Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/593661be-c6da-3979-953c-4c904d9a213e.roa
File:                     593661be-c6da-3979-953c-4c904d9a213e.roa (raw, json)
Hash identifier:          5SoeKoWcDCjOAK5O1Ro58L2/GK1LctB0j9ixZekcHIs=
Subject key identifier:   E4:C6:01:63:FD:C8:2C:F0:A6:64:CE:D1:88:00:FF:84:53:FE:E9:A5
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FDE750E03E83E716292C94DC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/593661be-c6da-3979-953c-4c904d9a213e.roa
Signing time:             Thu 10 Nov 2022 12:00:00 +0000
ROA not before:           Thu 10 Nov 2022 12:00:00 +0000
ROA not after:            Fri 16 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        182.28.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:de:75:0e:03:e8:3e:71:62:92:c9:4d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 10 12:00:00 2022 GMT
            Not After : Dec 16 05:00:00 2022 GMT
        Subject: CN=871012fa-3344-4542-9b02-749cccde1ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e6:a5:75:30:81:2b:9d:82:17:49:a9:13:de:
                    c8:c8:c7:58:24:c5:b6:9d:15:cc:59:9a:de:f8:c6:
                    9d:05:67:4e:ba:79:83:98:8f:aa:11:62:89:ea:56:
                    2e:4f:91:64:78:7c:4c:a1:ab:9e:a4:dc:cd:81:9b:
                    71:a6:54:1b:64:f9:1f:8f:15:1d:a4:b6:05:50:0c:
                    2a:e0:c4:4f:69:bc:9f:cc:d3:77:53:fd:47:59:e2:
                    a8:99:5b:eb:36:6e:e1:37:42:0f:ea:f8:74:bc:7d:
                    79:8b:22:1b:c2:d8:f9:66:96:24:5b:f6:5d:00:e8:
                    9b:68:d2:40:dc:08:a6:49:ca:fa:73:70:31:94:0a:
                    65:9c:46:37:f7:4a:34:41:4a:ba:4f:04:6c:fa:2a:
                    a7:1b:02:5f:47:51:18:bf:7f:dd:ab:ad:14:d9:72:
                    68:7a:64:6b:5f:b4:ae:67:06:42:1c:4d:2d:11:b3:
                    bb:b3:f6:10:ec:f8:a8:e3:52:84:c0:11:13:f1:bf:
                    5a:b1:c1:7f:89:8a:e2:c9:f5:17:00:f9:4e:46:6c:
                    d5:c8:f5:05:a0:da:11:5c:cc:3f:1d:22:ad:b9:30:
                    42:60:78:08:3a:04:50:24:0c:67:f3:5b:4e:11:29:
                    71:17:41:90:e7:73:59:0b:b4:4e:e5:aa:da:ab:5d:
                    17:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C6:01:63:FD:C8:2C:F0:A6:64:CE:D1:88:00:FF:84:53:FE:E9:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/593661be-c6da-3979-953c-4c904d9a213e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.28.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:4b:6d:78:f8:29:18:cb:1f:0e:fd:73:81:7c:d1:78:39:8c:
         de:ef:60:c0:8f:3a:52:83:6d:20:e4:f1:54:92:89:48:e6:cd:
         b0:b9:e2:06:d7:c6:c0:03:8d:57:4c:a4:e7:e9:f4:74:6e:4b:
         dd:43:06:df:84:34:26:12:14:28:5a:b2:ad:4b:23:7e:b1:1b:
         43:9a:c7:3d:83:42:0b:a9:e3:0e:ba:c0:c6:a5:0b:ee:75:bb:
         18:39:b3:41:c2:67:ed:4e:9d:a4:dd:02:86:1b:eb:1a:98:19:
         a1:1a:02:5a:73:27:78:75:b2:c5:e3:24:fb:e2:f3:3e:5e:7f:
         5a:af:7b:5f:e6:42:74:cd:da:4d:b1:e9:9f:ae:87:ad:16:8e:
         48:47:8b:14:26:a3:bb:f3:39:d9:b9:82:d4:1d:80:9e:b8:e2:
         d7:31:ca:82:2e:75:2c:20:95:80:8e:50:94:e2:8e:e2:45:f6:
         00:19:9d:b3:11:c2:6a:d3:9a:1d:ed:45:51:2d:dd:f3:83:27:
         bb:29:4e:a4:43:c1:96:33:01:f3:8d:77:58:f6:c1:90:68:f4:
         8e:6f:8c:34:28:f3:7a:ed:e0:56:3d:b8:aa:a1:8a:4b:e6:4b:
         34:d3:6c:f4:1e:1c:cd:cf:3b:f8:73:22:ed:23:28:15:5f:52:
         d1:9c:cf:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----