Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7e8d5dfb-d109-3704-ad1f-2614e3337a2a.roa
File:                     7e8d5dfb-d109-3704-ad1f-2614e3337a2a.roa (raw, json)
Hash identifier:          azb1OEzeMfNffMopzv3tRp9YG8DafBM0qwizXAfl2wU=
Subject key identifier:   7A:1E:BE:23:E7:DF:D4:A6:91:01:58:9D:44:3C:2F:9C:A1:5A:6F:0B
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840C923263E9430658C665DA800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7e8d5dfb-d109-3704-ad1f-2614e3337a2a.roa
Signing time:             Thu 02 Feb 2023 12:00:00 +0000
ROA not before:           Thu 02 Feb 2023 12:00:00 +0000
ROA not after:            Fri 10 Mar 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        40.201.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c9:23:26:3e:94:30:65:8c:66:5d:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  2 12:00:00 2023 GMT
            Not After : Mar 10 05:00:00 2023 GMT
        Subject: CN=ad2ffea1-8d7b-451c-b078-1f873b508ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:64:4c:71:ed:3c:f5:5d:f6:86:1b:67:f0:1b:
                    13:21:70:3f:81:43:f9:a9:6c:19:39:df:c2:7b:83:
                    fb:07:3f:17:67:1b:98:cd:80:0e:3a:80:cc:92:7c:
                    e5:49:39:78:89:73:92:ee:3c:eb:2e:56:37:d5:23:
                    96:21:84:25:96:d5:fa:3e:26:f0:53:23:53:22:6e:
                    8f:23:f8:fb:c6:9c:22:7a:50:f1:2e:e4:f5:56:e0:
                    20:7a:49:ee:07:ac:81:07:41:98:fd:06:7f:a9:f8:
                    71:00:83:57:26:bf:87:61:4d:d4:b0:19:ea:6b:41:
                    1f:b4:76:d0:76:c8:da:18:22:f4:0a:2d:97:d8:a7:
                    fb:2f:0e:8d:cf:b6:5e:ab:76:f0:f7:a4:a9:e6:ba:
                    77:56:4d:73:fa:02:c0:fb:9b:e3:f5:b4:1d:0b:21:
                    48:d9:25:2f:6f:bb:cf:1b:dc:4d:10:76:9c:f8:0e:
                    d5:84:e2:f9:bf:ac:97:50:3c:54:6a:bc:33:53:e0:
                    32:e2:7f:39:40:ab:2d:c6:df:24:e0:15:1e:d2:1d:
                    5f:ab:e4:9e:5c:1d:72:99:d8:aa:83:fa:62:f2:6f:
                    23:6f:08:ed:9f:b6:5d:fe:b6:8b:34:e6:4a:f2:f4:
                    3f:d6:e6:bc:f1:79:7f:51:48:8a:11:21:4c:12:b8:
                    41:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:1E:BE:23:E7:DF:D4:A6:91:01:58:9D:44:3C:2F:9C:A1:5A:6F:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7e8d5dfb-d109-3704-ad1f-2614e3337a2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.201.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:42:89:c2:60:5c:a0:15:c8:89:bd:03:ae:72:0e:b7:d2:3a:
         f8:06:d7:7b:0f:3e:f4:e3:6d:05:91:45:ce:ad:fe:16:9e:ef:
         1a:a9:15:2f:64:42:22:cd:dc:87:70:a0:d4:45:e6:56:1b:a7:
         c1:2e:ec:6a:1b:6d:db:dd:44:fb:7c:ed:55:94:c3:30:a4:70:
         ee:3e:e8:70:01:19:2a:93:ef:d2:59:bf:08:a9:5c:f5:12:3d:
         f5:b1:a7:25:6d:a7:1c:84:06:dd:0b:26:2c:d0:cf:e6:50:ec:
         92:b8:d6:8c:98:2b:17:3c:a7:92:a0:05:e1:73:2d:16:6f:b7:
         6f:0a:63:16:54:74:dd:93:14:3b:82:59:79:66:fa:71:a5:af:
         f9:78:fd:70:c2:20:da:58:58:e0:26:47:78:ab:27:01:a8:fd:
         c7:eb:02:a4:1a:00:c4:da:c8:15:d6:d1:df:ed:72:ad:d2:64:
         f8:cf:a8:4b:eb:cb:a0:8e:55:fe:21:ba:91:a7:69:1c:16:21:
         27:e7:cf:4b:70:13:76:d7:b9:0a:f5:d8:6f:0d:59:7c:36:0a:
         e8:54:3c:27:8d:0c:bd:33:1d:6e:93:f7:66:a7:34:d8:79:4f:
         83:29:e3:5f:c9:f9:0c:9e:c4:bc:40:b4:2a:94:6e:6a:ff:f7:
         64:01:74:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:27:08 2023 by rpki-client on console-ams.rpki-client.org