Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/100d5b22-a0b5-3ea0-94e1-35a930a471e6.roa
File:                     100d5b22-a0b5-3ea0-94e1-35a930a471e6.roa (raw, json)
Hash identifier:          sIhcW6rtNnqTWo7MB3zUpyt2/GXNbyXsKvtQHZw0vG4=
Subject key identifier:   BB:BB:78:D4:CC:36:96:11:C7:FE:EB:F4:80:A4:96:AB:CE:EE:DF:A7
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858407B1D79F9D71DA3ABE1D88A40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/100d5b22-a0b5-3ea0-94e1-35a930a471e6.roa
Signing time:             Thu 05 Jan 2023 12:00:00 +0000
ROA not before:           Thu 05 Jan 2023 12:00:00 +0000
ROA not after:            Fri 10 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        160.223.224.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:7b:1d:79:f9:d7:1d:a3:ab:e1:d8:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  5 12:00:00 2023 GMT
            Not After : Feb 10 05:00:00 2023 GMT
        Subject: CN=6edba9fa-5a01-4231-be43-adc9a2f828dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7d:87:a5:3d:2b:bb:80:f3:46:7c:88:ba:48:
                    c1:bd:f6:32:86:ec:a1:10:0e:5a:f4:0d:1a:f9:ae:
                    62:57:97:84:a6:5b:fd:b7:5b:96:15:0d:56:a7:52:
                    ff:71:15:63:87:b7:c5:9c:87:e1:59:03:49:29:be:
                    c2:95:2a:3e:fd:6c:62:fc:05:79:a2:18:8b:0a:04:
                    e7:c0:06:ca:7d:2b:2e:9b:2a:57:5d:c4:70:bd:38:
                    71:e1:50:0f:71:75:f6:d9:fd:77:3b:e1:b3:56:74:
                    b4:f0:31:46:c6:42:b0:3b:f6:d2:ec:e2:cf:52:c7:
                    22:7a:73:e4:94:ff:e3:bc:25:b0:6b:c9:d0:f0:62:
                    87:a4:de:78:d9:2f:e0:75:f9:14:aa:01:4a:67:a3:
                    d8:1d:59:d8:45:bb:c0:5f:d7:0c:1a:64:4c:69:22:
                    14:ee:0e:65:73:4f:83:fc:e5:90:40:2c:ca:85:a2:
                    a3:27:1b:44:b5:45:0f:16:51:8e:d0:96:d6:2d:38:
                    29:5d:6d:26:e1:dd:41:1e:bc:fd:fa:1d:bf:fe:f3:
                    ec:d1:e5:64:ec:df:1b:f7:bd:d9:10:88:2e:ab:fb:
                    83:13:5b:43:65:0d:72:78:c6:bc:8b:92:0d:d2:de:
                    9e:6a:d2:ed:72:21:d5:54:9b:3c:b8:7f:e0:9f:82:
                    91:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:BB:78:D4:CC:36:96:11:C7:FE:EB:F4:80:A4:96:AB:CE:EE:DF:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/100d5b22-a0b5-3ea0-94e1-35a930a471e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.223.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:4e:ff:fd:fb:cd:23:c7:9e:77:c8:da:8d:11:02:df:d1:8d:
         46:5b:7b:94:df:9c:5d:6c:ad:eb:84:c2:46:7b:34:b4:b2:02:
         eb:78:83:dc:41:23:70:2f:7b:c1:5d:73:34:53:8c:b6:b6:e5:
         86:65:4c:55:46:d6:1b:56:d6:04:74:4e:f2:de:d2:9a:46:67:
         de:51:c3:f7:2c:30:c3:26:9c:de:c3:97:2f:5e:f7:f6:e6:ec:
         9f:ac:9f:b6:99:d3:de:ca:be:21:13:ea:f6:74:76:65:5d:aa:
         c2:97:cf:ca:6d:13:da:02:32:23:12:55:a6:d6:5d:dd:f1:7c:
         64:6a:c3:e1:2a:07:e8:62:c9:dd:12:d7:e8:16:c2:3d:be:1d:
         d8:f5:82:a9:08:67:fe:02:1a:83:5b:db:5e:ff:ee:d2:31:a9:
         35:9b:d6:61:14:79:be:c6:af:59:e8:f6:c7:6a:f2:c7:ef:b3:
         63:a4:2c:8a:de:50:bb:dd:ac:2c:8d:a3:36:b2:6c:30:3d:eb:
         6e:a0:c0:f7:c3:ba:96:8e:63:4f:bf:f4:43:83:06:80:02:ef:
         fb:b0:8f:ba:22:7f:6c:24:a6:86:81:6d:9c:9c:6f:c6:f7:aa:
         22:79:1e:dd:78:e0:a5:08:96:bb:4c:da:ec:5c:ba:39:0c:0f:
         c4:a0:24:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----