Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/37695b9f-eec8-3401-acb0-20e7202c4497.roa
File:                     37695b9f-eec8-3401-acb0-20e7202c4497.roa (raw, json)
Hash identifier:          cv3Ri8JHZK2GIV2geGAKlBur4XGYE7KLM9p7MqcHGVo=
Subject key identifier:   54:5A:35:23:EF:08:C9:6D:49:45:FF:97:40:15:77:A0:13:F7:79:AB
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EE6415090F91C315B6A2BD240
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/37695b9f-eec8-3401-acb0-20e7202c4497.roa
Signing time:             Sat 13 Aug 2022 12:00:00 +0000
ROA not before:           Sat 13 Aug 2022 12:00:00 +0000
ROA not after:            Sun 18 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.123.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e6:41:50:90:f9:1c:31:5b:6a:2b:d2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 13 12:00:00 2022 GMT
            Not After : Sep 18 04:00:00 2022 GMT
        Subject: CN=c461789a-81c9-44d5-852a-66a5c28ed719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4e:03:53:72:c1:d6:82:a1:1f:d1:01:2e:aa:
                    da:d6:ab:77:1c:b1:60:04:0d:a5:08:b8:c5:29:b2:
                    73:50:b8:c9:b3:8f:3d:0d:60:62:d0:16:77:ea:87:
                    cc:88:fe:62:2c:70:75:20:37:2e:1b:1d:ae:1c:6b:
                    28:38:24:aa:80:59:1a:9b:8b:ae:61:fe:d3:26:14:
                    4a:77:ee:45:d4:ce:e9:2a:b7:87:6d:bc:c8:66:b1:
                    08:15:d2:b9:fc:2e:d9:11:36:17:f6:ba:44:37:9f:
                    44:22:66:74:d6:19:d1:46:c8:47:b9:58:14:1f:ad:
                    23:d7:33:22:de:77:f6:39:c7:52:59:d2:e7:72:a1:
                    b4:43:b1:fd:8a:32:0e:29:7b:63:67:30:49:5f:d4:
                    c7:bc:31:5c:4c:21:fd:73:5c:4e:3d:d4:f6:fa:58:
                    f8:17:f0:6b:f4:d9:e6:a8:e1:c4:4b:25:7e:f5:bb:
                    2a:4e:f6:90:f9:6f:a6:e0:25:f7:d0:bd:b9:73:35:
                    6c:c9:76:bd:f8:47:c7:49:18:e4:c3:05:30:4b:17:
                    01:3b:27:27:9f:a3:ee:ea:1b:2e:a0:90:f9:e1:70:
                    d7:df:58:4c:3e:73:e4:d7:db:8c:c2:72:87:42:76:
                    d6:29:65:03:9e:0b:a7:10:0b:af:f2:c2:bb:a7:fa:
                    75:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:5A:35:23:EF:08:C9:6D:49:45:FF:97:40:15:77:A0:13:F7:79:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/37695b9f-eec8-3401-acb0-20e7202c4497.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.123.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:35:94:d8:bb:d3:87:22:f8:35:79:4d:db:ec:a9:50:7c:79:
         3e:e1:01:ad:ad:7f:54:b5:5f:38:40:cb:cb:0c:c7:94:66:c7:
         3d:70:b0:19:30:8f:96:8e:4f:f9:34:c3:ef:34:79:bb:a3:b7:
         5f:f4:71:f6:4d:f4:7b:cf:b9:79:cf:48:f9:40:f6:15:91:f2:
         3b:26:f0:72:4f:59:4c:00:28:c4:e0:03:81:9b:95:03:55:7d:
         29:8f:92:fd:96:64:0e:77:15:60:36:05:76:48:19:c1:7b:a1:
         ae:e3:91:97:d1:7f:3a:c7:e1:5b:ee:b3:47:04:15:34:60:56:
         7e:3f:ac:f7:1f:01:9a:68:fa:38:92:6d:b4:7d:ef:a9:23:fa:
         0f:47:3a:c3:3e:93:3e:59:c1:0f:50:a4:20:bc:67:92:20:44:
         59:be:6d:b4:ed:77:8a:78:06:c8:cb:2e:4f:fd:5d:b5:e1:c7:
         e6:9f:c9:ff:5e:a4:91:bf:de:2e:50:ec:07:f8:d0:e4:10:33:
         4f:14:84:fd:97:22:5e:31:25:70:6e:a4:19:fc:5e:b9:36:5d:
         1b:3f:b9:0b:3e:f5:f7:71:3e:e0:09:93:0d:25:ef:b0:65:d7:
         2b:d1:09:a5:9e:a5:66:66:06:a6:2e:55:1f:51:c6:46:ab:48:
         e8:6f:34:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----