Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0a510c6b-8a99-38de-8a6d-4e50a4014a03.roa
File:                     0a510c6b-8a99-38de-8a6d-4e50a4014a03.roa (raw, json)
Hash identifier:          Ag+HIxouyo/5cOgAVEgJzFudHZYLe7s/BzggRMBU8ys=
Subject key identifier:   8C:B1:32:7D:80:88:A7:C4:9E:17:2F:25:F9:85:69:D0:BE:39:17:D0
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840B063E8CF8D62D139103B7F80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0a510c6b-8a99-38de-8a6d-4e50a4014a03.roa
Signing time:             Tue 24 Jan 2023 12:00:00 +0000
ROA not before:           Tue 24 Jan 2023 12:00:00 +0000
ROA not after:            Wed 01 Mar 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        56.67.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b0:63:e8:cf:8d:62:d1:39:10:3b:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 24 12:00:00 2023 GMT
            Not After : Mar  1 05:00:00 2023 GMT
        Subject: CN=92fd2841-21a4-4460-96e0-a99d4fc23f8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ff:d5:31:84:95:3c:2f:46:ac:72:88:2d:0e:
                    d7:35:d2:e4:65:31:cb:2d:c5:d2:5d:24:7f:19:56:
                    22:4d:3c:8a:41:68:8f:0e:8f:14:d3:d1:db:16:75:
                    93:c3:4a:9d:4e:0e:d8:80:be:df:68:cf:01:12:5e:
                    a4:30:08:13:12:f3:26:58:5f:24:f7:1f:31:b2:fe:
                    94:9a:1d:36:54:65:04:fb:49:f1:3c:3c:1a:21:23:
                    f2:8f:9d:24:ec:36:03:12:fe:f9:dc:cc:bd:ca:d8:
                    0e:fa:b7:c5:8f:4f:cc:58:62:14:1d:c3:64:6c:e1:
                    4b:42:b4:72:49:4a:6d:ae:7a:93:9c:4d:5c:c3:a1:
                    19:cc:65:fd:16:0e:78:7d:0c:32:91:0f:9f:09:bb:
                    97:7b:a5:bf:31:8b:3f:7f:48:33:0d:1f:99:0f:1d:
                    d8:4c:e7:e8:dc:6a:12:d6:7d:4d:2c:4f:d6:96:3b:
                    f0:99:94:ba:14:73:35:81:ec:53:87:6d:33:3a:cf:
                    5f:ac:fc:5d:5e:c6:d4:36:a3:ec:dc:d5:6c:fd:4a:
                    49:c0:b0:9d:6a:f7:f9:b2:c5:94:2b:ad:d3:52:e6:
                    4f:cc:59:b7:86:ad:b1:5d:49:67:71:72:ea:21:76:
                    c8:98:44:f9:2f:57:af:f4:47:80:a6:a2:3d:64:f2:
                    25:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B1:32:7D:80:88:A7:C4:9E:17:2F:25:F9:85:69:D0:BE:39:17:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0a510c6b-8a99-38de-8a6d-4e50a4014a03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.67.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:61:b9:e5:18:37:6a:bd:ee:62:93:9e:db:52:cb:b8:7f:73:
         c2:93:38:31:df:d4:7b:94:1c:32:bc:08:a6:52:f3:5b:3f:0e:
         e4:ae:e9:9d:c9:92:ba:3a:b2:66:83:95:42:9b:9f:fd:0f:02:
         48:63:d7:4a:14:1a:5d:16:5f:7e:51:5f:53:96:b6:bb:a1:0b:
         e4:de:3f:20:87:49:2a:c8:50:ed:3f:dc:20:63:b9:b9:36:0d:
         e3:dd:3a:df:e0:71:2a:66:e6:bf:96:ab:c2:93:32:16:be:44:
         eb:e7:22:ee:b7:7d:77:14:86:2a:5b:15:d3:f0:ee:ac:f0:1d:
         55:60:4d:18:3d:76:ca:36:12:3c:06:3e:6c:32:49:11:bd:5f:
         8f:6e:bd:1f:03:dc:0c:70:8b:f2:81:49:51:3e:62:15:6e:a0:
         bd:8f:63:a7:64:52:9b:4f:2e:1f:13:2e:dc:e5:18:40:1b:4f:
         f6:ef:02:43:7c:22:3d:e8:b7:51:ba:b7:aa:9d:ce:10:24:d1:
         0b:c1:e3:9e:c9:28:6b:69:b5:b4:12:96:cd:43:ee:46:0b:89:
         1e:ad:57:1a:06:51:d4:a6:0f:b4:6b:49:6a:4e:22:33:e8:35:
         88:13:1a:48:22:60:84:d6:d4:c4:c0:ec:ee:23:95:d7:fd:4d:
         fa:d8:68:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----