Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/98c43b9d-5d85-3226-a51e-9781d1497dba.roa
File:                     98c43b9d-5d85-3226-a51e-9781d1497dba.roa (raw, json)
Hash identifier:          2N4Pe9mERf1XsD9lxgqFss0uVYas3TqPBbtQHD6hj9o=
Subject key identifier:   3F:C5:89:18:F5:3A:E6:1B:DA:BD:10:D9:80:20:FB:FB:A0:B4:CC:C6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858405F931E42D084CC3B6960E840
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/98c43b9d-5d85-3226-a51e-9781d1497dba.roa
Signing time:             Mon 26 Dec 2022 12:00:00 +0000
ROA not before:           Mon 26 Dec 2022 12:00:00 +0000
ROA not after:            Tue 31 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        74.230.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:5f:93:1e:42:d0:84:cc:3b:69:60:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 26 12:00:00 2022 GMT
            Not After : Jan 31 05:00:00 2023 GMT
        Subject: CN=006922be-0399-4375-95dd-f458297d8f42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:44:a3:32:93:5d:0b:b2:38:b0:6c:52:ef:9c:
                    38:cf:28:45:18:e2:67:2e:09:1c:28:38:4d:34:53:
                    b8:a5:8a:55:5f:ca:51:c4:6b:d5:14:cf:c9:69:48:
                    25:31:18:25:33:ab:45:74:17:65:99:01:0e:e5:3b:
                    9e:2a:34:c2:dc:0e:ad:8a:fc:08:11:c3:ec:ab:e7:
                    78:99:08:57:af:ea:bf:20:fa:83:c8:a1:c3:d1:ee:
                    2e:66:07:66:44:91:69:34:86:83:89:93:c9:a4:82:
                    74:f5:27:7b:44:78:7d:b5:2d:85:d9:9c:49:18:d1:
                    29:fb:ac:8a:cd:d6:2a:65:21:9c:11:cf:db:cd:6f:
                    1d:26:ff:b5:87:74:90:7b:55:81:2a:f4:cb:87:8a:
                    fb:a6:c8:52:0a:44:36:cd:7a:2b:d6:68:a1:10:eb:
                    71:e5:f5:d2:f8:2a:f5:7f:e6:69:c4:d5:b7:21:59:
                    49:85:fc:4d:e1:6b:83:49:8f:b1:96:3b:bf:8b:8d:
                    fd:65:68:08:48:e8:34:e2:11:24:97:a2:93:46:b3:
                    b3:ae:0d:fa:3a:1a:bc:c1:e3:64:09:31:69:82:1a:
                    27:dc:0d:35:f2:91:26:df:9a:ff:ef:c1:0b:11:e9:
                    2e:28:fc:e7:7d:7d:60:0d:1b:d7:ec:b3:fc:71:4a:
                    f4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C5:89:18:F5:3A:E6:1B:DA:BD:10:D9:80:20:FB:FB:A0:B4:CC:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/98c43b9d-5d85-3226-a51e-9781d1497dba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.230.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:60:8b:ee:b5:84:de:11:71:81:1e:fc:79:16:53:95:0f:1d:
         69:06:8d:d7:87:2e:30:42:fe:eb:f9:20:b9:2c:ec:f0:0a:11:
         c4:43:51:b7:d0:15:9d:c5:9d:65:93:07:ee:ea:06:96:e6:b0:
         33:1b:ca:57:aa:2c:e0:01:5c:42:01:cf:4e:80:ae:a3:ba:35:
         81:0b:52:d6:df:fd:a0:db:d8:10:bf:66:50:61:de:40:6c:6f:
         00:61:55:99:e7:45:28:f9:aa:d1:77:6e:af:8b:f4:b3:85:3a:
         fe:61:d9:1f:f5:1f:7c:c6:96:56:bd:8c:1e:6d:61:ea:f2:7a:
         fc:a8:15:de:3f:4a:db:59:28:37:47:e3:c1:f3:0e:80:0c:87:
         d5:c0:8c:88:3f:52:63:f8:85:7d:9d:63:af:08:aa:21:f4:b0:
         4a:88:27:cd:d1:bc:5d:6e:66:74:ad:9e:0b:c2:90:97:39:b1:
         63:5c:17:56:fe:6f:e0:ff:ef:a8:7e:04:06:3e:68:c1:19:84:
         0c:97:d7:e4:05:8a:c1:f3:97:3b:0f:87:9b:eb:79:70:06:b8:
         5a:80:4c:0f:44:a3:1d:9a:02:49:70:f1:f7:dd:35:87:f6:e1:
         23:0a:89:bb:1e:1b:aa:56:47:9f:c8:5e:3a:82:27:0e:8a:0d:
         73:00:f7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:26:26 2023 by rpki-client on console-fra.rpki-client.org