Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d0b21887-dd5b-3c02-9def-c86f6f7f82bf.roa
File:                     d0b21887-dd5b-3c02-9def-c86f6f7f82bf.roa (raw, json)
Hash identifier:          oFC/B5vCOhZaiQmD9gDnPO8bchDUM4khmpnKsTBiNZ4=
Subject key identifier:   1E:F9:5D:2D:FC:9D:0E:86:06:BA:B2:95:E3:0A:3B:D9:8D:16:7F:3C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DB4CABD8DB5938E5CA5905D40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d0b21887-dd5b-3c02-9def-c86f6f7f82bf.roa
Signing time:             Mon 25 Apr 2022 12:00:00 +0000
ROA not before:           Mon 25 Apr 2022 12:00:00 +0000
ROA not after:            Tue 31 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        166.117.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:b4:ca:bd:8d:b5:93:8e:5c:a5:90:5d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 25 12:00:00 2022 GMT
            Not After : May 31 04:00:00 2022 GMT
        Subject: CN=200dda42-aee1-4b38-989b-54e94eb3449b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d2:27:e5:29:17:4f:61:5f:45:bb:2f:8d:4c:
                    cb:87:da:ef:ff:da:33:95:09:1a:da:c2:74:95:37:
                    19:41:48:32:7c:69:2d:51:5b:d6:4a:2e:b9:08:9d:
                    70:7e:5c:83:b0:ee:8d:4b:39:07:72:f3:67:76:03:
                    0a:00:6b:da:54:e1:0d:36:95:c6:de:ce:9a:1b:e1:
                    41:e1:26:60:1f:38:cb:b3:ed:6c:88:3e:1d:e3:48:
                    01:21:1d:fe:95:73:73:24:c4:67:cb:60:4e:f9:00:
                    9b:d1:85:11:0c:85:80:7d:bb:73:52:ba:f9:d7:9c:
                    1e:a8:bb:35:01:98:64:88:1f:e8:15:bd:59:3d:d5:
                    74:89:91:e3:5d:c1:aa:6e:0c:08:f1:86:dd:30:22:
                    e2:a6:82:2a:7d:40:c0:72:55:ae:4f:d8:2f:f3:99:
                    70:8c:9c:e7:d9:f7:4b:2d:51:21:93:c0:e3:06:ff:
                    9b:06:2c:75:83:f7:1b:44:f4:96:df:42:9b:7c:90:
                    e0:13:60:50:01:2f:17:de:c2:a2:90:eb:e8:8b:9c:
                    10:11:4a:bd:b4:ff:c9:24:f5:da:26:7d:eb:41:7f:
                    80:f9:ad:3a:3f:30:aa:0b:7d:38:4f:b4:a0:c7:ca:
                    76:57:e6:f8:31:54:03:20:e7:5d:de:be:ff:4e:66:
                    e4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F9:5D:2D:FC:9D:0E:86:06:BA:B2:95:E3:0A:3B:D9:8D:16:7F:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d0b21887-dd5b-3c02-9def-c86f6f7f82bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.117.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:73:b7:c3:54:ca:35:40:a2:67:fd:86:52:24:bc:a3:bc:49:
         06:5f:9a:bf:67:ec:a0:6b:20:d3:1a:c3:34:86:49:38:54:69:
         dd:ce:79:9f:99:15:49:0e:50:41:87:50:c9:92:ae:6a:6f:e8:
         c6:3d:b5:dc:1c:9f:40:a6:2f:6f:d6:d0:be:90:b6:83:49:3f:
         3b:ef:dd:de:fc:1b:25:2c:04:b8:51:4c:21:97:54:51:26:de:
         55:b5:b7:36:6d:8f:60:bf:96:f1:22:6b:86:e0:45:35:64:75:
         cd:0f:8b:1d:8a:eb:f2:5b:cf:5c:76:de:7f:e5:fd:f9:59:bb:
         80:6a:36:0d:d3:53:72:7e:16:e8:d7:69:35:87:86:67:61:af:
         a7:52:ba:2c:37:97:6f:b3:62:e8:64:54:a7:7a:93:78:8d:c1:
         95:45:e0:fe:a4:b7:f9:29:d4:02:2d:c8:24:d2:ff:66:41:1a:
         ea:22:58:63:52:95:f8:0d:7f:50:ba:b9:5d:46:5a:b3:c2:e0:
         0f:e3:90:17:2d:6a:3a:0a:e5:5e:eb:95:d1:df:e3:63:a6:89:
         2e:11:71:c3:4c:80:b8:93:9d:a3:65:3a:f6:04:67:5f:a4:d4:
         89:98:4b:0c:67:38:da:21:23:6f:af:a9:3d:87:3a:e2:68:bb:
         cf:cb:23:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:28:25 2023 by rpki-client on console-fra.rpki-client.org