Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/072da713-6e8e-315b-90e7-2a509af7c22f.roa
File:                     072da713-6e8e-315b-90e7-2a509af7c22f.roa (raw, json)
Hash identifier:          tefZhSyAeof3yVlZXBnhjZWx+p8WVQVw/epXoLf/ckc=
Subject key identifier:   50:A1:B5:60:7C:95:3C:51:A3:68:EB:F2:6C:FF:E5:97:C4:D2:99:05
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858403DB9A08A218E4A26179C1680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/072da713-6e8e-315b-90e7-2a509af7c22f.roa
Signing time:             Wed 14 Dec 2022 12:00:00 +0000
ROA not before:           Wed 14 Dec 2022 12:00:00 +0000
ROA not after:            Thu 19 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        16.12.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:3d:b9:a0:8a:21:8e:4a:26:17:9c:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 14 12:00:00 2022 GMT
            Not After : Jan 19 05:00:00 2023 GMT
        Subject: CN=448d69c8-edde-49b4-8020-25f44ed71a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:76:44:bc:66:d3:6b:97:42:d6:2f:f6:09:02:
                    aa:96:52:07:f1:96:ea:df:2d:46:07:6e:ba:92:93:
                    f5:4c:54:fe:88:c3:9a:79:f2:eb:a4:07:ba:07:b6:
                    7e:07:6a:e4:a5:f3:7d:37:d4:fd:ca:92:fe:fc:06:
                    86:1d:7d:fb:7b:1f:f6:50:1e:3d:65:fb:e9:23:a9:
                    31:94:29:ac:6e:6d:84:78:d9:30:ce:d8:e3:57:8e:
                    97:21:f8:03:76:a1:9c:2f:5b:7b:a3:35:06:10:5a:
                    96:73:86:ba:6d:45:ee:e4:f4:ae:f3:e1:81:51:cc:
                    db:0f:6f:a9:81:21:9d:22:97:a6:2e:f7:e3:66:ff:
                    36:2a:14:ad:24:70:b4:c5:20:65:ac:3d:4b:a8:a6:
                    e4:ff:6e:ce:28:17:5b:26:56:a4:46:59:cb:0d:b0:
                    97:8d:89:4e:5d:bb:a1:75:f5:df:a8:3b:89:00:65:
                    ff:b3:e5:d7:cf:7f:e2:8f:77:6b:7a:fa:b1:6f:fe:
                    36:bc:65:73:ab:8a:68:9a:f2:11:ce:9f:05:d6:d3:
                    fd:f7:52:dd:39:f4:50:9c:00:90:c2:2d:00:6f:27:
                    5a:6c:6c:a5:31:8d:db:7b:b6:ba:bb:8d:77:2b:eb:
                    9c:5f:60:68:33:e8:2d:25:28:0b:03:ca:eb:f0:56:
                    bf:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A1:B5:60:7C:95:3C:51:A3:68:EB:F2:6C:FF:E5:97:C4:D2:99:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/072da713-6e8e-315b-90e7-2a509af7c22f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.12.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:f6:7d:33:cb:61:48:41:9e:c3:79:58:f3:bb:91:7a:a5:ed:
         26:3d:a1:6f:2a:1e:89:f8:d9:5e:22:80:2c:8a:f5:6e:cd:17:
         5c:b6:5b:dc:19:9c:e3:30:5e:4b:6d:6f:fa:e2:39:18:79:a5:
         c0:65:77:fd:90:eb:74:da:e6:c7:d6:82:3e:3e:5e:77:b4:8a:
         8d:68:26:d9:4a:e2:8a:a4:d0:d8:e0:57:55:fa:cb:b5:c9:60:
         fe:94:d9:e0:80:e1:4d:01:a6:d8:e5:1c:5d:a3:82:f6:4f:b3:
         ae:99:7a:61:b6:df:17:cc:48:84:d0:f1:6b:ba:83:51:7b:94:
         1e:2f:9c:5d:5e:29:18:b2:c1:c1:cf:21:42:50:b9:88:f6:78:
         55:2d:b7:7e:0f:12:99:85:c4:6a:f9:45:f2:78:a1:ee:84:8c:
         de:21:87:37:fe:e8:39:67:48:45:bf:10:13:cf:41:02:26:51:
         ae:d1:d6:6e:fb:08:2f:8a:e4:d6:1b:2c:1b:b5:a3:a3:1b:a6:
         7f:54:4a:4d:8a:fb:bf:08:cd:76:ef:14:6e:2a:10:d9:3c:ca:
         ea:94:3c:c8:b7:30:07:ff:6e:47:a7:5e:a3:01:26:31:3b:7b:
         30:60:21:4e:aa:15:8a:28:3e:04:4d:75:36:ae:a0:74:09:4d:
         f9:85:aa:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----