Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2eb0a3d8-13d4-3c1b-a385-2f9014495812.roa
File:                     2eb0a3d8-13d4-3c1b-a385-2f9014495812.roa (raw, json)
Hash identifier:          oewvpos7QSkJk8WrwakLfv70FZ6t2uezDPxZkt6Nu3I=
Subject key identifier:   2F:7F:FC:A6:F3:33:EF:BD:C8:FE:F1:60:23:C8:EC:68:C8:59:A8:FB
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840862A71AB8424C6CFD4285C10
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2eb0a3d8-13d4-3c1b-a385-2f9014495812.roa
Signing time:             Mon 09 Jan 2023 12:00:00 +0000
ROA not before:           Mon 09 Jan 2023 12:00:00 +0000
ROA not after:            Tue 14 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        74.190.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:86:2a:71:ab:84:24:c6:cf:d4:28:5c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  9 12:00:00 2023 GMT
            Not After : Feb 14 05:00:00 2023 GMT
        Subject: CN=0a8d7104-66cb-43ff-a11f-b77055f63f8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f4:26:b5:89:79:e7:20:ba:49:8c:5a:23:a2:
                    05:a0:c2:47:6a:c0:0d:92:31:e9:e3:64:73:89:2d:
                    a8:93:0f:f9:9d:d0:1e:a5:40:3e:d3:f7:47:c6:35:
                    bb:72:66:8f:af:00:d1:71:09:eb:49:76:c8:3b:ac:
                    6a:5c:56:01:b6:f1:7d:2c:d4:1d:c2:af:29:b0:9d:
                    b9:6f:c1:41:b3:6f:7a:eb:94:4a:49:12:61:48:06:
                    e7:f6:55:83:91:8d:92:bb:2d:a8:53:1c:ac:db:ac:
                    b9:be:9c:84:28:9e:60:bc:3d:02:aa:82:0f:9b:ac:
                    cd:48:ee:94:55:c3:c6:bf:7c:a1:1d:27:64:94:13:
                    f9:11:3b:59:49:7d:4e:ce:bf:9b:9f:00:3c:b7:69:
                    7d:68:75:39:32:44:2e:81:9a:24:d9:93:b5:b0:b7:
                    94:c9:16:2c:4b:4a:5f:fd:3e:ea:4f:b5:3e:01:c6:
                    82:ee:b0:9a:de:5a:ba:bf:18:03:48:ab:b7:4d:5e:
                    30:df:80:c4:41:5d:2e:64:f8:27:5c:68:f4:2b:ed:
                    2b:e2:cf:62:fd:0a:e3:7d:3f:75:6a:62:b8:9e:f9:
                    c7:d5:b9:07:b3:45:eb:3c:eb:58:03:40:89:92:42:
                    fc:6f:59:60:83:06:10:c5:e8:8f:83:3f:d7:69:f3:
                    d1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:7F:FC:A6:F3:33:EF:BD:C8:FE:F1:60:23:C8:EC:68:C8:59:A8:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2eb0a3d8-13d4-3c1b-a385-2f9014495812.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.190.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:5c:42:d4:e5:4e:5a:9e:fe:6c:97:2f:5f:6a:22:e0:71:92:
         9b:d9:da:b9:8e:da:a8:c9:bf:23:81:06:50:30:47:fd:97:71:
         85:cc:4a:d5:62:72:72:49:ee:5d:1c:82:db:3b:15:47:bb:ca:
         64:ef:30:72:e5:4b:90:83:99:a0:2c:ba:c2:1b:96:57:2c:3b:
         ac:ff:b9:85:5b:80:85:2a:c4:f4:24:cc:08:b4:b6:9d:fd:72:
         e3:5f:39:54:d2:81:f0:a9:ee:fc:f5:af:76:3f:e9:b6:7a:ef:
         29:34:a7:88:37:e9:45:56:c8:37:55:49:cd:38:24:f2:28:52:
         fb:b5:fb:aa:71:5e:fe:b2:3f:28:1f:e9:ff:34:bd:5b:0d:bc:
         09:e9:11:3c:bd:4b:55:0e:f4:f9:a9:e5:ba:3a:2a:ab:ef:1e:
         08:7d:b1:45:ce:4d:e1:de:3c:9d:ef:d5:f4:ee:02:8b:38:15:
         00:5f:10:c4:5d:64:50:5f:d7:df:48:c0:73:07:b2:a5:02:7f:
         0e:40:a7:b4:0f:88:19:b4:c3:07:5d:1d:64:5b:38:d3:f2:f1:
         b7:2f:42:71:d8:f2:0c:e0:71:a6:65:2f:04:ba:40:3d:28:76:
         84:87:69:d9:96:10:b1:ba:5c:50:de:51:d1:f2:6e:c9:2d:16:
         e8:e0:92:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----