Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4acfd185-95eb-310e-ac1f-5a06f9045c9b.roa
File:                     4acfd185-95eb-310e-ac1f-5a06f9045c9b.roa (raw, json)
Hash identifier:          5ROtGjUKZxjcKkqVDvU1oRoX0LpwsEch9WujrxdHUD8=
Subject key identifier:   CC:EA:70:AE:20:F1:3A:CD:1D:0D:57:C8:41:D3:B6:FF:5A:1D:0C:F8
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858405F1C3EEBC557D5C9A75B6840
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4acfd185-95eb-310e-ac1f-5a06f9045c9b.roa
Signing time:             Mon 26 Dec 2022 12:00:00 +0000
ROA not before:           Mon 26 Dec 2022 12:00:00 +0000
ROA not after:            Tue 31 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        114.56.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:5f:1c:3e:eb:c5:57:d5:c9:a7:5b:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 26 12:00:00 2022 GMT
            Not After : Jan 31 05:00:00 2023 GMT
        Subject: CN=aff35cb0-9394-4d22-bba6-b423fa5930c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f5:93:cf:f4:58:27:90:2f:22:6f:3b:9d:af:
                    ab:42:de:a6:c6:0b:26:d4:52:0b:c1:74:b6:19:d0:
                    16:7f:a0:94:d6:49:59:c3:fe:fd:e2:47:7e:e8:0a:
                    a2:25:46:36:fa:88:ec:f8:77:61:64:ae:39:a6:7b:
                    e9:3f:e5:70:c3:f1:3e:a9:93:93:40:fd:92:47:f5:
                    05:54:83:ba:5b:9d:9d:b1:33:44:05:3c:2c:e2:43:
                    5f:28:da:68:c5:a1:6d:16:4b:a2:52:be:b2:e1:f1:
                    9e:0a:c2:20:86:8b:fb:a2:28:c6:a9:c2:c0:7f:5f:
                    03:6d:fd:bd:02:c3:00:4f:6c:94:8f:a7:4b:51:e1:
                    9d:6a:2e:52:42:2b:b5:b3:fa:4a:c4:e4:85:18:bd:
                    30:7e:de:e4:01:9b:e3:61:49:71:ca:9e:18:5b:66:
                    10:33:a6:e9:94:47:f6:d7:31:bc:76:79:05:8a:54:
                    a7:1b:19:77:bf:00:bc:b5:32:ab:65:b8:d9:ce:72:
                    37:b9:36:e0:bc:00:4e:1d:81:f2:5a:fe:48:14:e2:
                    b3:6f:00:63:9a:82:1d:29:77:6a:6d:09:46:da:2f:
                    06:38:54:6e:c1:09:2f:ba:a0:d1:aa:d4:2e:d2:27:
                    b5:c8:43:56:16:ea:6c:d0:fb:fa:67:28:2a:33:9e:
                    36:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:EA:70:AE:20:F1:3A:CD:1D:0D:57:C8:41:D3:B6:FF:5A:1D:0C:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4acfd185-95eb-310e-ac1f-5a06f9045c9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.56.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:bd:b3:d8:23:5a:05:d6:ca:a8:9e:47:e5:05:3e:46:af:60:
         e1:7d:87:89:30:17:2c:03:8b:7a:5e:da:aa:01:7c:fd:31:61:
         63:4b:5c:16:67:62:92:0e:fc:4c:37:8a:93:03:b0:a9:cb:ed:
         fb:17:aa:52:0d:54:d5:19:23:b4:92:19:76:2f:12:b1:0e:1e:
         5d:16:76:ab:28:85:8f:26:a1:22:46:9e:5c:1f:13:ca:07:b2:
         09:7d:1d:ce:c9:2e:ed:e6:c1:4a:25:dc:e8:99:94:08:cb:1f:
         8d:84:91:22:81:2c:af:d6:d2:c2:0c:1c:a2:d5:1b:30:c4:f4:
         63:c9:1c:62:1d:d6:bc:18:0a:55:86:c2:cb:a9:62:56:9d:bc:
         98:1b:ab:65:ec:18:db:a0:34:aa:57:0c:20:06:7e:19:a7:62:
         13:eb:e8:4d:d7:60:5f:81:12:4c:af:fb:39:14:17:a4:ab:80:
         9e:49:ad:2a:d1:f7:29:2e:97:e3:79:1a:12:03:47:de:62:8f:
         e1:8f:12:91:27:43:91:ff:10:04:86:38:c4:b3:18:2d:3d:e0:
         15:c3:df:97:cb:d5:54:08:ab:06:73:6a:b5:36:a3:ee:71:c4:
         a7:d0:da:53:5a:44:ea:20:05:ec:c9:1c:6c:a7:60:1a:21:e1:
         25:33:90:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----