Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f1ec59ec-54a3-30d6-96b6-47c34a84d31d.roa
File:                     f1ec59ec-54a3-30d6-96b6-47c34a84d31d.roa (raw, json)
Hash identifier:          Lbdl51QRDf7znqrHFgHXFD9/a7To3sxBQzhEuDS8ZG0=
Subject key identifier:   54:92:E2:E6:85:97:EF:A8:0F:1C:FE:D7:E7:F1:96:C4:C8:30:A2:21
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840AFE563C26879A4626D2FEA20
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f1ec59ec-54a3-30d6-96b6-47c34a84d31d.roa
Signing time:             Tue 24 Jan 2023 12:00:00 +0000
ROA not before:           Tue 24 Jan 2023 12:00:00 +0000
ROA not after:            Wed 01 Mar 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        56.234.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:af:e5:63:c2:68:79:a4:62:6d:2f:ea:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 24 12:00:00 2023 GMT
            Not After : Mar  1 05:00:00 2023 GMT
        Subject: CN=75145edb-0d54-4aa2-bfee-928213b27bbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:71:08:c2:0d:ed:ac:05:3c:07:a2:23:20:ba:
                    ac:7e:3b:34:d6:25:57:41:05:dc:8e:c7:1a:41:50:
                    f9:21:29:03:08:87:54:bb:4e:af:d6:31:2c:2b:dc:
                    29:8c:44:17:52:2b:bc:d1:8b:08:1d:2b:35:e8:e4:
                    d0:9d:86:b0:a8:8b:df:39:09:53:6d:49:ab:3a:16:
                    34:76:8c:33:bf:68:78:6e:a1:4c:65:29:63:bf:c2:
                    e5:17:0c:25:b4:a5:f9:92:47:82:2f:03:ce:7f:db:
                    98:53:24:68:7b:62:25:15:16:c9:44:b1:19:43:e7:
                    b6:1b:44:bd:5f:90:85:bc:af:58:d3:b1:38:d4:e6:
                    3e:f8:12:ee:07:fb:87:b3:e2:eb:56:d9:55:a9:ae:
                    0a:73:45:15:cf:04:e7:9d:6f:86:9e:6a:0f:54:3e:
                    21:c6:fb:d7:9d:27:f6:9e:b1:b8:81:4f:0c:2c:c9:
                    d8:08:a3:f6:db:b3:81:5d:87:d0:7f:cf:48:91:82:
                    42:da:69:29:d1:7d:31:56:30:c9:50:09:7f:cd:b1:
                    0a:f2:88:74:e7:90:c3:e1:3c:4e:3c:64:f0:9e:2c:
                    9e:09:fe:58:fe:fa:5a:48:dd:82:77:20:45:bd:3b:
                    26:19:7e:9b:0e:9b:4b:f0:d7:c7:e3:79:f4:9f:fc:
                    f6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:92:E2:E6:85:97:EF:A8:0F:1C:FE:D7:E7:F1:96:C4:C8:30:A2:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f1ec59ec-54a3-30d6-96b6-47c34a84d31d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.234.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:59:56:00:2b:4a:ed:54:63:2f:3d:11:7c:8a:aa:7f:eb:8c:
         ba:f8:21:90:70:8a:13:72:3f:91:14:db:86:0b:c5:56:36:db:
         ff:6d:17:c5:3a:58:7c:07:19:8b:bb:ed:7b:c1:cb:52:e2:99:
         b6:7c:07:9c:ba:7b:1d:12:dc:c2:ad:30:45:9d:7a:70:6a:8f:
         90:d5:f9:76:81:ac:fa:a1:61:50:22:30:05:f0:0b:24:34:51:
         e5:31:0b:52:95:17:aa:c6:7a:9b:31:4c:8f:c0:eb:32:28:c1:
         8d:2b:4b:a1:98:0b:cf:d2:b3:74:bc:6c:27:57:d3:41:81:3f:
         12:d0:91:36:6b:e2:28:50:9c:e4:16:d9:47:b7:7f:ee:ef:1d:
         27:f3:b3:78:8d:98:09:54:35:09:6c:52:30:c8:3e:70:85:e5:
         b0:5e:77:83:f5:ac:4c:97:df:4f:26:75:21:69:f5:0f:9f:1f:
         65:d1:21:7c:37:96:d4:ce:55:40:f4:9d:2d:dd:95:e4:96:e7:
         24:fe:94:2a:1c:de:57:3b:fe:92:74:cb:27:9d:4f:5b:7f:8e:
         64:7a:30:85:c5:5e:fb:e1:db:3d:67:a8:a0:ac:0e:29:61:d7:
         ad:b6:2c:e4:b5:ab:29:fe:bf:3c:cf:32:80:23:12:b5:2e:2f:
         ba:5d:5f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:32:10 2023 by rpki-client on console-ams.rpki-client.org