Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/36f33851-33c8-3535-9784-010b9fe9d204.roa
File:                     36f33851-33c8-3535-9784-010b9fe9d204.roa (raw, json)
Hash identifier:          HG5V9KPCwM+UESG0hUz8R5X/YAVzsU8sM4Nb76ivvWU=
Subject key identifier:   05:18:0D:45:B5:2E:C1:3D:34:AF:DF:D6:F2:82:22:FC:A7:F3:BD:CA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F8D95A5D42CD6B7614E007A00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/36f33851-33c8-3535-9784-010b9fe9d204.roa
Signing time:             Wed 12 Oct 2022 12:00:00 +0000
ROA not before:           Wed 12 Oct 2022 12:00:00 +0000
ROA not after:            Thu 17 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        171.73.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:8d:95:a5:d4:2c:d6:b7:61:4e:00:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 12 12:00:00 2022 GMT
            Not After : Nov 17 05:00:00 2022 GMT
        Subject: CN=010c4ec2-9390-4776-b0ff-279bf38833e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:64:e9:68:2a:d5:89:f3:ba:35:77:72:a8:35:
                    ad:99:50:ed:ab:6d:51:d7:8b:c4:31:86:7f:c3:de:
                    5c:b2:9b:a1:df:b8:57:1a:3a:d6:b2:88:fe:b9:02:
                    c7:65:f3:66:44:d9:dc:1a:bd:4c:bf:c3:bd:92:e3:
                    16:08:bb:46:a5:6c:f6:5c:ec:2a:3e:4e:34:10:81:
                    44:9e:a2:c3:9f:9a:2e:71:63:74:60:80:27:64:65:
                    3a:45:09:a0:92:5e:13:ee:d6:1f:fe:3e:fb:0b:19:
                    63:eb:25:7e:55:6b:4d:3d:cb:a6:d9:c0:20:d2:1b:
                    8a:60:30:59:0d:a5:b1:c5:2f:40:e8:50:01:b7:df:
                    84:32:5d:02:c4:65:53:8a:9d:f0:c7:05:e2:02:a7:
                    ca:e5:3c:70:8e:20:87:b6:c6:15:a5:0a:e2:ba:41:
                    9e:e3:2c:13:92:83:e9:e9:39:8b:ab:3e:52:27:cf:
                    18:a7:f3:80:f7:12:d9:ca:9f:b4:5a:44:b1:e6:ad:
                    2a:6a:2f:ca:28:1b:01:46:a8:b5:ae:bd:d2:e7:a9:
                    7a:f1:50:c1:74:8a:80:b1:9e:75:f5:73:be:e0:d8:
                    12:74:6a:b9:7d:16:57:73:ba:58:f1:d1:bb:ca:ae:
                    89:ab:f4:2c:27:00:3f:80:e2:e8:9a:5f:37:0e:42:
                    7a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:18:0D:45:B5:2E:C1:3D:34:AF:DF:D6:F2:82:22:FC:A7:F3:BD:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/36f33851-33c8-3535-9784-010b9fe9d204.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.73.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:e3:4a:33:6a:36:46:5b:fe:16:18:a1:a5:8f:9e:9c:bc:3d:
         cc:e4:a9:eb:5b:a5:aa:74:ae:3c:a1:c5:24:63:27:38:e1:ba:
         21:f7:f9:b0:ef:b4:3c:1b:9a:64:5e:a5:25:3b:12:c6:67:df:
         c9:1a:04:a7:4a:af:af:a5:f1:76:28:42:dc:d3:08:c7:d2:4e:
         4d:25:bc:c2:75:0e:8e:13:41:ea:b2:a9:09:49:2a:f1:4a:71:
         2c:e2:26:86:d0:b0:1a:76:b4:82:f5:97:e6:19:64:60:29:12:
         8e:cc:61:54:43:85:8f:9d:30:80:25:e5:6e:31:b3:5d:46:ec:
         39:69:53:05:c7:1d:a7:b1:76:bd:4e:bd:26:ee:ca:ad:62:ce:
         c9:2f:72:87:bb:3a:c2:3e:e5:13:6a:33:a7:57:69:13:b2:49:
         51:98:66:d8:e3:85:74:b2:d8:e2:91:6c:7f:5a:df:4e:34:16:
         73:69:80:d7:08:6c:be:cf:6e:3a:57:8d:18:d2:ba:b6:39:a9:
         25:84:bc:dd:e0:d0:aa:6c:0f:0e:21:11:c2:ca:01:92:b4:c0:
         dc:99:58:29:35:fa:73:7b:19:87:34:53:0c:91:f4:c4:3a:d4:
         61:3f:81:c5:e1:59:ce:98:56:0c:5c:23:b1:fb:bb:9c:68:ea:
         9e:c8:4c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----