Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d07601d2-175d-38ea-9866-3e7b44288257.roa
File:                     d07601d2-175d-38ea-9866-3e7b44288257.roa (raw, json)
Hash identifier:          MBiOOEIxsl4+KaRlqNyrGQuqJDX7k4USqmaRaPair6Y=
Subject key identifier:   3A:CF:D4:CC:53:45:E6:A9:70:F0:E8:25:4A:09:9A:7F:EF:7E:C6:15
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840B97DEAB77153C36745741340
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d07601d2-175d-38ea-9866-3e7b44288257.roa
Signing time:             Fri 27 Jan 2023 12:00:00 +0000
ROA not before:           Fri 27 Jan 2023 12:00:00 +0000
ROA not after:            Sat 04 Mar 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        99.150.0.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b9:7d:ea:b7:71:53:c3:67:45:74:13:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 27 12:00:00 2023 GMT
            Not After : Mar  4 05:00:00 2023 GMT
        Subject: CN=560af665-f5e2-4244-9e7a-d8171eeb4536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d6:a2:b4:2e:79:c7:54:62:ca:da:cd:97:90:
                    bc:cd:c9:17:27:70:52:c6:b7:76:95:74:61:74:09:
                    08:13:9d:bc:3c:e4:6b:b1:37:b7:7e:06:b3:00:5f:
                    62:85:14:5a:bf:27:1e:bd:72:0c:70:2c:e7:0e:4e:
                    ba:e1:c8:9d:00:f7:d9:cb:91:57:2b:3d:f5:6f:b4:
                    8f:1d:0f:e9:cb:12:79:aa:1d:49:b9:90:ce:1f:37:
                    d4:8c:a0:ea:38:b5:c9:3a:b2:08:f6:42:23:8b:cb:
                    be:1e:a7:5c:18:94:2d:d6:97:66:a3:39:dc:df:a0:
                    60:4f:96:37:2f:c9:c5:11:10:f1:1e:97:7b:3b:5e:
                    2e:13:aa:b8:be:0a:62:3c:83:e2:6a:74:48:b6:7d:
                    be:51:26:53:38:59:64:ac:16:35:b0:0d:84:5f:7c:
                    02:a9:5d:7f:64:39:b8:53:a0:eb:59:9d:2c:04:c8:
                    9a:2e:6e:b7:52:c8:c5:50:20:d2:4b:18:1b:38:c5:
                    d9:ae:19:3b:03:a7:57:2b:33:ac:3a:15:35:1c:c0:
                    5b:31:1c:18:97:fb:65:3d:a4:d1:10:88:0b:93:d4:
                    0a:99:f9:19:11:bc:57:c3:bb:f3:0d:a8:9e:a9:66:
                    83:c4:94:90:1d:28:5d:d5:cb:57:ad:36:3d:00:0a:
                    fb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:CF:D4:CC:53:45:E6:A9:70:F0:E8:25:4A:09:9A:7F:EF:7E:C6:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d07601d2-175d-38ea-9866-3e7b44288257.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.150.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:07:93:e6:86:a4:d4:9b:34:ec:38:ba:5b:ce:a7:b3:06:10:
         bc:bc:11:ac:80:44:fd:58:bc:27:57:17:47:a0:c4:8b:35:ce:
         30:0c:c9:07:45:93:0c:40:e2:b5:c7:9e:9d:0f:82:0a:32:e0:
         63:51:61:17:6c:61:dc:8f:1f:8a:aa:b4:07:04:40:da:ec:a8:
         a8:75:eb:4a:a1:5d:b2:de:6d:a4:84:3b:ee:84:ee:e4:7d:a3:
         2a:a0:ba:16:64:01:72:a1:90:59:2c:e5:8d:a0:ed:20:0c:c1:
         e7:7f:e7:34:7f:99:06:4f:4c:85:e0:9b:8f:fb:77:3e:7d:55:
         e5:9a:3d:66:bd:7d:ec:5f:5c:e4:25:dd:93:5b:28:00:b9:0f:
         eb:d4:b1:b7:3b:c0:37:0a:93:0f:e3:8c:53:e1:d4:1b:ac:8b:
         c4:84:78:be:68:08:a4:60:40:74:a1:ed:1a:21:59:5d:27:4a:
         65:af:ac:d2:72:06:fd:49:de:b3:fa:bb:18:ea:87:7a:f1:7a:
         05:a5:e8:8b:0e:60:1c:b8:1b:fb:a5:33:29:ad:20:fb:43:5c:
         e1:1b:08:a6:3c:ba:41:62:60:d5:a0:e8:9d:57:97:c3:e2:88:
         a5:21:1c:af:f2:f2:dd:c0:c4:5b:9c:67:33:31:fc:94:de:5f:
         09:c0:a8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:28:25 2023 by rpki-client on console-fra.rpki-client.org