Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c50bd14f-2d36-3b83-a6bc-c6a6f11571c1.roa
File:                     c50bd14f-2d36-3b83-a6bc-c6a6f11571c1.roa (raw, json)
Hash identifier:          LICdEd3OrIGFhF6I23aLIjVxXB4C2NvBR/NPBEAQqJg=
Subject key identifier:   F9:B1:4C:F5:E9:75:AB:24:62:A2:CB:D6:D9:B3:28:19:B1:0C:1F:4F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858405C8573A69439CCF6E0778B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c50bd14f-2d36-3b83-a6bc-c6a6f11571c1.roa
Signing time:             Sun 25 Dec 2022 12:00:00 +0000
ROA not before:           Sun 25 Dec 2022 12:00:00 +0000
ROA not after:            Mon 30 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        16.154.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:5c:85:73:a6:94:39:cc:f6:e0:77:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 25 12:00:00 2022 GMT
            Not After : Jan 30 05:00:00 2023 GMT
        Subject: CN=ad5a2b56-a652-4fbc-85ed-cec1ca89993d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:27:8f:c0:e3:ac:05:a6:a1:41:32:ca:da:07:
                    48:e9:1d:da:6e:3e:0b:b3:73:df:b8:ef:64:45:47:
                    f2:55:bc:bb:b9:95:76:b1:10:06:e1:d2:d1:a2:74:
                    8f:d3:c2:00:dc:4b:e9:7a:74:40:9b:91:b0:b2:dd:
                    6c:9b:05:db:98:6f:18:95:87:f3:94:eb:e8:fc:52:
                    3b:89:80:08:83:c4:16:59:e6:5d:23:af:79:36:c4:
                    96:c8:3c:7a:29:36:92:f6:d9:f3:55:63:41:eb:46:
                    6a:30:af:f5:46:fb:dd:dd:0b:91:2c:0e:2d:08:d9:
                    b7:dc:9e:ab:35:12:8c:2c:69:0f:af:2c:3d:ff:c1:
                    da:b6:ce:f9:ec:aa:0b:20:c4:47:e1:cf:4a:7a:ec:
                    28:17:03:ca:ac:62:19:8b:22:81:a6:57:95:99:2a:
                    60:e0:36:c2:42:fa:bd:5e:93:2e:d8:84:e1:49:26:
                    33:fb:09:2d:38:a9:94:60:46:51:c6:f2:1b:c0:b8:
                    fe:44:e3:e4:7c:b9:34:b4:0d:ac:5b:f3:c6:a6:50:
                    69:b4:8b:12:f3:c4:59:ed:93:e2:2b:fd:fe:19:91:
                    9e:42:33:f0:e5:6c:59:93:27:04:d7:0d:75:f3:91:
                    31:36:18:90:af:a3:45:00:cb:54:e9:fe:26:6c:68:
                    bb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B1:4C:F5:E9:75:AB:24:62:A2:CB:D6:D9:B3:28:19:B1:0C:1F:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c50bd14f-2d36-3b83-a6bc-c6a6f11571c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.154.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:ab:cf:9a:34:56:15:9d:43:60:c6:59:b4:9b:0f:2c:70:0c:
         8b:d1:8a:5c:f8:93:54:ae:39:73:55:11:d2:9d:c5:63:c1:45:
         2d:e8:17:0b:03:a8:a1:e9:40:14:af:98:ea:12:d7:32:a2:bb:
         bc:78:26:fc:26:15:c9:05:22:16:4b:44:f9:45:38:d9:cb:4f:
         5f:80:6b:5c:30:e8:42:19:55:2f:66:97:05:62:34:80:a2:22:
         86:c9:4d:1c:8e:9b:cd:d5:81:c4:78:33:dc:e2:de:ae:6a:a2:
         32:f7:ca:e5:c6:8a:79:47:cd:56:57:f1:b7:92:6e:af:3f:10:
         0c:9b:29:7f:d4:92:07:2a:40:26:ca:a2:b6:94:50:88:b4:50:
         85:ad:06:b1:31:2b:eb:27:81:3b:95:d2:ec:dc:b1:01:1f:bb:
         fa:84:10:ad:46:f7:d6:b6:b5:2f:a3:90:89:c2:00:a1:a3:66:
         f3:e8:5e:30:da:29:6a:f9:03:ce:1e:d6:09:d7:c3:b7:f4:d9:
         ea:ec:16:1d:f6:a8:1d:00:53:ae:32:d4:0c:58:41:03:4e:5f:
         7a:b6:de:56:3b:5e:eb:42:aa:8d:55:43:3d:87:db:4d:ce:f6:
         3c:d1:dc:17:b3:35:44:38:1c:dd:11:bd:6f:32:21:6e:15:b0:
         95:6d:47:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:30:16 2023 by rpki-client on console-ams.rpki-client.org