Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/584db1d2-860a-30a5-8dd5-0c3802adfd98.roa
File:                     584db1d2-860a-30a5-8dd5-0c3802adfd98.roa (raw, json)
Hash identifier:          Cr88j3yRzYrHFHCGDqFg5KX4u+XdxGBsdFplLuH9GMU=
Subject key identifier:   57:C2:EE:92:DF:7F:D3:9D:80:7D:4A:F4:90:CD:F0:75:FD:C4:6E:0B
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E8F9FAED956634B22C3CFE500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/584db1d2-860a-30a5-8dd5-0c3802adfd98.roa
Signing time:             Wed 13 Jul 2022 12:00:00 +0000
ROA not before:           Wed 13 Jul 2022 12:00:00 +0000
ROA not after:            Thu 18 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.24.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:8f:9f:ae:d9:56:63:4b:22:c3:cf:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 13 12:00:00 2022 GMT
            Not After : Aug 18 04:00:00 2022 GMT
        Subject: CN=85b34ec9-7547-44dc-875a-f8a94b45c418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:41:aa:e8:a1:03:22:6a:dd:72:5e:b9:c2:a6:
                    db:e3:1e:65:98:c2:cb:ed:4c:85:2c:67:9e:ea:74:
                    45:37:6c:4b:78:33:c4:a3:a1:70:29:4b:39:e3:78:
                    e7:ea:27:83:f0:ed:d5:58:20:44:21:d7:ad:99:f7:
                    85:b0:0a:7f:75:c6:a7:b1:3b:ce:22:5e:dd:f5:79:
                    96:b9:de:10:a4:b5:83:13:dd:08:6f:09:2e:2e:ae:
                    c5:90:66:b2:f0:7d:06:58:4e:31:2e:7e:a1:c5:d1:
                    5d:4d:c8:1c:2b:0b:c7:29:8e:62:aa:d3:09:f6:a5:
                    7c:9a:f3:e3:6d:2b:d5:eb:63:0f:5b:f8:e9:81:72:
                    58:50:f4:ef:30:18:8f:65:7a:ee:5f:6e:68:d3:0b:
                    65:e7:90:7d:14:2d:da:f6:dd:00:d4:00:93:38:51:
                    7b:ac:82:71:1f:e5:ee:64:20:6f:23:14:17:5d:97:
                    c3:a3:92:b8:d3:de:09:ba:96:ca:f2:b1:53:67:11:
                    a7:73:90:a7:0f:41:0f:86:4c:95:97:c4:1f:bf:a4:
                    32:c4:7b:30:18:d9:22:1e:08:0b:3c:c5:eb:17:e0:
                    cd:30:8a:5f:a4:9b:fb:64:7e:f1:9d:7f:b7:e2:3d:
                    28:6e:84:72:f3:4e:66:f0:29:2b:fb:4d:bb:dd:fc:
                    ea:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C2:EE:92:DF:7F:D3:9D:80:7D:4A:F4:90:CD:F0:75:FD:C4:6E:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/584db1d2-860a-30a5-8dd5-0c3802adfd98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.24.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:8c:85:3a:41:67:a0:e2:16:bd:2b:09:39:f2:c6:db:b4:bf:
         a4:4c:e3:16:66:27:86:79:8c:63:ce:68:4e:d0:18:75:75:39:
         95:6b:d9:c7:55:23:fd:6b:05:45:f6:e2:20:7d:99:90:6e:ba:
         0c:7f:92:fe:78:ed:ff:94:70:37:b8:96:6e:55:ad:dd:40:f6:
         43:07:f3:be:32:7e:d9:7f:a0:bc:33:7a:89:5d:c8:f9:c5:b0:
         01:77:c9:30:c2:54:01:7b:e8:2c:81:69:3d:cd:71:c0:78:e9:
         95:ce:c1:d8:ce:12:d1:70:6e:60:d9:42:b6:1c:9e:46:05:39:
         8a:c5:97:9f:a2:f4:b5:29:13:f8:52:bc:ad:5c:97:c9:a6:17:
         bb:c7:e7:e3:7b:b1:8d:5a:3f:0c:5a:34:1d:40:61:3d:48:ab:
         2b:97:9e:34:8b:12:f3:29:ad:65:6d:60:d4:63:90:cd:6a:2b:
         e3:4b:77:b8:20:81:84:84:95:ea:31:00:47:6d:a3:06:df:30:
         65:99:38:aa:b9:56:ce:ee:e6:ae:8b:ff:c8:e5:57:db:a5:94:
         06:bc:c4:28:71:db:e4:6f:b1:4d:dc:e5:ec:05:0b:32:d8:6e:
         84:d8:0b:89:64:8c:9e:db:e2:97:f2:4a:6b:2c:7f:89:33:b5:
         93:5f:91:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----