Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/82933c4e-10cb-332d-aca4-d82ca5cb1d60.roa
File:                     82933c4e-10cb-332d-aca4-d82ca5cb1d60.roa (raw, json)
Hash identifier:          OrkOIE0xKZWsry9uKx8b/zBLmx6bUJJHm8pIZ/7O7Rs=
Subject key identifier:   DF:86:7B:50:9A:CB:1E:1D:FF:62:5F:B7:8E:34:EF:27:AB:BD:3A:09
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858406DA68B5011498B7066823080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/82933c4e-10cb-332d-aca4-d82ca5cb1d60.roa
Signing time:             Sat 31 Dec 2022 12:00:00 +0000
ROA not before:           Sat 31 Dec 2022 12:00:00 +0000
ROA not after:            Sun 05 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        104.153.112.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:6d:a6:8b:50:11:49:8b:70:66:82:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 31 12:00:00 2022 GMT
            Not After : Feb  5 05:00:00 2023 GMT
        Subject: CN=3e9fb775-e763-4c44-a5ca-a13d1c54208c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:48:71:65:36:1e:ba:d9:e3:48:a2:39:b6:f4:
                    3a:55:eb:fa:5f:06:24:bb:3f:a0:f0:0f:c7:b4:e4:
                    eb:e1:a5:f7:01:66:f2:25:dc:f8:4a:a8:ff:af:d6:
                    ae:24:02:4e:fd:62:94:d1:49:35:11:09:35:5a:4d:
                    af:ee:6c:f1:9f:eb:d3:75:5f:07:dd:e9:16:e8:f2:
                    6a:54:37:f0:c6:a8:3c:06:b7:c6:ef:02:b6:ad:7a:
                    11:69:6e:33:e8:df:8d:c7:d1:38:03:2e:ab:61:50:
                    7e:16:41:3d:26:83:bc:12:f6:94:d3:ee:1f:55:42:
                    bb:cd:04:99:c8:17:7b:d4:e1:f9:46:14:c2:31:c9:
                    76:e0:58:0e:2c:8e:4a:60:0c:46:78:78:ff:ee:e0:
                    f5:3a:8e:6a:01:b3:6f:bf:02:e0:2c:9a:37:f7:e9:
                    5e:3a:f6:26:e4:3d:0b:41:5b:5d:ef:ff:9b:30:78:
                    0a:ca:55:cb:e9:0f:f5:41:ce:a2:14:1e:df:02:82:
                    f9:b2:df:ba:0d:d5:b5:f4:91:83:9f:a1:e4:0f:2f:
                    56:84:a9:48:9b:b2:52:67:c4:9f:d2:56:80:3a:0a:
                    22:89:6a:b3:2e:71:83:5b:90:ab:4f:91:15:04:af:
                    0b:10:40:e8:da:e6:17:67:5f:7d:80:4a:86:9f:31:
                    74:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:86:7B:50:9A:CB:1E:1D:FF:62:5F:B7:8E:34:EF:27:AB:BD:3A:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/82933c4e-10cb-332d-aca4-d82ca5cb1d60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:1a:fd:5f:ad:2b:e2:56:e5:e7:74:fe:0e:23:66:af:74:35:
         55:1d:64:3f:59:1c:65:b3:a6:92:48:d9:ed:85:8c:4f:4c:f0:
         50:3e:06:dc:c4:ce:3a:e4:ec:d5:81:a9:99:bb:5c:db:c2:38:
         60:00:d6:df:36:6e:74:a3:65:e9:8b:8b:54:fc:5a:42:43:8d:
         15:e0:f2:cb:be:36:42:20:8e:3f:c0:ae:57:1d:ba:01:a9:96:
         36:4c:d0:59:88:ec:89:b4:7b:2a:59:cb:4b:13:d9:5c:3b:fd:
         16:c7:4c:6e:84:90:fb:a3:9f:3f:c3:99:92:82:11:85:49:3f:
         9e:a3:a9:cc:d6:7f:10:55:8d:cc:97:9b:6e:62:5a:13:de:71:
         6e:1d:b5:8e:2b:42:71:47:f0:03:36:75:7f:f1:35:14:ca:ce:
         cf:4a:9b:62:4e:12:9f:7d:00:3d:b8:cb:f9:81:89:ea:b3:fa:
         1d:91:2a:1d:7e:45:5d:12:40:94:d7:fb:e8:77:70:0b:45:60:
         24:ff:ef:a1:93:c9:ea:6f:ac:b1:cf:87:83:7a:c3:1f:85:ec:
         8e:84:9d:20:d7:25:11:34:8d:f4:db:34:31:c4:49:8c:88:2a:
         54:e5:00:c6:eb:a0:71:e7:b2:e7:18:b5:86:48:04:b3:fa:14:
         41:f1:48:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:25:45 2023 by rpki-client on console-fra.rpki-client.org