Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/013c9782-a61f-31d5-b7e9-a1d0df9842a8.roa
File:                     013c9782-a61f-31d5-b7e9-a1d0df9842a8.roa (raw, json)
Hash identifier:          KtLaiy7K/cieCado9voaiyQ4iIyi3IXcjMa8JzSJXQ4=
Subject key identifier:   5A:BC:59:C9:47:AF:BE:EC:5D:6E:7F:46:F9:30:FE:99:BA:D8:86:E8
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E4683F6D3579446AB7E504500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/013c9782-a61f-31d5-b7e9-a1d0df9842a8.roa
Signing time:             Fri 17 Jun 2022 12:00:00 +0000
ROA not before:           Fri 17 Jun 2022 12:00:00 +0000
ROA not after:            Sat 23 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        162.85.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:46:83:f6:d3:57:94:46:ab:7e:50:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 17 12:00:00 2022 GMT
            Not After : Jul 23 04:00:00 2022 GMT
        Subject: CN=01525717-b42b-4b46-bc4c-aa74111504f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ce:59:2d:10:b3:8a:46:78:56:1c:23:9b:d0:
                    66:b0:1d:44:ac:a7:fc:16:61:95:7d:e0:19:88:e0:
                    43:15:0f:33:d4:e0:a9:fd:7c:a1:70:50:ec:7a:08:
                    3b:75:13:38:92:4d:c4:4b:19:d9:74:e6:9c:22:c3:
                    a8:72:a4:ea:96:8e:23:9f:f8:2f:6b:35:a4:bc:66:
                    c6:94:a9:c6:89:1a:a0:8c:3f:78:40:e2:23:6b:6e:
                    54:c9:5e:88:fe:71:29:3e:3d:31:c0:9c:1d:82:23:
                    53:0f:4b:24:e6:39:97:cb:97:5a:9e:a4:23:e5:fc:
                    7a:67:eb:af:bf:51:27:47:2f:0c:41:70:8e:08:f3:
                    9e:74:c1:53:73:aa:b9:de:38:bd:0f:93:17:9f:1b:
                    d6:cb:da:c1:18:8b:e7:bc:d4:5c:e8:81:b5:e6:7e:
                    79:4e:c2:a9:c4:a7:34:ce:c6:5f:ce:77:f4:22:d9:
                    78:a4:69:71:c8:72:60:a7:22:c3:f0:cf:81:60:98:
                    21:8b:b4:b5:73:94:61:ce:4c:34:a7:7c:ff:8d:5a:
                    15:48:be:e6:ff:bc:85:7e:0f:ac:7f:86:63:21:c2:
                    7a:94:b0:0a:73:a2:fa:31:96:5f:a0:e8:93:77:de:
                    1b:d4:e7:2f:cb:2a:11:c9:10:67:5a:67:74:11:86:
                    bc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:BC:59:C9:47:AF:BE:EC:5D:6E:7F:46:F9:30:FE:99:BA:D8:86:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/013c9782-a61f-31d5-b7e9-a1d0df9842a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.85.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:b5:a4:e4:c0:6c:cd:5c:ce:1d:44:7b:b2:e5:8b:c9:a2:be:
         70:9f:24:f7:df:82:5f:2d:35:7e:f3:93:41:2c:88:c7:20:15:
         55:6a:7f:14:40:ce:3d:f5:ef:4e:51:be:8a:41:ae:e7:ff:d2:
         d5:34:08:d5:b5:46:f2:48:71:81:8a:a4:72:c1:bf:28:58:b0:
         bc:79:0e:cf:62:73:8b:f0:e3:5d:4d:72:f8:89:6d:5c:c6:11:
         b8:11:e4:50:e0:c8:aa:6e:ad:b7:b3:12:9a:8a:0f:cd:2e:1a:
         82:3e:e0:f2:de:0e:18:fc:c6:f2:b4:d0:0e:a0:10:1d:90:02:
         ce:b4:3a:e8:1f:31:7e:b2:85:2c:67:f1:4a:de:81:78:0a:fe:
         41:84:9e:35:b8:ae:81:75:2b:4b:e6:cd:ea:31:9c:62:be:3b:
         52:6d:0a:b8:df:7c:15:c9:0a:39:3a:c5:b9:37:d6:f5:81:4c:
         ab:c9:ef:ba:e4:1d:f2:6d:d2:3b:d5:4e:97:7f:2e:f6:d3:bc:
         02:4b:4c:42:0c:c4:0e:88:2f:b0:ea:f6:83:17:ee:d5:ca:1c:
         3e:10:28:04:c0:1b:3a:ae:11:0b:df:3e:8a:93:4c:35:f8:a9:
         5b:2e:a9:d1:d4:f5:41:1c:7d:a6:73:36:9d:99:13:57:f6:8a:
         57:92:74:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----