Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1fe49460-4578-352c-a4c4-cd41202b393f.roa
File:                     1fe49460-4578-352c-a4c4-cd41202b393f.roa (raw, json)
Hash identifier:          fnD8ENpg9WGwo1VrBUslImG3y1MWS/IYwezj/Vy7440=
Subject key identifier:   0D:83:CE:98:E4:E9:36:07:9B:04:8D:71:A1:8D:B9:CC:12:A8:6C:82
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E94217983ACD9C9CBB1148C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1fe49460-4578-352c-a4c4-cd41202b393f.roa
Signing time:             Thu 14 Jul 2022 21:12:08 +0000
ROA not before:           Thu 14 Jul 2022 21:12:08 +0000
ROA not after:            Fri 19 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        54.134.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:94:21:79:83:ac:d9:c9:cb:b1:14:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 14 21:12:08 2022 GMT
            Not After : Aug 19 04:00:00 2022 GMT
        Subject: CN=422bbe4e-ae79-4a59-9f49-183f18357ef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ee:36:30:2c:7b:68:fa:b0:c6:fc:7b:c8:e6:
                    ea:ea:af:6a:22:3c:f5:96:d6:fd:1c:3e:c6:93:a6:
                    82:25:11:c8:07:bf:68:22:21:b2:67:0b:bb:57:fe:
                    0b:54:b3:7b:cf:26:a4:e7:c0:c4:ea:6c:c9:72:cd:
                    50:7b:84:b1:d1:09:5f:26:45:15:85:b1:a3:e5:57:
                    e4:09:a3:d3:38:25:f8:92:ea:05:97:9c:43:cb:b2:
                    24:71:a7:d4:49:ea:37:40:3d:39:5e:d1:66:69:f1:
                    46:67:f1:27:87:5d:b2:72:bf:09:e5:c7:dd:1a:d0:
                    2f:a6:9f:2e:85:4f:6f:3f:1c:6e:ea:99:4a:0a:58:
                    ec:88:49:12:d1:fd:e8:1d:25:93:82:37:a7:e7:01:
                    55:8a:76:e0:6c:d1:40:ed:90:4b:10:1d:11:bb:ce:
                    da:ea:51:e3:ca:cf:9a:15:94:62:8c:fa:a1:15:24:
                    4f:d7:e1:26:e6:10:e5:6f:5e:5d:a9:f4:b2:50:30:
                    4b:39:c5:6c:79:20:a6:63:16:b4:f6:91:f9:f1:5e:
                    64:0d:48:b4:6b:b6:86:54:23:67:75:d4:62:25:24:
                    5a:c8:40:58:5d:8d:b6:5c:a6:d0:8b:74:43:67:60:
                    dc:f8:7d:fe:8c:56:f9:db:8f:75:17:84:50:a4:a1:
                    e7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:83:CE:98:E4:E9:36:07:9B:04:8D:71:A1:8D:B9:CC:12:A8:6C:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1fe49460-4578-352c-a4c4-cd41202b393f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.134.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:e9:89:73:4f:9d:af:b5:e9:8c:01:be:09:17:bd:16:af:75:
         5c:13:6c:96:b0:67:0b:54:96:99:df:d2:63:e2:35:18:29:20:
         60:d2:0f:c0:d4:d7:7b:55:cc:ac:78:7e:54:df:84:77:f6:76:
         58:c6:14:4e:ad:c4:58:8a:ae:d3:86:a6:ec:71:c7:77:42:8c:
         80:3f:09:62:01:db:e8:b8:57:6f:43:f0:bc:f5:17:c8:63:32:
         4e:ab:77:b4:97:8b:f5:4c:17:f6:7d:73:03:55:af:65:27:1b:
         13:34:d3:9e:af:c8:27:73:83:cf:f4:f7:6c:55:f6:d7:55:24:
         2f:1f:5b:21:1b:35:2e:01:a3:38:bc:a9:6d:80:44:92:22:42:
         74:f8:4c:72:b4:fe:af:cf:ed:46:4a:dc:14:b2:7b:1d:b5:98:
         5b:c7:7c:b0:0e:b5:02:74:d5:c1:77:34:d1:1a:a7:28:4d:2e:
         a1:76:a2:fa:06:2c:2e:6e:ce:31:dc:80:a6:5a:b3:79:7c:42:
         2e:39:a7:f1:74:05:b6:bc:63:4b:e1:54:3c:2d:04:f7:76:9d:
         94:c3:15:81:5d:8e:62:e6:f9:80:8f:2c:e7:bb:7d:cc:93:90:
         fe:34:b7:f5:ae:b2:b1:15:d4:fb:47:25:6b:6c:0e:14:25:bb:
         c4:ef:2d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----