Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/46d183cc-ffc5-3ffa-b3d7-a927d4857cd4.roa
File:                     46d183cc-ffc5-3ffa-b3d7-a927d4857cd4.roa (raw, json)
Hash identifier:          cZ+tXg0pwSDMKD24+F+r3+t5E8n5b7T//5xQucuYQ1U=
Subject key identifier:   6B:19:C6:17:B4:15:18:AA:38:CE:E6:09:48:01:61:32:48:AE:AE:25
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858405FD629F78CB3333FD4016080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/46d183cc-ffc5-3ffa-b3d7-a927d4857cd4.roa
Signing time:             Mon 26 Dec 2022 12:00:00 +0000
ROA not before:           Mon 26 Dec 2022 12:00:00 +0000
ROA not after:            Tue 31 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        98.131.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:5f:d6:29:f7:8c:b3:33:3f:d4:01:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 26 12:00:00 2022 GMT
            Not After : Jan 31 05:00:00 2023 GMT
        Subject: CN=c11c652d-5855-4740-ba3d-779aa532fc23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:72:34:f0:79:c8:d6:b7:b7:26:3e:bc:58:78:
                    ff:03:94:72:83:61:61:d8:80:53:bd:ff:f2:c7:5d:
                    c9:fc:07:3a:e2:2e:b5:54:56:0c:1a:d1:a3:d3:6b:
                    b3:48:e6:b1:fc:d3:a0:f3:17:8c:c4:62:aa:da:a2:
                    28:46:90:12:9b:f2:f4:e7:d0:24:59:59:e8:2b:06:
                    c3:2d:f9:8b:6c:7f:b8:d1:35:06:a2:5d:66:55:e6:
                    82:94:05:03:99:68:ba:01:7d:eb:67:28:27:c8:2a:
                    e6:8e:38:d2:3c:dc:c5:f5:59:dd:9f:fa:be:40:4b:
                    b3:84:e5:90:fe:91:6a:35:59:45:04:9f:ec:08:99:
                    34:fa:ec:47:cc:a8:61:f9:e8:8d:2c:62:3c:58:7c:
                    6e:7b:91:16:0f:08:3c:f9:0a:16:17:71:e4:bf:9b:
                    4d:99:f0:ae:a9:da:d0:08:e8:36:bc:1b:f9:37:ff:
                    ba:40:ac:1c:71:dd:b8:65:eb:a4:9c:da:03:14:92:
                    0e:5b:6a:f4:43:0a:d1:5c:5f:88:ab:44:26:c7:98:
                    27:88:56:fc:af:c3:a8:f8:71:60:1a:d3:08:8b:cc:
                    a2:31:ce:75:54:78:7e:ac:07:d8:af:d9:c4:17:d6:
                    5c:77:da:b2:a8:b5:71:24:b3:32:79:e0:2a:ea:bb:
                    e9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:19:C6:17:B4:15:18:AA:38:CE:E6:09:48:01:61:32:48:AE:AE:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/46d183cc-ffc5-3ffa-b3d7-a927d4857cd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.131.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:90:9a:4c:91:a3:b2:a5:f4:b2:50:28:2e:c2:1e:c1:a0:1d:
         ed:be:cc:12:06:eb:93:59:35:29:a2:2d:7a:49:0b:ad:43:09:
         eb:f4:33:c6:17:ff:93:5a:89:76:a7:bb:b1:14:a7:1d:c3:14:
         3f:29:6c:dd:63:8f:34:e5:2c:33:74:55:a8:f3:22:07:31:91:
         c5:d7:1c:31:f6:c0:66:92:1d:d9:b6:59:bd:05:c7:20:c9:3a:
         0b:54:1a:2f:6f:fc:18:b2:b6:92:af:5b:a9:c9:bb:4b:53:55:
         ca:f9:9b:fc:06:ff:30:a9:21:4f:8d:da:ca:1f:bc:ea:79:57:
         86:3e:2e:14:7d:89:64:65:56:e3:79:8e:df:a8:65:a9:98:c5:
         c5:fd:69:5b:75:56:f6:11:e0:b6:6a:05:12:26:1a:b3:b4:47:
         36:07:7d:50:92:91:3f:fb:f1:f9:6f:e7:bd:c0:b0:a7:d4:60:
         78:97:14:0e:92:c3:5e:38:e8:af:a4:08:b8:78:5d:c3:6b:99:
         0f:8d:63:50:fa:d9:42:d1:91:8f:96:a7:7a:fb:77:ce:8a:0d:
         46:17:52:73:6c:43:f3:f1:70:9b:c2:da:c9:ba:a7:b7:6f:be:
         a8:08:23:cb:8a:a3:17:6c:67:8e:4b:67:6e:80:63:8b:af:a3:
         e4:03:0b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----