Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/06aaa8f1-410c-3708-a23f-65a5be0428a8.roa
File:                     06aaa8f1-410c-3708-a23f-65a5be0428a8.roa (raw, json)
Hash identifier:          wmAZJkEZwbz1GioP/6ESe234v1Fz928qwKAj+NoF1c8=
Subject key identifier:   01:40:EE:F3:A3:59:FB:FD:58:23:B4:FB:C4:7F:41:5B:74:67:E4:2D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584041372D3FD778A394286FF980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/06aaa8f1-410c-3708-a23f-65a5be0428a8.roa
Signing time:             Thu 15 Dec 2022 12:00:00 +0000
ROA not before:           Thu 15 Dec 2022 12:00:00 +0000
ROA not after:            Fri 20 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        2620:107:4000::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:41:37:2d:3f:d7:78:a3:94:28:6f:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 15 12:00:00 2022 GMT
            Not After : Jan 20 05:00:00 2023 GMT
        Subject: CN=23eec0ef-b84f-49a1-99cd-5e69af06f7fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3a:db:21:26:fe:4a:17:7c:f3:17:70:4f:42:
                    58:4d:e0:15:fb:31:b5:ed:50:de:a4:c7:91:94:83:
                    07:db:ed:4c:9c:40:00:5d:7b:4c:60:67:9a:57:bc:
                    5b:7a:a4:62:64:c7:93:a4:75:6c:f3:98:4d:66:ac:
                    a6:9b:96:17:78:00:35:aa:58:20:e4:5e:a0:25:e7:
                    d2:af:ff:13:08:4e:29:17:2a:10:79:2b:65:fa:36:
                    2b:95:df:31:1a:68:a7:bf:cd:03:c9:cd:f3:93:8f:
                    95:47:5a:21:f7:1a:82:fd:fa:33:ca:e5:b8:02:cc:
                    09:a8:dd:e6:6e:85:0e:fd:39:1c:77:75:3d:96:97:
                    dc:e6:cd:d1:a1:d9:fb:3f:d6:72:38:9e:4f:ac:31:
                    43:dd:a3:d9:a8:d1:48:5c:03:64:f2:e9:1d:be:5b:
                    0c:fa:00:41:ce:d2:bd:42:b7:7a:7e:77:8d:96:69:
                    19:e0:d0:1e:4f:f7:b9:9d:13:8b:ce:89:2d:04:05:
                    c1:99:65:20:73:26:20:3e:97:0e:d0:90:15:1a:b0:
                    6a:9a:68:74:67:3c:b2:1e:14:83:72:01:28:ca:52:
                    bc:1f:f6:75:4b:ea:5d:80:a7:ca:4b:7b:14:a6:44:
                    aa:68:aa:37:01:29:d2:b3:aa:79:e1:30:5e:5c:fb:
                    2f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:40:EE:F3:A3:59:FB:FD:58:23:B4:FB:C4:7F:41:5B:74:67:E4:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/06aaa8f1-410c-3708-a23f-65a5be0428a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:107:4000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:be:7c:aa:1b:94:87:13:d9:b1:2a:e1:a5:c6:55:97:f4:b1:
         b6:dc:19:9e:df:70:50:f9:de:c5:04:d6:1c:6c:f6:9a:12:a6:
         5a:65:04:0d:85:e4:45:2e:05:f7:c7:74:b1:e7:3d:8c:1c:d0:
         80:7d:41:70:0d:e3:86:b3:b7:9c:48:04:fe:3c:24:0f:21:67:
         79:b2:83:3a:72:9b:80:90:bf:44:9b:d2:60:00:8d:bc:18:84:
         52:87:b3:d7:35:34:7c:e1:21:49:1f:81:30:bb:19:5f:9c:cb:
         65:1f:17:eb:e4:24:e8:90:c6:36:62:7d:9a:e7:81:ed:6a:bb:
         32:d7:fc:3e:06:91:88:99:50:67:9a:13:ce:47:e0:30:fc:69:
         5b:66:02:f5:5f:95:61:67:99:63:b3:32:66:60:15:d9:ea:e4:
         d0:70:01:9e:4d:8f:0e:02:00:65:3d:fa:60:61:87:35:d2:44:
         84:d9:5a:59:83:d2:e3:3e:8f:65:52:70:7c:41:80:db:f3:d8:
         88:46:09:26:81:16:39:31:de:45:5c:8d:08:0a:1e:88:06:26:
         48:50:3f:9b:f3:9a:0c:9d:6f:f9:d9:e9:9c:3a:70:3f:32:29:
         d5:75:93:bb:30:3a:ed:5a:7f:26:a9:01:99:bd:e2:fd:bb:26:
         c9:83:5a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----