Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ae78fd15-264c-3b5d-a434-0c24d5e9ecb0.roa
File:                     ae78fd15-264c-3b5d-a434-0c24d5e9ecb0.roa (raw, json)
Hash identifier:          9o3WoTypIO5+jr++4VHOEihtqeXk1uY4O7ZpXr3upUo=
Subject key identifier:   F8:16:62:A8:8C:0C:CC:40:44:95:93:8A:55:E5:35:E6:C7:59:D7:6F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DD8276CB6C25153100ACC0F80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ae78fd15-264c-3b5d-a434-0c24d5e9ecb0.roa
Signing time:             Sun 08 May 2022 12:00:00 +0000
ROA not before:           Sun 08 May 2022 12:00:00 +0000
ROA not after:            Mon 13 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        160.209.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d8:27:6c:b6:c2:51:53:10:0a:cc:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  8 12:00:00 2022 GMT
            Not After : Jun 13 04:00:00 2022 GMT
        Subject: CN=5072cd15-b0bb-4004-9b5d-717933b98055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e8:e1:69:ed:26:d7:11:63:8f:16:76:7a:c0:
                    cb:2e:25:93:d3:e5:b4:01:52:6b:70:07:87:67:23:
                    e4:74:12:b4:62:d7:97:30:8e:9b:7f:ea:83:1a:7f:
                    cb:e5:6f:42:08:f8:bd:22:24:06:87:e9:23:ed:8f:
                    aa:d3:f3:58:58:fe:8e:bd:09:4c:15:14:06:f2:69:
                    be:87:31:44:a0:62:99:3a:f1:43:a5:61:6b:0e:b3:
                    2f:77:d7:4e:f7:85:64:0b:83:e9:cd:be:90:3a:29:
                    60:3d:bc:7a:0c:7b:38:ef:32:fe:65:a4:1b:52:5a:
                    9d:c3:26:75:05:83:0c:94:f2:37:9d:31:6b:9d:d1:
                    c4:2b:47:a4:74:35:cb:f9:25:fe:88:92:69:c7:ce:
                    a5:5b:df:d9:88:8e:ca:c5:39:7e:36:1e:8c:41:4f:
                    cf:e3:79:e9:b9:40:19:fe:15:bc:da:4f:e6:8b:00:
                    34:71:9e:73:1d:29:b2:71:53:89:c7:4b:76:c6:a2:
                    2e:bd:6f:ed:c2:38:bb:28:94:0e:50:f4:2c:b1:71:
                    c8:a9:56:95:c3:b5:ca:86:25:4b:3b:70:8c:b1:45:
                    ff:15:22:e7:1a:33:ca:7c:a2:b8:63:38:c7:9d:b7:
                    b5:c9:c2:20:fc:32:ac:d4:02:f7:26:fb:72:16:0c:
                    02:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:16:62:A8:8C:0C:CC:40:44:95:93:8A:55:E5:35:E6:C7:59:D7:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ae78fd15-264c-3b5d-a434-0c24d5e9ecb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.209.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:2d:87:24:da:5f:ba:91:44:d2:9f:c4:94:94:20:df:92:83:
         1b:33:64:aa:de:37:5e:6d:2c:2f:9e:c0:8b:06:98:5d:19:59:
         17:4f:f5:03:54:a3:e6:24:58:a4:a4:2e:91:ec:b6:96:b0:23:
         ee:a2:79:e3:64:29:43:d1:b2:66:0d:5e:87:a7:6f:09:82:b1:
         06:10:e8:05:a2:ea:fb:83:ea:36:07:ce:94:d2:7a:27:10:07:
         c1:b0:70:13:0d:86:4e:50:2f:c9:24:b1:b7:be:07:70:67:fa:
         41:22:ab:7c:eb:0f:bb:0d:da:a6:da:e9:04:0d:06:40:f0:c5:
         31:4f:86:c3:5f:13:f6:8a:68:5a:64:cb:7c:b7:37:12:d9:03:
         cc:17:24:75:0d:74:f5:ce:00:55:f2:a8:0e:1d:21:e2:cc:38:
         86:66:a0:9b:d8:5c:25:b1:ec:be:59:7e:7d:02:9c:13:f5:96:
         dc:e5:14:68:1b:07:a9:ba:b5:28:93:c8:99:27:04:de:90:b4:
         ce:88:88:25:31:d9:51:11:18:23:84:c9:d8:d4:a2:04:3b:15:
         81:94:6c:98:77:6a:20:bc:dc:16:f6:58:59:c3:54:93:df:fb:
         08:89:6f:26:d0:dc:62:e7:e5:ba:93:ad:69:7d:71:94:4f:d1:
         20:43:74:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:27:08 2023 by rpki-client on console-fra.rpki-client.org