Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3f5eaa97-26d9-3d97-9bae-e91c41e028d2.roa
File:                     3f5eaa97-26d9-3d97-9bae-e91c41e028d2.roa (raw, json)
Hash identifier:          +flO3M2nGPhSoS809KNNSjNRD8/N/0xQWtpTfxA5gyc=
Subject key identifier:   FF:E1:9E:CE:FB:AA:48:56:DC:40:1D:84:3A:D4:0E:4C:57:18:99:59
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E93C8123CC43171EB32CBBF80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3f5eaa97-26d9-3d97-9bae-e91c41e028d2.roa
Signing time:             Thu 14 Jul 2022 21:12:08 +0000
ROA not before:           Thu 14 Jul 2022 21:12:08 +0000
ROA not after:            Fri 19 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.58.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:93:c8:12:3c:c4:31:71:eb:32:cb:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 14 21:12:08 2022 GMT
            Not After : Aug 19 04:00:00 2022 GMT
        Subject: CN=1be3b883-25bb-4b90-a00b-f9ff4cc09af2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f3:9f:ed:64:c1:db:db:fc:59:c0:b1:73:53:
                    b0:aa:51:88:e7:a7:bd:29:07:22:78:81:b6:dd:db:
                    d9:90:0f:1d:47:b6:46:61:e6:98:5f:0d:05:cb:ee:
                    71:df:c5:f1:74:21:04:a1:9d:c5:be:95:73:b7:2b:
                    37:0d:79:76:c3:50:91:08:9d:a3:fd:2a:32:95:9e:
                    42:32:d7:d6:3b:e9:50:f7:6a:38:ad:b6:51:8d:e5:
                    4f:cb:8d:0b:46:db:30:2e:a8:ef:5a:d9:af:14:c4:
                    d1:09:f0:b5:63:49:98:a0:a5:f8:65:4b:08:68:84:
                    a3:22:11:b7:91:46:68:77:7a:52:d1:97:44:32:5a:
                    e0:38:70:4e:77:69:7e:9e:f9:4f:52:c4:b3:b4:e5:
                    c6:39:ea:1b:45:7f:b7:0a:74:6a:5b:b9:9e:7b:02:
                    50:83:09:73:bc:2c:29:54:98:5e:29:fc:60:7f:f8:
                    3f:a7:f4:75:7a:02:69:d1:92:97:d6:76:ed:c9:f9:
                    42:c7:ea:fa:bb:84:df:3b:bb:08:84:9c:6d:85:b8:
                    c2:16:8b:7c:68:36:e2:b2:7b:6f:4d:42:cd:3b:36:
                    4c:53:89:d2:98:12:b6:61:9d:0c:61:e8:83:a1:03:
                    65:b2:a3:39:a5:c4:7f:2e:b3:59:86:46:57:0f:da:
                    83:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E1:9E:CE:FB:AA:48:56:DC:40:1D:84:3A:D4:0E:4C:57:18:99:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3f5eaa97-26d9-3d97-9bae-e91c41e028d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.58.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:eb:bb:ac:fd:e0:9d:9c:fe:8a:a4:f3:a7:66:4d:fc:5d:fe:
         62:50:5f:27:87:d7:1b:72:bb:60:cc:26:85:e6:5a:5b:ab:14:
         86:ef:74:0e:ba:3f:92:b9:7a:8a:d2:58:d0:fd:1a:24:22:8e:
         5d:03:49:26:28:4c:17:b8:67:5f:5e:42:0d:02:5d:32:2a:dd:
         6e:49:b8:6d:43:df:63:0c:b4:35:80:ea:66:f8:d9:bb:b5:2c:
         75:32:13:c0:63:d3:35:d2:43:8f:20:12:f3:17:a4:f8:ab:46:
         da:bd:17:81:6b:62:cd:da:09:0c:74:b6:ba:18:98:67:38:22:
         b6:45:a7:3d:5a:a6:b5:66:77:27:47:eb:44:a0:56:65:3e:e2:
         97:cd:97:ad:da:59:fa:95:d3:ab:7e:ad:89:00:e4:ad:b7:42:
         1f:41:de:2c:85:1a:f6:d7:eb:43:85:e5:34:12:ce:d2:2a:7f:
         60:01:9b:99:14:a8:1d:9c:c0:d0:78:65:b8:2a:29:d3:d9:05:
         12:a3:fa:81:23:31:17:16:7e:f6:22:e7:f6:64:82:71:af:46:
         ec:54:64:f8:34:11:22:ca:40:b5:21:6c:ef:16:64:5a:ee:79:
         5b:0c:01:28:ad:3f:0d:3c:9b:67:4a:f4:ec:3a:90:50:63:18:
         0c:4d:50:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----