Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4db6a242-8d77-3685-87e1-b3ba562e9ff5.roa
File:                     4db6a242-8d77-3685-87e1-b3ba562e9ff5.roa (raw, json)
Hash identifier:          4pgoXXFGLhSwz8SKM61TfFjB57V1GXhssH/bir0dubc=
Subject key identifier:   BF:51:DE:BF:9B:6C:93:47:E0:74:C2:8A:EF:DF:ED:5D:73:45:87:EA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840C1FBFB5F8546D62E5F8B0E80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4db6a242-8d77-3685-87e1-b3ba562e9ff5.roa
Signing time:             Mon 30 Jan 2023 22:42:07 +0000
ROA not before:           Mon 30 Jan 2023 22:42:07 +0000
ROA not after:            Tue 07 Mar 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        13.166.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c1:fb:fb:5f:85:46:d6:2e:5f:8b:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 30 22:42:07 2023 GMT
            Not After : Mar  7 05:00:00 2023 GMT
        Subject: CN=1a9fdb93-4aed-4c87-aaca-584dc3803802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e9:de:c2:ae:45:b3:57:c6:47:72:7f:0c:f3:
                    10:4c:03:f1:0b:c4:7b:8c:38:9f:da:ce:56:ea:b5:
                    5f:12:4d:51:c0:6f:d4:45:29:bb:e2:04:f9:08:27:
                    6a:b5:e1:2a:23:d5:09:14:e6:6c:2f:aa:dc:bf:20:
                    f8:21:6c:f8:e4:54:74:46:06:4c:65:fd:65:cc:c2:
                    5d:0c:2b:76:2b:21:d3:68:07:78:37:3f:89:65:d6:
                    ee:67:51:c7:35:39:bd:ea:93:34:14:18:7f:31:a9:
                    01:91:bb:8f:35:c4:5e:62:d6:fb:72:9c:65:7f:a1:
                    47:cc:ea:12:a4:78:52:b0:44:b7:ab:3e:89:c7:89:
                    a0:a1:7e:9c:34:c4:c5:33:23:9a:0c:52:31:c6:9f:
                    b1:a1:a6:d0:56:97:cd:a3:60:5d:00:f5:12:fa:f0:
                    33:dd:46:46:8e:14:fd:f8:34:73:a8:d5:16:72:4d:
                    da:68:f6:3b:ed:95:b7:cb:c3:54:32:e5:e7:cd:93:
                    0c:7a:61:41:9b:90:97:23:6f:2d:29:bf:0e:68:31:
                    56:cc:5b:c3:4a:96:73:4c:d5:ad:80:72:17:48:7a:
                    2b:4a:7f:89:aa:37:3e:b4:f8:7d:70:1d:7d:01:65:
                    c9:ad:02:19:b9:4d:b1:68:2a:7c:f0:96:13:90:44:
                    34:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:51:DE:BF:9B:6C:93:47:E0:74:C2:8A:EF:DF:ED:5D:73:45:87:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4db6a242-8d77-3685-87e1-b3ba562e9ff5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.166.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:34:f9:e0:33:ff:e3:ca:07:2b:cb:e6:b9:c8:c8:49:c7:8d:
         10:d8:92:9e:7f:63:99:84:2d:95:2b:73:e4:17:8d:b8:55:e2:
         4e:70:9d:d4:f0:2e:72:49:b9:dd:c7:ca:b6:b3:ef:55:3a:57:
         19:0d:1b:3c:e2:26:97:bf:7e:45:d4:6c:e6:1f:94:3a:ac:3b:
         2e:2b:83:35:ef:b0:6a:37:84:e3:ea:7f:b0:17:98:c4:97:0d:
         25:44:e2:3f:07:d8:77:f6:19:f3:e7:24:a3:47:9b:4b:4b:fd:
         5d:9a:b3:2f:d6:06:65:0a:91:07:88:9d:fd:98:8f:5f:df:b1:
         51:10:e2:61:55:c2:e5:0f:6e:65:5d:1e:9b:66:2d:53:d2:b2:
         c9:79:bc:76:6f:bf:87:9a:9f:7b:b5:68:fa:1c:a0:30:39:eb:
         06:02:d0:4c:f0:12:b8:c6:65:b8:b8:ad:7d:3a:93:29:f6:fc:
         63:41:ac:c0:02:3c:8c:b0:74:37:65:d2:07:4c:45:e2:d5:ab:
         af:37:29:88:a6:70:0d:a3:20:c5:d3:21:fa:9e:91:2c:8f:fa:
         2d:41:83:f7:02:43:25:11:09:1d:ab:75:45:ff:07:a6:b6:50:
         19:48:8f:78:68:1e:54:d2:98:14:26:09:6d:66:23:fd:d2:09:
         52:7a:15:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----