Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/454aded0-c5e1-3e46-85fb-db51b5cdb3ef.roa
File:                     454aded0-c5e1-3e46-85fb-db51b5cdb3ef.roa (raw, json)
Hash identifier:          +chfYksT67nJ+RrTR9fi7nkzyiOu9S5vibRmfrgzwFk=
Subject key identifier:   8E:81:92:E7:66:30:47:A1:E3:0C:A9:9C:0F:5F:84:CE:E0:DD:C7:04
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858403D7E2923EE4A0B881601D140
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/454aded0-c5e1-3e46-85fb-db51b5cdb3ef.roa
Signing time:             Wed 14 Dec 2022 12:00:00 +0000
ROA not before:           Wed 14 Dec 2022 12:00:00 +0000
ROA not after:            Thu 19 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        16.156.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:3d:7e:29:23:ee:4a:0b:88:16:01:d1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 14 12:00:00 2022 GMT
            Not After : Jan 19 05:00:00 2023 GMT
        Subject: CN=1494568f-aabf-456b-b940-c156e1ee0ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f4:70:cc:51:ce:82:50:a7:56:4a:2e:d8:fb:
                    ea:98:df:ad:8d:ae:51:e8:af:a9:e5:57:0a:a1:a4:
                    9c:5c:10:ea:f0:f4:fa:4c:67:2a:06:a7:61:81:4a:
                    67:ee:89:91:76:81:df:df:ff:0e:cf:11:0a:b3:8b:
                    dc:8f:0d:67:d1:6a:be:21:c5:40:8f:28:84:16:b4:
                    83:52:fe:f3:8e:4f:b7:7f:30:34:b9:51:ba:93:20:
                    b2:bc:20:50:bb:b4:41:1c:28:a4:4f:40:fe:ad:7f:
                    b1:b0:aa:a4:7d:8e:20:c9:63:bc:f6:d0:9f:7a:0b:
                    25:10:94:a0:3c:ae:6f:ca:b4:08:61:63:b6:73:83:
                    7b:39:5d:4c:be:4c:2a:0e:f1:c7:d0:9b:ec:c7:15:
                    89:c3:7e:2e:ab:14:5e:8d:01:8e:3f:ac:4c:e7:da:
                    41:18:89:55:40:80:de:2c:4f:fd:38:aa:09:eb:f2:
                    d2:ae:26:ac:ed:a4:79:38:8c:e0:1d:63:77:18:5c:
                    a6:68:0e:60:9d:d8:af:b9:08:11:65:8f:2c:3b:d2:
                    a8:bc:fd:4b:9f:8c:ef:94:11:fb:a4:8d:31:89:5d:
                    70:83:18:05:8b:68:03:fe:c5:d7:4d:63:a2:6b:78:
                    90:e1:93:35:96:c9:56:84:24:59:a8:fa:93:64:98:
                    1c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:81:92:E7:66:30:47:A1:E3:0C:A9:9C:0F:5F:84:CE:E0:DD:C7:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/454aded0-c5e1-3e46-85fb-db51b5cdb3ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.156.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:7d:1d:35:1d:d6:1a:75:c0:57:ae:22:eb:7d:93:86:71:7a:
         f9:61:62:ec:24:2c:2d:d1:cf:b4:0c:95:d7:3f:da:7f:fd:33:
         5c:1c:af:52:a2:7a:78:d9:c8:cb:81:51:e0:40:ad:0e:f9:3f:
         10:f9:6e:5e:9a:bc:91:49:ef:4e:82:ca:a8:8c:a4:24:f9:5e:
         db:ee:c2:38:17:21:fe:37:40:a0:b4:de:44:7f:c5:f1:ea:ad:
         34:47:ee:58:8e:95:39:f5:81:78:e1:55:e8:5e:ed:ea:5c:79:
         87:c3:c2:5a:ee:f5:1c:27:e8:24:c6:81:e0:d3:f2:2b:27:a4:
         f0:12:4a:d5:4c:4c:b6:88:dd:82:18:22:4f:b5:12:8b:aa:8f:
         3f:66:c8:97:56:5a:05:f0:64:53:3b:bd:cf:c3:ee:c8:2a:20:
         66:77:cb:db:e0:f2:ab:82:49:ed:3a:91:b2:ff:47:e5:49:80:
         53:ae:61:e9:2c:42:20:89:ef:e0:e5:79:5b:3a:39:7e:76:7a:
         ef:c1:c0:82:95:e5:89:24:60:a4:66:92:23:98:58:cf:32:8d:
         47:b0:3a:a0:4b:9d:96:e0:45:c8:61:e3:2a:ee:33:f4:91:19:
         3f:76:11:b3:7d:e2:bb:0f:b3:96:e5:c7:af:24:da:13:17:eb:
         fe:22:0d:49
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEA9fikj7koLiBYB0UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxNDEyMDAwMFoXDTIzMDExOTA1MDAwMFowLzEtMCsGA1UEAxMk
MTQ5NDU2OGYtYWFiZi00NTZiLWI5NDAtYzE1NmUxZWUwY2NmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/RwzFHOglCnVkou2PvqmN+tja5R6K+p5VcK
oaScXBDq8PT6TGcqBqdhgUpn7omRdoHf3/8OzxEKs4vcjw1n0Wq+IcVAjyiEFrSD
Uv7zjk+3fzA0uVG6kyCyvCBQu7RBHCikT0D+rX+xsKqkfY4gyWO89tCfegslEJSg
PK5vyrQIYWO2c4N7OV1MvkwqDvHH0JvsxxWJw34uqxRejQGOP6xM59pBGIlVQIDe
LE/9OKoJ6/LSrias7aR5OIzgHWN3GFymaA5gndivuQgRZY8sO9KovP1Ln4zvlBH7
pI0xiV1wgxgFi2gD/sXXTWOia3iQ4ZM1lslWhCRZqPqTZJgcbQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFI6BkudmMEeh4wypnA9fhM7g3ccEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNDU0YWRlZDAtYzVlMS0z
ZTQ2LTg1ZmItZGI1MWI1Y2RiM2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEJwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAa30dNR3WGnXAV64i632ThnF6+WFi7CQsLdHPtAyV1z/af/0zXByvUqJ6
eNnIy4FR4ECtDvk/EPluXpq8kUnvToLKqIykJPle2+7COBch/jdAoLTeRH/F8eqt
NEfuWI6VOfWBeOFV6F7t6lx5h8PCWu71HCfoJMaB4NPyKyek8BJK1UxMtojdghgi
T7USi6qPP2bIl1ZaBfBkUzu9z8PuyCogZnfL2+Dyq4JJ7TqRsv9H5UmAU65h6SxC
IInv4OV5Wzo5fnZ678HAgpXliSRgpGaSI5hYzzKNR7A6oEudluBFyGHjKu4z9JEZ
P3YRs33iuw+zluXHryTaExfr/iINSQ==
-----END CERTIFICATE-----