Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d9167755-53a3-3b01-83c0-551d8ce76b82.roa
File:                     d9167755-53a3-3b01-83c0-551d8ce76b82.roa (raw, json)
Hash identifier:          +CgzFGM3C+ls54haRPB+UbT2iFNGwZ1ZmXxt5qDpgKY=
Subject key identifier:   FC:A3:47:5A:78:19:58:15:AF:CE:A7:7D:F8:46:FC:CF:82:FC:C6:AE
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840B9DEF0AE48497C1FE9D0FCA0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d9167755-53a3-3b01-83c0-551d8ce76b82.roa
Signing time:             Fri 27 Jan 2023 12:00:00 +0000
ROA not before:           Fri 27 Jan 2023 12:00:00 +0000
ROA not after:            Sat 04 Mar 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        198.99.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b9:de:f0:ae:48:49:7c:1f:e9:d0:fc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 27 12:00:00 2023 GMT
            Not After : Mar  4 05:00:00 2023 GMT
        Subject: CN=79b61005-a52d-4868-9408-a8be929e9469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8d:5a:05:a1:fc:1d:3f:24:c8:02:dd:d6:4a:
                    19:a7:78:6f:93:2b:b3:74:5d:18:0a:26:19:4c:a9:
                    70:93:a3:21:73:54:ac:f9:ce:5d:51:29:94:b5:de:
                    3d:88:59:c1:da:83:f2:d3:d6:f4:3f:8c:15:bc:d7:
                    18:dd:7f:36:a1:6e:0f:00:b1:78:71:2a:57:57:19:
                    91:61:43:79:e1:6a:70:62:ea:ef:04:8e:bf:1a:e5:
                    db:67:7e:d7:65:e0:b2:df:f8:a3:50:db:a4:f5:90:
                    2b:e1:cc:18:db:71:91:4e:a2:f0:d6:bf:6d:14:9f:
                    4b:42:b9:e0:b0:fd:35:f2:0d:31:ac:9b:03:30:b5:
                    9c:cc:37:bd:cd:13:58:b2:29:1b:db:82:fc:fd:f2:
                    61:35:5a:b4:c5:a2:fd:72:f8:51:84:0e:7a:9e:f2:
                    43:fe:b6:78:c6:b0:b3:3c:e6:0a:55:9d:d7:83:5e:
                    36:8d:f4:9a:51:85:26:e2:7e:7d:fc:d7:30:16:3e:
                    a4:5c:01:05:94:24:1d:e8:04:66:0a:e6:84:58:f2:
                    37:42:9d:de:85:d1:e7:ad:60:48:51:53:11:34:d9:
                    02:e3:09:cb:fa:d0:70:bb:06:03:bc:9b:70:32:5e:
                    00:35:67:bb:eb:58:f4:ae:fd:b0:00:37:d3:a7:2c:
                    d0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A3:47:5A:78:19:58:15:AF:CE:A7:7D:F8:46:FC:CF:82:FC:C6:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d9167755-53a3-3b01-83c0-551d8ce76b82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.99.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:91:a0:fd:e8:64:c0:77:20:9b:cf:cb:b3:da:08:41:58:a6:
         85:bd:4f:11:cc:a4:f8:06:83:2d:c0:26:39:1e:c6:e6:70:56:
         29:25:2a:c9:3b:ff:d8:5b:eb:fa:a0:05:da:1b:2c:95:ec:ce:
         84:d6:4a:f1:32:1f:85:34:10:8e:6e:03:39:86:64:09:61:ec:
         08:ee:8d:5b:5c:87:23:f8:ff:d0:39:4d:e6:77:be:c3:7b:43:
         9d:52:2e:5b:4f:5d:b8:78:3c:4c:7d:2f:73:b7:8f:df:ae:5b:
         eb:95:e0:af:a8:8d:db:98:f5:75:71:36:0e:8e:d8:7f:58:31:
         ee:c9:f9:37:2b:67:18:ee:6e:b0:99:93:d6:88:2c:8f:a2:fc:
         4a:fb:6f:a0:ea:29:c5:3d:3b:d0:8d:d2:d4:18:1b:89:11:a0:
         7a:2a:f3:63:b6:4a:14:05:ce:79:c3:96:a7:78:06:5c:29:0a:
         db:18:b3:01:5d:15:7b:a2:1e:db:29:7d:20:5c:ad:dc:bc:bc:
         8e:eb:33:67:1b:23:0c:b8:7b:35:dc:6b:07:ac:bd:0f:2f:24:
         c9:ec:13:71:0c:c0:b5:ba:a1:8f:17:d6:f3:61:b7:73:2e:81:
         78:b3:91:22:78:f2:c4:d5:52:57:d9:2c:69:f6:62:5c:5f:70:
         be:68:0c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:28:43 2023 by rpki-client on console-fra.rpki-client.org