Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f608b08f-9b42-3e46-823f-34c3bae3b168.roa
File:                     f608b08f-9b42-3e46-823f-34c3bae3b168.roa (raw, json)
Hash identifier:          gAhUVjrw+m2CwBTFmIL3v9jOiho42XpY19mrSoxe98I=
Subject key identifier:   23:AC:A2:4C:0C:E9:B8:89:4E:F6:14:25:9C:FA:08:2F:2B:4A:8D:4B
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584085FDBC1C24335FD166FA8180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f608b08f-9b42-3e46-823f-34c3bae3b168.roa
Signing time:             Mon 09 Jan 2023 12:00:00 +0000
ROA not before:           Mon 09 Jan 2023 12:00:00 +0000
ROA not after:            Tue 14 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        151.148.16.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:85:fd:bc:1c:24:33:5f:d1:66:fa:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  9 12:00:00 2023 GMT
            Not After : Feb 14 05:00:00 2023 GMT
        Subject: CN=4317da6a-ad8f-4a5d-b5ba-71c7cf084728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:10:8f:eb:ff:f1:a5:0f:12:8b:d6:8e:05:cc:
                    a4:5e:e7:a0:05:fa:c3:b2:54:70:95:be:db:3e:ca:
                    2f:49:18:97:4b:a2:d9:56:7e:71:7f:12:f6:11:a7:
                    ba:27:b6:b5:0f:bd:46:18:20:e4:93:84:69:21:37:
                    0d:58:64:7a:10:f2:c7:5e:81:e1:86:e1:e8:38:22:
                    c6:f4:74:27:f5:dc:b4:33:0a:0b:57:87:11:17:5b:
                    fd:d5:68:09:16:9d:36:3d:6c:05:46:d9:6d:29:b2:
                    8b:37:8d:97:94:62:29:b6:75:44:c0:1b:f3:b0:f3:
                    7b:81:ac:b3:4e:ec:9c:4e:e9:26:c5:f8:8f:b8:8a:
                    eb:7c:e2:b7:22:6d:80:aa:35:93:97:f1:3f:0a:66:
                    38:b5:7c:aa:ba:0f:01:22:15:5f:e0:51:e2:ac:f2:
                    87:ba:d3:af:93:c7:89:41:a6:5c:ea:5d:ba:e3:ec:
                    46:ab:ad:78:e8:ab:95:53:cd:8c:65:25:fc:6c:80:
                    e8:55:82:13:85:80:48:72:1d:f7:23:22:34:e3:96:
                    a0:76:04:1b:6e:18:83:94:f5:b8:83:34:47:74:cc:
                    70:c1:d3:5d:2d:5f:70:ce:3d:ce:3a:9d:e3:16:16:
                    86:3e:a2:1b:d2:47:b8:54:f3:93:37:0f:f4:f3:1d:
                    cd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:AC:A2:4C:0C:E9:B8:89:4E:F6:14:25:9C:FA:08:2F:2B:4A:8D:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f608b08f-9b42-3e46-823f-34c3bae3b168.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.148.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:8c:57:7f:d4:ea:b4:5b:b4:20:e0:72:2f:85:87:ca:c3:d5:
         6f:ec:aa:41:ec:bd:9b:6f:78:3a:60:64:1a:88:30:54:ce:12:
         6d:a8:8a:89:59:78:3e:45:36:25:88:67:51:0c:c1:13:f5:46:
         ea:48:19:97:2b:44:42:47:a7:2f:02:39:cb:85:8f:f9:17:b6:
         38:f0:72:d8:39:08:17:6e:1b:91:44:90:65:24:9a:75:e8:36:
         d9:8a:ed:8d:73:29:31:9e:e3:b6:00:5a:91:3f:20:dd:0c:46:
         0c:5d:77:c2:54:d2:75:5e:58:02:ab:2f:e0:9d:0d:85:2a:2c:
         b2:d3:a0:55:77:02:32:74:50:7f:85:95:ea:ee:39:5a:4c:99:
         9d:15:2f:96:b1:d6:8b:81:93:42:73:43:ad:32:42:6a:e7:7a:
         5e:3d:62:92:6d:08:bd:76:8f:86:55:97:d4:a1:b4:aa:bf:59:
         75:7e:00:02:ed:63:7c:f8:98:cb:d5:37:f7:6c:7e:0c:86:b4:
         10:20:f9:74:80:42:c7:30:96:1e:33:1a:bb:b8:69:b1:dd:d2:
         e3:92:27:fc:30:e0:fb:6c:6d:9b:89:3a:ac:92:fd:78:4f:af:
         a4:82:d0:d7:ba:5c:5b:0e:99:0e:c4:30:cd:be:36:1a:73:89:
         fa:84:53:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:57:26 2024 by rpki-client on console-fra.rpki-client.org