Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b06d46b7-7d69-3786-8c1f-e35ae7bd067a.roa
File:                     b06d46b7-7d69-3786-8c1f-e35ae7bd067a.roa (raw, json)
Hash identifier:          Ur0rdFGEc+86Se5QYOfJhUuRBZ0S83q2CRsMblNl/n0=
Subject key identifier:   CD:AC:48:4C:2A:D3:AA:5A:A7:D6:0F:EE:B7:B0:0B:86:A7:D6:8B:25
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840B82EF02B5B55D4D7D47E7180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b06d46b7-7d69-3786-8c1f-e35ae7bd067a.roa
Signing time:             Fri 27 Jan 2023 12:00:00 +0000
ROA not before:           Fri 27 Jan 2023 12:00:00 +0000
ROA not after:            Sat 04 Mar 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        71.152.0.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b8:2e:f0:2b:5b:55:d4:d7:d4:7e:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 27 12:00:00 2023 GMT
            Not After : Mar  4 05:00:00 2023 GMT
        Subject: CN=a6462d83-bfaa-4b88-b35b-f00e9f6c82e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:89:48:5b:bb:83:1f:79:ba:43:8b:b7:dc:89:
                    c3:6d:2a:31:dc:ff:51:0e:be:8a:e1:3d:93:f1:09:
                    df:16:92:18:e9:44:e2:88:26:24:99:df:98:50:a8:
                    35:38:49:3b:99:48:d8:62:79:c6:ad:31:5f:1e:3a:
                    af:1f:c8:e0:19:6f:0a:8b:2f:98:51:28:df:53:32:
                    a9:f6:9b:86:11:eb:44:40:20:14:c2:fa:c1:41:be:
                    58:cb:54:5c:db:f1:6a:5a:85:e1:5a:3f:41:14:47:
                    fb:ac:03:ab:c1:92:aa:d2:14:60:30:07:5f:0b:29:
                    82:52:64:eb:bd:8a:65:aa:fc:8d:a2:1d:91:6f:30:
                    c4:61:9f:8a:f0:9b:d7:49:2b:b4:ae:c4:1a:78:f1:
                    17:76:64:0f:c0:38:c7:26:f0:c2:ab:a7:13:d2:24:
                    35:0a:a9:2a:d7:77:9d:82:15:e6:cc:a9:9c:26:32:
                    85:59:2d:46:47:ee:24:41:2a:70:09:86:e2:cd:70:
                    59:d5:2c:7c:00:18:3f:6e:c7:6b:7a:7c:c6:d4:9c:
                    79:a1:39:17:21:0f:42:8a:ed:ff:cc:a8:d1:c7:7c:
                    ff:7c:c4:6d:51:ae:42:cf:da:3c:e4:df:95:b6:44:
                    64:0e:a1:c4:6a:ea:85:49:bf:94:ab:e2:95:93:44:
                    21:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:AC:48:4C:2A:D3:AA:5A:A7:D6:0F:EE:B7:B0:0B:86:A7:D6:8B:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b06d46b7-7d69-3786-8c1f-e35ae7bd067a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.152.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:6d:82:3d:4e:f3:9e:84:73:1f:8e:c8:b8:19:51:86:7f:4e:
         da:96:95:42:b2:db:cb:bc:e3:75:8e:e0:64:c2:16:ce:9e:30:
         45:ae:c5:8e:16:f5:fc:82:90:8d:fc:8a:4d:b4:f2:c6:0c:48:
         fd:5e:7f:8e:cc:60:e6:fb:5d:5f:98:93:57:c9:e9:cf:1f:06:
         d4:a3:40:79:a7:5e:e5:d2:7d:55:8f:02:a3:94:0b:d9:44:7b:
         0d:e5:5f:17:34:39:c8:58:ae:d4:cf:07:ce:69:bc:78:fd:54:
         ef:ce:b4:21:d3:17:7a:d8:7e:27:34:a1:23:57:d3:f2:f2:e7:
         d8:6c:47:1b:13:fd:42:23:56:91:4e:8e:27:8c:ba:28:ab:ff:
         15:35:75:4e:dc:a1:c9:90:16:b4:0d:38:44:82:c2:a5:1d:43:
         36:ee:0d:10:1a:dd:34:9f:48:8e:1b:71:e5:96:87:25:37:2b:
         4c:94:83:7e:fb:a7:7f:d4:d5:09:5d:cd:5c:13:d6:17:a1:31:
         40:ed:5b:27:b4:0c:e9:c4:eb:df:98:c2:5b:f1:8e:cf:11:9b:
         b1:e0:30:59:11:5b:cd:ae:12:e3:d5:3c:ba:c2:98:6b:6a:40:
         05:8c:41:40:58:c0:c3:41:47:2c:af:41:8b:91:54:60:ca:3b:
         c4:ac:f3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:27:11 2023 by rpki-client on console-fra.rpki-client.org