Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f2edb306-ca9b-38de-bdcf-fcff42a9e93b.roa
File:                     f2edb306-ca9b-38de-bdcf-fcff42a9e93b.roa (raw, json)
Hash identifier:          +C3X+SkGdt5BfS6jgTa0LmlQyg/KtQC1xJtUCEVWRK0=
Subject key identifier:   61:7B:A7:AD:04:33:C4:9A:0B:59:85:03:50:5E:2C:0A:08:F9:99:B9
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840C92AB4F5FDE8DC79261E0740
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f2edb306-ca9b-38de-bdcf-fcff42a9e93b.roa
Signing time:             Thu 02 Feb 2023 12:00:00 +0000
ROA not before:           Thu 02 Feb 2023 12:00:00 +0000
ROA not after:            Fri 10 Mar 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        160.223.224.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c9:2a:b4:f5:fd:e8:dc:79:26:1e:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  2 12:00:00 2023 GMT
            Not After : Mar 10 05:00:00 2023 GMT
        Subject: CN=17216af9-2484-4cf1-86f3-6994c7603d7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:86:c1:7d:84:f2:a4:56:84:17:fc:57:f2:23:
                    41:30:cb:e0:d3:6f:d8:a2:17:57:8b:4e:ef:ae:a8:
                    c0:27:7b:35:c3:73:fb:10:c2:a3:5b:30:41:7c:bc:
                    e7:38:3b:a2:0f:cc:94:38:3d:2e:4c:07:c7:aa:2e:
                    2f:14:2e:b7:cb:1a:e3:cb:0b:cd:21:1a:1a:52:8d:
                    8d:0d:1c:61:e7:40:88:c3:ef:80:1e:97:c0:01:af:
                    9f:4d:f7:dc:d7:6a:7d:28:5d:a3:76:fa:26:bf:8d:
                    10:0c:1a:37:38:4a:6f:cd:4d:94:55:a7:a9:9e:b2:
                    78:bb:82:67:c4:18:73:be:49:e2:47:a3:2c:17:89:
                    e4:a2:3c:f6:65:28:20:31:c5:62:27:24:5d:3b:de:
                    c0:00:54:0b:ac:e8:83:00:60:11:85:cb:85:73:51:
                    b8:b7:10:19:37:a6:17:ac:8b:04:23:e9:ea:57:19:
                    7a:ec:f4:d8:48:53:1e:b4:31:c8:de:0a:99:3b:85:
                    42:f3:b9:3e:31:6e:04:23:b9:17:84:31:94:69:66:
                    d5:e3:bb:0b:2c:90:ba:5b:6b:69:9b:0b:4f:6d:20:
                    21:1f:24:4e:58:79:ad:1f:4c:a1:e3:17:4f:05:38:
                    17:57:99:5e:14:47:d6:85:1b:82:6e:1b:35:5a:75:
                    f4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7B:A7:AD:04:33:C4:9A:0B:59:85:03:50:5E:2C:0A:08:F9:99:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f2edb306-ca9b-38de-bdcf-fcff42a9e93b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.223.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:b1:c4:a8:52:e6:ec:ee:cb:ac:57:76:66:10:23:51:18:d2:
         37:52:e6:70:da:17:0e:78:a9:85:7b:b3:46:19:26:5a:75:ea:
         72:ba:ee:fc:a5:20:15:bb:b3:66:d7:43:62:5a:f1:7d:bb:0a:
         22:df:2a:9a:08:ff:84:91:c7:b9:29:d8:ab:bd:e7:42:c3:ff:
         b1:3b:81:0b:18:c9:0b:cc:36:2b:02:39:2b:28:6c:13:61:2e:
         fa:79:dc:be:3e:3e:a1:44:06:4d:b4:0b:63:17:7e:b1:99:8d:
         51:27:b2:58:88:d5:c3:c5:f5:8e:39:da:d1:1d:79:75:50:08:
         b1:f8:71:e4:44:64:b0:56:d9:bc:cf:ed:f8:60:6b:80:f3:79:
         2d:be:0d:86:12:81:bf:d1:a9:ec:84:aa:c9:01:a8:af:49:97:
         e3:0f:86:f4:9c:f4:6d:85:1a:c5:62:f7:42:31:63:5b:d8:e8:
         9d:f0:ea:81:1f:31:1d:11:46:7f:36:56:7c:ab:fe:a1:49:ab:
         9b:29:0e:56:1f:e7:9c:9b:0c:34:47:f4:58:d3:b1:9c:66:b7:
         6f:8b:00:c1:64:84:43:5d:d7:8d:f9:98:ff:47:c8:0a:31:bd:
         88:ea:11:73:9b:7c:3d:06:ab:4f:b0:6e:37:d7:27:0a:db:07:
         2a:ca:a7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:57:20 2024 by rpki-client on console-fra.rpki-client.org