Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/59a40eeb-4876-35db-830c-7ad0d550ab47.roa
File:                     59a40eeb-4876-35db-830c-7ad0d550ab47.roa (raw, json)
Hash identifier:          zJWNo41RObbaKLlVuLPPGfibetmpwEt/KVpOUzVSCQw=
Subject key identifier:   4D:F1:84:58:90:78:28:8C:F2:2B:EE:34:D0:8E:9F:F6:BD:39:D0:CD
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E4727F0D2464260392B75D800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/59a40eeb-4876-35db-830c-7ad0d550ab47.roa
Signing time:             Fri 17 Jun 2022 12:00:00 +0000
ROA not before:           Fri 17 Jun 2022 12:00:00 +0000
ROA not after:            Sat 23 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        99.78.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:47:27:f0:d2:46:42:60:39:2b:75:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 17 12:00:00 2022 GMT
            Not After : Jul 23 04:00:00 2022 GMT
        Subject: CN=5fd704a2-824a-4c87-bf33-6d36eda4408d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:06:5a:72:64:b4:a9:e2:98:3c:ce:14:67:fe:
                    c3:d4:9d:66:20:9e:48:32:5a:8b:19:9e:b9:a6:0b:
                    08:c2:ab:2a:3a:ee:fe:31:52:9d:c6:0a:35:d9:17:
                    6d:d5:b5:e9:d0:1c:61:c6:37:ae:46:c2:53:24:cc:
                    76:cd:57:0a:a6:1d:b5:e0:35:fb:01:d2:20:b6:68:
                    d2:cd:3e:f0:70:d6:1e:a0:2c:34:7a:46:2a:be:3e:
                    40:8d:fe:84:db:5b:da:65:dc:5f:45:58:fb:f8:b0:
                    2c:a3:8f:1a:de:6c:00:16:8f:43:e8:93:04:1c:66:
                    50:61:94:73:a5:b2:0e:21:af:89:1c:7f:78:fc:6a:
                    f0:5e:c3:dd:ac:12:29:7e:c4:f7:fe:87:eb:04:08:
                    59:8f:21:d7:08:2a:2e:6e:f9:4c:21:29:2e:47:1d:
                    04:d1:5c:9a:18:e8:d5:7f:1d:5d:d4:11:9f:60:1e:
                    c1:a0:c6:6c:6b:12:ee:d4:49:cd:4f:fb:24:b9:14:
                    6b:f7:2c:7f:03:29:52:fc:c5:07:55:6b:f4:17:e3:
                    bf:4e:15:21:12:e8:8f:51:c1:cf:79:53:97:18:f2:
                    72:bb:33:60:c0:c4:f2:6b:12:43:33:15:37:ee:c7:
                    44:5d:28:c8:94:64:34:0d:fe:28:80:ec:00:6e:b8:
                    c2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F1:84:58:90:78:28:8C:F2:2B:EE:34:D0:8E:9F:F6:BD:39:D0:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/59a40eeb-4876-35db-830c-7ad0d550ab47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.78.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:2d:99:d2:0a:14:d5:aa:14:91:b6:48:10:83:e5:f5:06:9a:
         30:b3:cc:8d:42:a5:37:d3:40:9c:7e:49:08:40:15:14:f7:67:
         b1:da:50:24:a3:20:51:bc:2b:3e:51:26:de:65:47:3e:ae:26:
         ee:a1:c3:3b:46:3b:b9:41:56:c8:e1:a8:a3:5f:f3:eb:81:4f:
         d5:bd:14:78:dc:2c:70:68:37:12:b9:73:75:3f:19:c4:66:9c:
         8e:33:20:aa:31:e5:91:9e:c9:6d:b2:df:fa:19:fa:df:c7:85:
         fe:ac:0f:c1:5f:99:82:5d:18:57:70:fa:11:00:f4:bd:b4:19:
         65:1e:b3:6a:70:62:35:a3:03:cb:74:53:fc:ba:9a:ae:13:c7:
         ca:75:0c:15:d0:9c:dc:0a:69:b1:10:84:56:83:db:75:26:25:
         73:79:53:09:e6:7f:0f:52:fe:3d:d8:e2:96:96:30:ab:35:06:
         70:e8:15:cf:d6:d9:3d:01:35:02:8d:16:6d:c4:ce:64:eb:53:
         08:7a:44:ca:d7:18:1f:76:e1:3a:6d:13:20:9b:04:04:22:e5:
         05:8a:37:72:e3:a9:26:47:85:2f:ee:72:5b:81:7c:24:63:80:
         38:ec:62:bb:b0:97:93:8b:a2:4f:a0:99:24:39:ac:b1:35:ae:
         0a:d6:cb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----