Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/49515ecc-97f5-3638-a5b6-a38a77217163.roa
File:                     49515ecc-97f5-3638-a5b6-a38a77217163.roa (raw, json)
Hash identifier:          FeDYNEdziGHXalOIVf1SGhC1OuoOy++tS+3fnwrjRSg=
Subject key identifier:   0C:6A:3E:F4:0C:AC:B7:B7:18:9A:5F:AD:81:D5:40:E6:4B:E0:F2:E5
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840B9C867982E01642611A9D680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/49515ecc-97f5-3638-a5b6-a38a77217163.roa
Signing time:             Fri 27 Jan 2023 12:00:00 +0000
ROA not before:           Fri 27 Jan 2023 12:00:00 +0000
ROA not after:            Sat 04 Mar 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        99.82.128.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b9:c8:67:98:2e:01:64:26:11:a9:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 27 12:00:00 2023 GMT
            Not After : Mar  4 05:00:00 2023 GMT
        Subject: CN=5fec53d9-74c7-4120-9ade-3f553f44a352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:00:72:48:e9:34:1f:e2:6d:af:46:0e:fd:50:
                    99:b4:c4:af:9d:0c:c2:16:f1:e5:67:51:cf:df:77:
                    43:85:cf:4c:f4:af:05:b6:22:bc:55:5e:fb:80:56:
                    ae:a5:2d:e9:6b:2c:d6:37:66:9a:24:f4:da:32:1c:
                    50:e4:c1:f5:80:60:56:59:fb:26:2c:86:03:a6:c4:
                    1f:d7:e4:f6:ea:d8:05:a0:3e:6b:a8:81:4c:4a:4a:
                    b8:20:35:49:4d:7b:45:43:96:c4:34:bc:bf:38:f4:
                    73:2c:53:57:4a:7a:ac:ed:fb:3c:d6:a1:01:63:98:
                    91:8a:ca:a7:55:01:4f:3e:6f:e5:93:5e:2d:ff:ad:
                    d8:67:3c:2d:34:7e:5f:a2:e0:47:9a:13:be:b7:c4:
                    41:80:8c:10:35:ac:a0:d9:b8:45:68:bf:34:45:50:
                    ec:d7:11:75:b2:61:5f:7d:3d:8c:7a:be:44:a8:8f:
                    01:6b:4d:08:b4:fb:e7:54:e4:2d:f9:19:01:8a:74:
                    1f:5b:b4:1e:96:7b:8b:42:cd:45:88:bd:42:45:17:
                    e9:07:19:d6:ea:2e:23:94:14:8c:82:ec:8d:9a:43:
                    81:3e:4d:f7:76:64:15:bc:f2:26:88:3e:8f:d1:78:
                    c6:c1:40:c8:ef:67:30:29:dd:5d:18:bd:a4:4b:66:
                    8b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:6A:3E:F4:0C:AC:B7:B7:18:9A:5F:AD:81:D5:40:E6:4B:E0:F2:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/49515ecc-97f5-3638-a5b6-a38a77217163.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.82.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:7e:04:ff:45:85:f7:0f:03:22:2e:9a:3f:3b:a1:9b:f1:4e:
         c8:9e:88:c1:2e:5c:74:8c:1c:13:2a:d6:48:f7:0a:cb:25:01:
         d8:c6:b6:f0:17:da:ff:63:68:76:6f:c3:2f:5b:f4:f4:40:e0:
         bc:5f:1a:52:0a:24:02:17:53:a9:75:de:36:ea:93:34:0a:8d:
         c4:f8:7e:72:0b:58:04:0e:80:4d:38:6f:ff:06:69:b5:10:1c:
         76:0e:76:26:03:8e:39:35:8e:30:ad:24:71:6d:48:18:cc:cb:
         ba:96:2e:6a:20:90:9f:8e:df:92:9d:42:69:cf:a6:45:ec:bb:
         d9:2a:33:81:8a:87:f7:00:40:78:60:2e:16:03:cc:ff:f4:e9:
         d3:e8:53:44:7a:e0:09:ea:8a:aa:51:79:be:cb:b5:c1:ca:8d:
         33:d1:b6:d1:b0:4f:8b:71:3b:33:76:7f:d7:54:1c:e7:65:1a:
         03:21:20:93:2e:9a:a7:9e:98:b2:fb:79:04:e3:b2:40:ed:9a:
         67:d2:23:e7:22:2a:48:c1:ba:a4:c7:35:69:c4:2a:54:fd:17:
         f6:cb:af:74:b4:6e:60:1c:da:32:3c:47:45:80:3c:8a:c7:c5:
         f3:6d:ab:80:3f:d3:56:86:1c:5b:21:d4:a0:0e:15:7e:e5:a1:
         9b:0d:ea:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----