Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/11189fab-9b37-30c7-8be1-a382d7452b04.roa
File:                     11189fab-9b37-30c7-8be1-a382d7452b04.roa (raw, json)
Hash identifier:          J4jkm+fHzO6ZUxUvMgYnZfl4EVORRSWRdV1wX45maWk=
Subject key identifier:   20:A3:40:91:60:D4:83:15:69:14:03:CA:29:49:3D:7B:1D:BA:1F:4A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F4490160445A6D5DE26542A80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/11189fab-9b37-30c7-8be1-a382d7452b04.roa
Signing time:             Fri 16 Sep 2022 12:00:00 +0000
ROA not before:           Fri 16 Sep 2022 12:00:00 +0000
ROA not after:            Sat 22 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        149.44.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:44:90:16:04:45:a6:d5:de:26:54:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 16 12:00:00 2022 GMT
            Not After : Oct 22 04:00:00 2022 GMT
        Subject: CN=8ed8c5fa-b262-4d59-a308-d33af4f63cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:23:e6:de:37:a4:0d:e8:9c:cf:9f:7c:f0:c1:
                    88:53:3b:0f:e6:29:1c:51:44:f6:1e:52:73:ed:d5:
                    91:f8:29:d0:7f:2c:0b:92:31:ed:34:c9:3f:9e:9b:
                    fe:c4:e3:90:b3:68:ba:5a:96:dd:28:38:31:8f:32:
                    ac:b4:6b:71:3b:e3:96:d3:4b:98:57:b1:f5:00:19:
                    9d:65:94:31:0d:a2:67:fc:d1:51:a1:e7:e1:9f:4e:
                    6c:1e:26:dc:ef:24:f3:2f:6a:74:ab:5c:6d:4f:67:
                    93:e3:99:de:39:a3:f4:93:49:e6:d4:05:a8:ee:2a:
                    48:73:ab:70:c1:32:ae:b9:5c:df:5a:97:fe:36:13:
                    10:1a:fe:8d:ac:eb:5c:3b:cb:9b:63:79:92:b0:31:
                    10:bb:9a:f6:d9:f8:70:ef:13:b8:a9:4e:d2:ea:3c:
                    9b:39:21:67:6f:77:2f:46:8a:ca:07:3f:5c:83:c8:
                    90:98:2f:15:71:4e:62:f8:d6:ac:12:2e:86:45:d1:
                    74:10:fe:c2:95:50:11:20:4d:d9:74:2c:92:fe:c2:
                    3a:16:26:56:93:7f:de:66:14:b8:1b:d7:e8:b5:b9:
                    9c:6a:e7:a1:fe:6a:fd:57:4c:93:18:84:a6:d7:ab:
                    56:c7:d6:1d:40:e8:00:e5:0d:69:f1:6a:63:4e:06:
                    5a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A3:40:91:60:D4:83:15:69:14:03:CA:29:49:3D:7B:1D:BA:1F:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/11189fab-9b37-30c7-8be1-a382d7452b04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.44.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:7d:21:3b:97:22:cb:d8:79:17:65:68:00:82:d6:b8:0e:16:
         90:c5:ed:e1:9a:ab:24:d6:fa:19:2a:3a:1f:ea:79:90:83:12:
         d8:70:d2:5a:ed:df:15:66:a9:49:a1:f5:95:12:b5:1c:4f:7a:
         02:0f:03:04:32:cd:30:c7:e1:56:8b:40:71:99:c0:dc:73:5b:
         6c:96:5c:e6:61:ec:30:00:2b:d9:7f:c9:39:e0:ba:4b:f5:3e:
         69:d9:72:a5:82:8e:b4:17:f1:ac:a6:7a:6a:da:48:6b:bd:31:
         85:45:69:54:c0:95:ff:45:50:27:0c:c0:ca:cd:42:27:0d:29:
         af:6f:53:20:8f:0e:f0:9d:c1:bc:ca:7d:ee:0f:79:e5:89:2e:
         86:b9:9c:f5:ca:dc:a8:08:ce:ee:6a:98:8a:9d:da:ed:a2:bc:
         4c:f2:09:b9:23:c1:c0:ad:18:60:bb:28:f7:35:03:69:66:ab:
         0c:de:bc:fa:f1:d1:75:ad:0c:c7:15:1c:ca:8d:51:b1:f9:1f:
         8d:f8:ca:40:f0:41:bb:2f:63:4d:2c:94:25:3e:86:c1:2d:68:
         a5:f1:ef:3f:a3:8c:41:f8:cd:27:0e:95:40:95:96:30:0d:43:
         07:a1:a7:81:38:32:cc:ae:10:67:81:b0:4c:e2:28:f7:7f:11:
         7b:98:f1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----