Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a6c589e2-8276-318f-8a86-1fd9734827e7.roa
File:                     a6c589e2-8276-318f-8a86-1fd9734827e7.roa (raw, json)
Hash identifier:          OsuWBHwBbcq3kEOUE8a/hgiqs663He1oJDsgb8JLdhc=
Subject key identifier:   A0:44:D1:80:EC:50:82:15:06:56:42:4E:56:0A:68:39:F6:A5:5C:38
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584086A8EA6A7BB5984B7649FAB0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a6c589e2-8276-318f-8a86-1fd9734827e7.roa
Signing time:             Mon 09 Jan 2023 12:00:00 +0000
ROA not before:           Mon 09 Jan 2023 12:00:00 +0000
ROA not after:            Tue 14 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        139.56.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:86:a8:ea:6a:7b:b5:98:4b:76:49:fa:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  9 12:00:00 2023 GMT
            Not After : Feb 14 05:00:00 2023 GMT
        Subject: CN=a8f83147-86fd-41c5-aac0-abdbdccb7a73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3e:f2:ea:8a:ef:6b:2d:1e:a2:59:8c:04:26:
                    78:72:86:31:e9:9c:e3:e6:22:e8:95:7e:b3:70:18:
                    32:d2:60:62:4d:f7:b2:c4:01:1d:a9:25:5c:d1:5a:
                    b3:a7:76:db:41:39:89:e9:00:5c:59:41:79:c1:c9:
                    9a:ea:c5:05:c8:cc:24:4b:7e:78:ef:12:74:19:75:
                    a4:83:cd:e4:32:11:3e:49:94:0d:e9:cf:9a:d0:41:
                    04:e7:cd:a4:ef:d0:c0:f9:ff:67:04:43:42:7e:9d:
                    78:0b:fa:f0:08:f2:c9:28:bf:bd:0c:07:d6:15:ee:
                    06:c1:a2:fe:53:73:0f:3e:6d:1f:9b:83:4f:f2:4e:
                    47:e5:bb:12:1e:52:ea:96:5d:3b:ec:df:c6:80:75:
                    a6:dd:ba:5e:dc:88:be:7e:a2:09:76:04:33:13:6b:
                    78:4e:3b:94:71:a5:a1:73:e2:15:81:fa:31:96:64:
                    16:26:69:24:61:39:02:57:18:04:b5:d5:cc:14:55:
                    a6:90:5b:f5:e6:c6:a3:7e:1e:54:de:ae:54:a6:dd:
                    91:8c:22:53:00:ac:ea:f1:b4:e9:39:a2:b1:a8:b1:
                    02:9b:b9:0d:9d:b9:88:8e:3e:04:a5:8f:15:87:bc:
                    02:dc:61:98:b7:16:9f:76:88:d5:38:b0:3d:79:c8:
                    77:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:44:D1:80:EC:50:82:15:06:56:42:4E:56:0A:68:39:F6:A5:5C:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a6c589e2-8276-318f-8a86-1fd9734827e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:47:df:ba:2a:36:36:2b:cd:80:f8:0e:72:fb:17:ae:d6:ca:
         69:c2:2e:60:5b:1c:70:b7:b9:1e:20:8e:c1:d9:2e:6b:cb:9e:
         49:45:04:f5:1b:68:5a:c1:0e:03:a6:ec:bc:90:5d:72:0b:fe:
         51:61:65:25:e0:4f:61:4d:93:96:6f:3c:c2:c1:8b:63:28:a3:
         dd:7a:64:87:42:59:a7:99:be:f4:fc:27:05:8b:2c:2b:35:ed:
         fb:f0:e0:b1:27:b0:c7:cc:b1:57:bd:30:8a:0d:b9:08:18:8d:
         85:c3:fe:97:53:bf:f2:81:aa:6b:10:1a:94:29:7b:e6:d8:53:
         74:bc:9e:54:31:e4:a4:8c:2a:aa:c5:16:56:3c:e5:7e:30:9f:
         da:31:09:8e:b9:5c:44:8a:8e:9f:02:71:e7:2a:af:12:cc:ba:
         cf:59:7e:26:a6:08:12:26:03:9b:b2:45:b9:a6:c6:c2:24:8b:
         92:96:82:a4:9d:6a:52:28:f7:4c:54:e2:be:4f:86:9f:31:88:
         e2:b1:f4:3e:ca:bc:fa:73:13:b7:62:77:a3:8d:90:8d:78:3a:
         11:5f:00:82:dd:6f:c7:b4:03:3a:68:2c:b7:29:bf:00:70:20:
         2f:41:77:6f:37:de:1b:60:a3:bc:42:45:52:72:28:56:e7:a7:
         69:15:16:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:26:54 2023 by rpki-client on console-fra.rpki-client.org