Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/35df93e3-54a6-3f2b-9ef1-785d60f97dde.roa
File:                     35df93e3-54a6-3f2b-9ef1-785d60f97dde.roa (raw, json)
Hash identifier:          REDkrx4zb6jTjumcHBk5pQTM1QDpWLkb5ZHYxRY7Ofo=
Subject key identifier:   2C:11:93:EB:A6:E6:13:9B:86:A9:A0:B3:94:08:8F:90:4E:63:65:09
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858404172B6B2DEBB4F515D29B6C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/35df93e3-54a6-3f2b-9ef1-785d60f97dde.roa
Signing time:             Thu 15 Dec 2022 12:00:00 +0000
ROA not before:           Thu 15 Dec 2022 12:00:00 +0000
ROA not after:            Fri 20 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        16.55.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:41:72:b6:b2:de:bb:4f:51:5d:29:b6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 15 12:00:00 2022 GMT
            Not After : Jan 20 05:00:00 2023 GMT
        Subject: CN=34a5c91a-b472-4688-b23a-b919909dcf96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1c:44:f2:5c:0e:71:5c:d0:78:ad:fd:ad:28:
                    5f:d2:5b:a6:d2:70:10:b5:1d:2b:cf:7e:04:5a:a7:
                    fb:00:a9:1a:2c:84:6f:00:a7:0e:a7:a3:58:fb:cb:
                    b5:81:12:00:61:ae:53:9f:ba:f1:55:59:8e:49:00:
                    5a:9b:d1:78:47:d6:83:b2:31:e2:3c:80:c7:90:e1:
                    df:5a:38:a4:18:01:ac:67:d7:af:13:09:83:04:09:
                    48:94:03:ea:34:5a:19:04:85:ee:ab:a5:48:6e:26:
                    3e:dc:85:4f:48:a7:2c:e4:e4:08:1b:1f:a9:22:b6:
                    35:41:0d:9b:6c:92:3a:fc:d6:43:dd:cd:0c:3a:34:
                    bf:7f:16:44:31:65:49:48:c8:a8:2f:97:08:86:68:
                    02:a0:ea:ca:7a:04:84:f8:8d:ce:de:2b:3b:b1:12:
                    32:ec:8a:bb:b7:0e:dc:44:91:8c:91:5d:e9:ce:32:
                    f1:b7:34:f9:5e:63:21:c3:9f:f4:e6:63:17:6c:f8:
                    7e:f1:49:f5:49:cd:9e:56:a7:38:05:c4:3b:d6:49:
                    82:8e:be:6c:2e:5f:d3:c4:2b:fe:6c:7a:01:3f:cf:
                    fe:0e:86:80:4a:c9:91:4c:fe:b4:95:c0:92:51:fb:
                    52:b8:bc:b3:1d:ea:fb:ba:78:1b:d5:01:96:e5:b9:
                    2f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:11:93:EB:A6:E6:13:9B:86:A9:A0:B3:94:08:8F:90:4E:63:65:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/35df93e3-54a6-3f2b-9ef1-785d60f97dde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.55.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:ca:6e:c4:f9:43:fa:d3:30:b2:64:38:44:32:fe:aa:67:61:
         c6:ba:85:92:70:18:12:d3:64:91:87:23:39:3a:c0:c1:4a:24:
         78:87:7a:c2:08:2b:35:79:1b:aa:70:9a:c7:70:5a:c0:b0:49:
         32:d8:ff:18:ac:b0:41:3f:25:92:db:99:f3:d8:a5:14:b3:5d:
         53:d9:7d:d2:df:36:9f:e7:4d:3f:59:f5:40:2b:41:e2:53:d5:
         79:c9:dd:9f:7a:05:be:62:76:46:2d:99:1c:ed:d3:cb:75:2c:
         dc:44:0a:34:37:ef:cb:4d:1a:fa:c5:15:d9:f6:33:22:37:cb:
         b1:ed:2b:4b:36:9e:84:ac:e5:02:21:62:b7:36:e4:ee:c9:50:
         68:c7:fc:36:e5:13:be:56:ac:69:42:f6:08:e5:d0:98:4f:4f:
         1a:48:4c:32:20:66:fb:d8:34:f1:58:20:ee:a4:90:13:87:66:
         d4:8c:39:2a:6a:ae:af:00:8c:1b:b3:6b:c7:a5:3d:51:e7:e2:
         da:81:46:9c:49:7a:f3:c0:66:e5:6d:dd:c8:06:12:31:1f:33:
         f6:d4:df:94:00:25:fe:df:b0:6c:ab:64:11:de:53:11:1f:6f:
         ee:de:9b:8e:41:39:28:a5:55:22:bc:b1:ce:0f:f0:66:16:17:
         ce:df:8e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----