Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1c59f89a-81ca-353b-a35b-e0b1f608eade.roa
File:                     1c59f89a-81ca-353b-a35b-e0b1f608eade.roa (raw, json)
Hash identifier:          StLhwBdGNDJSUMPJXxgCFdzYmfCRebYkTmTVCwnYvkI=
Subject key identifier:   10:FB:17:03:46:2F:BC:74:DA:5F:9A:1B:BF:68:D6:55:FC:22:DD:A1
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858404B3DB5FFFF5E4ABA87D713C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1c59f89a-81ca-353b-a35b-e0b1f608eade.roa
Signing time:             Mon 19 Dec 2022 16:54:08 +0000
ROA not before:           Mon 19 Dec 2022 16:54:08 +0000
ROA not after:            Tue 24 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        56.167.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:4b:3d:b5:ff:ff:5e:4a:ba:87:d7:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 19 16:54:08 2022 GMT
            Not After : Jan 24 05:00:00 2023 GMT
        Subject: CN=17eee5d0-2ab3-4fad-b7a3-fbd07bd4be9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:69:72:ae:d2:e7:e5:f9:de:c4:58:29:5c:76:
                    18:c9:4e:f8:22:ca:c0:5a:4c:4e:8b:29:19:dd:d6:
                    f1:2c:91:1d:39:56:34:5f:e6:df:ed:d8:93:0c:80:
                    cd:c4:0a:19:67:fa:9b:ec:cf:fc:85:97:85:52:f4:
                    69:fe:8e:7c:4c:40:5a:e5:62:fa:ed:51:f7:42:47:
                    bf:10:53:01:44:31:4e:57:9c:80:ab:eb:70:ca:3f:
                    f9:43:fb:1d:58:b1:39:42:ad:54:c9:1f:a4:93:9b:
                    8e:a6:20:70:c9:a0:9c:93:38:0b:ab:cf:14:b4:6c:
                    40:71:76:39:f6:f3:e7:cf:c4:87:66:10:b0:f0:95:
                    1d:48:6c:99:b9:bc:65:9f:cc:d0:02:6c:b9:86:de:
                    0c:62:3d:e6:99:1b:2b:4c:9e:e9:cb:58:f5:e2:16:
                    5b:e6:59:42:10:26:31:53:bc:8d:0b:ba:6c:d1:65:
                    70:96:8e:e0:be:bd:dd:c2:ec:5f:cf:38:87:96:09:
                    1a:c1:99:0e:99:f6:38:f8:17:70:e7:a8:98:ed:9b:
                    fc:64:94:1d:8f:a4:3e:a2:7a:07:74:fd:83:70:f4:
                    e2:0b:89:1c:57:12:e7:2e:72:9d:b3:6e:5c:53:d8:
                    65:16:b1:82:a6:d6:1d:c3:c7:41:c0:fd:e9:0d:39:
                    9a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:FB:17:03:46:2F:BC:74:DA:5F:9A:1B:BF:68:D6:55:FC:22:DD:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1c59f89a-81ca-353b-a35b-e0b1f608eade.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.167.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:b1:b0:41:97:f3:b5:5e:7d:9b:c1:e7:16:2b:1c:90:0b:d7:
         05:ce:00:cd:98:56:c1:66:6c:a2:db:59:61:2b:e2:08:90:ff:
         66:bb:22:0d:6a:8b:39:9f:96:7e:77:c7:15:2e:6e:77:f1:ce:
         cd:52:df:33:02:ab:fa:4b:8e:ac:30:6a:e0:5e:6e:14:fc:9f:
         99:a0:75:41:30:e8:8c:36:01:7d:c2:27:b0:b5:b5:31:df:25:
         06:14:8a:0f:24:37:b3:8a:9f:f8:9f:89:a4:88:70:99:3e:7f:
         10:80:1d:c6:a0:48:94:3e:be:d1:fa:4b:fb:8e:1f:84:17:c8:
         34:e8:ea:44:a0:91:b2:d4:00:71:94:64:fd:4d:f4:02:b8:7f:
         93:45:bb:a1:98:48:68:cd:79:0d:49:8e:3f:ed:af:0d:a4:c4:
         06:38:d3:84:6b:8c:11:3b:c4:fb:d1:87:7a:0e:db:71:43:ad:
         ac:bb:77:e3:30:cb:e3:56:ef:0c:33:36:92:25:c8:b4:88:de:
         d1:c2:79:86:09:d4:d3:e2:f5:f4:e8:55:f7:aa:2c:3e:94:d4:
         e0:68:42:d9:b4:7b:55:03:1c:d6:78:53:b0:02:7a:7d:20:19:
         b1:83:f0:b6:3d:05:8a:d2:d1:5e:bd:15:6c:1f:8b:4f:e6:eb:
         f5:e4:f8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----