Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6ec54cdb-7a38-350b-997c-abf42234a58b.roa
File:                     6ec54cdb-7a38-350b-997c-abf42234a58b.roa (raw, json)
Hash identifier:          WgtLSyU3LApOB2pkHw+atLrhiKVd/rHP+yWPirDbNKg=
Subject key identifier:   CB:E0:75:C4:C7:A1:28:D8:51:F7:68:7A:77:4B:6E:7E:32:2B:9E:4C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840BBD1C7688CF120ECB8FD6B80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6ec54cdb-7a38-350b-997c-abf42234a58b.roa
Signing time:             Sat 28 Jan 2023 12:00:00 +0000
ROA not before:           Sat 28 Jan 2023 12:00:00 +0000
ROA not after:            Sun 05 Mar 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        104.153.112.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:bb:d1:c7:68:8c:f1:20:ec:b8:fd:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 28 12:00:00 2023 GMT
            Not After : Mar  5 05:00:00 2023 GMT
        Subject: CN=9ddb21ff-31aa-4eba-9303-e761c91bd77d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e0:e7:b0:75:bd:e5:54:fc:eb:99:91:05:68:
                    31:f3:77:d3:e6:38:7f:cf:56:52:5c:4a:2a:da:46:
                    1d:87:d6:29:f9:14:52:ae:c5:4a:81:a4:cc:2e:ba:
                    9a:5b:ea:55:29:a9:f3:11:6e:8a:98:f9:f7:48:a9:
                    48:5e:9e:ef:57:97:5b:d5:b1:51:77:a5:1d:72:72:
                    19:66:4e:f7:2a:ac:b3:ab:57:67:c3:eb:1d:fb:f3:
                    13:e8:03:28:36:7d:bd:26:bb:8c:fa:08:44:93:7a:
                    86:1d:c3:26:b2:e6:6e:be:71:fe:56:e6:73:8b:29:
                    92:ce:97:96:ab:52:9f:42:b3:19:87:e4:5d:c7:cb:
                    07:24:f4:7a:4e:05:18:f3:84:17:98:e8:8d:40:ba:
                    74:17:dd:70:49:76:60:e3:9a:c5:4a:2f:16:6f:4c:
                    0d:91:a6:93:14:91:fe:2f:7a:ec:70:7b:86:c8:74:
                    bb:cc:27:40:4c:a2:82:df:14:4e:e9:1f:30:1c:ee:
                    ab:40:52:fd:0e:d4:47:8b:b7:ac:0d:1e:2c:7a:e0:
                    30:f7:db:ec:54:44:a7:27:32:46:25:5e:d1:5e:be:
                    e1:84:e6:4a:07:75:9f:b0:e2:74:42:c2:58:23:4c:
                    d9:c8:90:06:09:a3:c4:36:e8:84:2a:b8:74:a9:f3:
                    59:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E0:75:C4:C7:A1:28:D8:51:F7:68:7A:77:4B:6E:7E:32:2B:9E:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6ec54cdb-7a38-350b-997c-abf42234a58b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:0e:95:3c:a8:00:e7:a4:71:e0:4d:da:ff:be:0c:07:c5:41:
         a5:2e:87:e0:b0:b3:59:09:ab:ff:64:67:03:87:6d:22:e8:85:
         ee:4d:8f:ef:2e:21:4b:35:df:f5:7c:c5:dc:4d:4d:d0:a2:70:
         40:f8:fa:41:6d:bd:cf:f9:b7:19:aa:ef:9d:15:5b:50:45:d4:
         ef:fb:b6:d4:cf:a7:a2:f1:ff:7e:7e:1a:52:4f:ec:47:98:0f:
         51:61:cf:e2:4c:de:a9:bf:f0:5d:25:94:1a:cc:c2:2f:38:16:
         83:86:95:33:90:96:ae:ba:43:9e:d6:ad:cf:c8:4d:65:89:6e:
         c9:59:66:e1:eb:9c:c0:1c:64:d7:bb:84:31:38:27:f3:95:cb:
         1b:69:df:df:e2:e1:d2:d7:dc:f7:c7:86:62:6b:02:02:db:92:
         e4:9a:a2:29:5c:40:54:9d:5d:5b:2a:4e:d8:55:31:10:d7:a3:
         72:70:73:db:af:a7:60:6b:af:94:75:98:3e:ca:8c:34:f4:32:
         af:9f:78:84:ac:fb:18:c9:d3:67:ab:86:bc:81:0d:c2:25:e1:
         32:49:2c:7e:a9:5f:14:fb:2a:d3:c9:30:f1:2d:a5:e4:e8:8e:
         31:42:08:96:b5:0a:ed:8d:61:f6:6f:33:14:fd:84:86:54:09:
         12:ca:87:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:25:08 2023 by rpki-client on console-fra.rpki-client.org