:c2:
                    00:bb:69:82:12:47:92:ac:09:af:e1:41:1a:7f:7b:
                    53:df:0f:1c:52:e2:27:33:0f:9b:29:99:55:1a:e2:
                    69:27:fc:4d:38:5f:78:e0:a8:76:5e:ca:eb:7d:ff:
                    3b:6e:08:76:33:a9:8d:c0:fd:db:84:65:e6:09:26:
                    5c:3e:1f:c6:bb:7f:69:a3:ae:e7:88:e0:dc:c8:4f:
                    58:cf:ee:aa:dd:01:17:63:49:e1:d3:b1:00:76:ab:
                    ed:96:40:1b:34:98:7a:aa:c0:33:2f:a0:62:be:39:
                    17:74:11:0d:d9:a2:b4:94:24:81:91:72:55:4b:c5:
                    8d:0b:30:a7:84:80:06:c3:58:89:79:f4:17:16:6f:
                    58:6d:68:eb:7f:b2:5e:34:e0:36:6f:e8:0d:69:97:
                    f5:e0:7a:a8:f2:91:3c:60:6c:c7:c0:84:7a:9c:e8:
                    76:d4:2a:b7:f9:cb:72:dc:15:23:84:57:db:38:a5:
                    89:4c:b6:45:5a:39:8b:84:2f:c9:fd:2f:6c:bb:5b:
                    12:60:04:f0:61:b3:01:a3:15:2e:42:de:a9:99:ff:
                    0d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B9:32:9E:F5:C3:E9:26:66:9E:9F:48:B3:25:29:DA:AF:79:0D:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/66bb5de0-d8cf-341d-a616-ac5c4cc40821.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.29.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:f6:9e:3b:de:04:7f:1f:56:36:5a:0b:0e:f2:4d:4b:a1:7a:
         98:58:5f:e9:5f:36:19:e1:85:a8:38:1c:da:2c:24:18:dd:ec:
         c4:3c:97:f3:21:45:00:a6:0b:54:cf:6e:76:9b:e1:36:fe:4e:
         4c:90:af:d9:f4:95:76:cd:2f:5d:e0:75:31:03:45:d8:09:4c:
         38:99:cd:d4:50:15:9e:50:f9:f2:0c:4a:1d:97:c3:fb:60:de:
         b6:0e:b4:86:f2:bf:67:11:24:b6:7d:12:03:91:15:89:44:28:
         d9:67:13:59:21:24:f0:1c:fb:33:1a:f6:f6:48:10:87:05:5a:
         b9:30:39:df:70:47:10:65:59:84:60:10:61:3d:41:b4:2b:9e:
         f2:74:f5:3e:7b:62:4e:22:2f:fd:b5:79:7a:80:6b:f7:a8:85:
         a4:1b:b6:4a:52:8a:2b:be:cd:c6:31:6a:78:0d:2b:ee:e7:31:
         da:92:a1:4d:1a:4a:6f:10:ec:6b:07:30:8a:b3:73:35:95:50:
         ee:1a:3b:e6:97:0f:05:bf:05:92:4b:62:e9:e1:66:01:75:ce:
         4a:d6:e5:c9:36:58:6c:83:22:13:2f:4d:74:16:db:d7:c0:ea:
         8e:ac:9b:e8:5a:02:29:35:d2:cf:22:57:a8:07:2e:75:8d:80:
         1a:45:13:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:24:52 2023 by rpki-client on console-fra.rpki-client.org