Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6f315e05-a901-3596-a199-2a344fef84b6.roa
File:                     6f315e05-a901-3596-a199-2a344fef84b6.roa (raw, json)
Hash identifier:          xLHo+b6H2n4WNq/Q1yvunEghZvKh276rHw1uONOCBJ4=
Subject key identifier:   59:19:B2:2A:C7:CC:5A:B4:59:96:11:62:DC:C4:79:5B:53:3B:E1:8A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858406880E0C7D0A3192D2D84D280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6f315e05-a901-3596-a199-2a344fef84b6.roa
Signing time:             Thu 29 Dec 2022 12:00:00 +0000
ROA not before:           Thu 29 Dec 2022 12:00:00 +0000
ROA not after:            Fri 03 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        108.166.224.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:68:80:e0:c7:d0:a3:19:2d:2d:84:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 29 12:00:00 2022 GMT
            Not After : Feb  3 05:00:00 2023 GMT
        Subject: CN=8a20945f-ab4b-487f-999d-5ba0ca420192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e9:ee:61:67:9a:43:aa:0e:35:62:c5:0e:35:
                    5c:df:18:0f:4a:a0:e8:39:cf:1b:4c:1b:12:5b:34:
                    9e:66:d7:cc:35:3a:4e:1d:3c:5f:5c:61:ef:5c:0e:
                    71:53:a8:32:94:d7:bf:87:2e:d9:fe:6c:2e:6b:24:
                    62:c6:dc:2e:bd:c0:37:0c:f6:85:3d:67:6f:18:40:
                    50:a7:0a:99:57:0d:5a:8c:39:8f:f2:66:c4:d7:ea:
                    ff:3d:93:99:8a:88:e5:3c:47:84:d1:8d:8b:40:f1:
                    e8:93:06:c9:e9:d4:ba:ea:9c:22:ed:48:c0:a8:a9:
                    6b:c6:00:ed:0d:32:65:a4:66:18:30:15:e4:94:39:
                    a8:33:90:72:22:b0:16:31:80:8c:e5:95:2c:b1:6b:
                    5b:1d:b3:aa:ba:bd:56:87:5d:5f:2e:83:fa:97:b9:
                    27:aa:fe:15:c9:cb:a9:34:22:d6:d2:a7:68:96:72:
                    00:e9:3c:72:41:4e:ea:d1:67:e0:a0:65:b1:a2:49:
                    7c:2a:09:c2:db:bd:0b:d7:5f:2c:23:99:22:69:f5:
                    d2:80:5b:97:dc:4d:83:b7:a3:89:c5:b9:a0:50:37:
                    85:cb:15:9d:93:70:81:08:b8:f3:84:14:84:b5:a3:
                    1a:8e:6e:bf:de:d9:5f:20:b2:ca:95:94:ec:8a:e0:
                    92:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:19:B2:2A:C7:CC:5A:B4:59:96:11:62:DC:C4:79:5B:53:3B:E1:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6f315e05-a901-3596-a199-2a344fef84b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.166.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:d1:4d:3b:69:b7:15:83:ff:29:a3:24:d7:2a:11:d5:67:c5:
         19:a3:fd:32:8a:90:d3:11:37:43:7d:af:6e:c2:88:90:d5:79:
         43:c6:4f:92:5f:ab:01:c5:cf:f5:dc:f4:b4:08:e9:0d:0c:fc:
         a2:49:f0:c6:8a:68:62:ce:77:ac:5c:b7:fa:00:b9:b4:70:ff:
         84:97:59:5a:67:28:91:29:30:7b:c8:a0:37:2e:23:0a:26:3e:
         00:93:25:c8:45:c2:76:68:58:28:9e:e7:c1:41:b6:59:4b:19:
         17:80:51:a4:85:8f:62:1b:fd:0d:70:c7:37:7a:94:03:72:0e:
         90:fc:de:a7:c2:0b:71:b5:f7:d9:ec:7e:e5:f6:88:b9:4a:c7:
         16:81:31:32:ef:da:a9:28:79:3a:7b:45:f5:99:9e:9c:46:bd:
         bf:8a:08:03:a5:24:1f:41:44:9a:b0:44:09:ad:93:27:d0:4c:
         67:fb:b7:f3:53:90:ee:50:d7:9e:32:9a:59:b1:f1:15:5d:50:
         82:8f:3c:8d:e7:0e:58:75:63:89:52:f3:83:79:61:62:26:47:
         da:a5:11:ac:71:28:cb:8b:d9:c9:c6:1f:87:12:ec:0c:e7:89:
         2a:71:a8:43:04:85:ab:50:7b:6a:50:32:55:94:f3:df:7b:d4:
         f1:dc:a2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:25:09 2023 by rpki-client on console-fra.rpki-client.org