Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/332374fb-d2e3-391d-ae08-36c95b3f5bc1.roa
File:                     332374fb-d2e3-391d-ae08-36c95b3f5bc1.roa (raw, json)
Hash identifier:          TvX4wCRcDhBvBvuGSuT6Mc6y0zCRZ+vtJD9ojbt3h8Q=
Subject key identifier:   CE:19:45:60:72:E7:75:E3:48:90:1B:09:1C:43:52:47:1A:A4:04:20
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584051534A81817D403FA16C7E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/332374fb-d2e3-391d-ae08-36c95b3f5bc1.roa
Signing time:             Wed 21 Dec 2022 22:15:08 +0000
ROA not before:           Wed 21 Dec 2022 22:15:08 +0000
ROA not after:            Thu 26 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        16.187.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:51:53:4a:81:81:7d:40:3f:a1:6c:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 21 22:15:08 2022 GMT
            Not After : Jan 26 05:00:00 2023 GMT
        Subject: CN=94ad0703-bf30-4072-b4ae-aebd6333189c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:82:ad:60:cf:3a:db:4e:c4:10:e7:c1:da:27:
                    09:ec:10:d1:fc:51:66:af:87:95:30:d0:8c:7b:18:
                    01:30:69:34:c9:57:32:45:df:67:6c:03:fd:1c:66:
                    8d:46:75:84:31:c0:40:28:ab:4b:c7:97:16:33:ed:
                    91:18:0e:36:39:66:09:16:59:a2:5b:0a:a8:0c:b3:
                    50:2b:25:74:b5:8d:69:ca:6e:de:29:27:f3:10:70:
                    9b:0d:21:23:bf:dd:51:d0:dc:f7:c7:71:a4:64:1e:
                    dd:74:b2:16:87:aa:97:b3:43:a7:16:f6:69:37:52:
                    60:6d:b9:e5:4e:4f:91:98:50:f7:0e:d9:1b:42:57:
                    94:41:26:03:75:57:f6:ea:cf:c1:41:6f:bc:6b:a1:
                    e1:d2:f6:85:7c:88:01:76:11:df:97:b9:7a:9f:3d:
                    85:d3:8b:af:45:23:b4:b2:8e:a3:ca:c7:af:56:5d:
                    57:a0:42:38:50:ea:bc:7d:99:90:31:e3:61:53:6c:
                    0c:f9:e8:a6:2d:bb:60:0a:fa:b4:75:de:a9:f0:46:
                    2b:7e:67:0e:d5:17:64:79:1f:e6:14:b5:bd:a5:cb:
                    6c:2a:3b:19:3d:51:c7:0d:a0:8e:4d:ba:6a:a7:9d:
                    74:0d:fa:14:dd:ab:79:ba:0e:f6:e7:48:06:cb:4e:
                    c1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:19:45:60:72:E7:75:E3:48:90:1B:09:1C:43:52:47:1A:A4:04:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/332374fb-d2e3-391d-ae08-36c95b3f5bc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.187.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:1e:d1:db:84:92:e5:2e:5a:ef:74:80:1b:87:ed:98:51:af:
         32:cb:96:54:7e:12:8b:b2:14:36:c8:4a:6a:fe:51:f2:35:78:
         17:b1:67:21:fc:fd:90:22:55:90:22:75:8d:ce:87:b2:01:af:
         79:a3:6d:9e:52:7a:57:9a:0f:3f:4d:5a:31:56:d1:fe:26:02:
         a5:6d:c4:fb:09:8d:0e:0d:3f:ed:f4:95:28:70:1b:bc:e4:3c:
         43:da:b5:e0:52:62:8a:8b:4e:70:b1:6c:0c:4e:79:49:5f:9c:
         62:76:e7:40:08:c8:de:ce:6e:c7:dd:76:64:a2:56:68:19:0e:
         ed:bd:66:e3:fc:e2:d5:9d:df:79:14:ef:c2:c0:07:df:20:b1:
         3c:65:63:b6:4d:78:c6:b8:02:8e:43:72:12:6d:9a:27:6c:6d:
         05:f4:e2:07:78:9c:cf:07:d6:41:13:69:1e:61:ce:e0:88:7a:
         66:fa:7a:be:0b:2d:52:da:c2:71:01:2a:0e:a1:61:6c:58:25:
         95:db:bf:59:df:69:9f:ea:d0:b7:05:50:7d:99:4c:95:39:3b:
         0a:e8:2d:f8:86:e7:07:ad:76:82:e9:26:a5:8e:0c:a4:09:25:
         a7:14:d5:3f:eb:a4:6e:fb:71:3b:33:ef:76:8f:b0:87:ae:90:
         8f:2f:9b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----