Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5cb37048-c7f4-359c-8165-835310dca3cd.roa
File:                     5cb37048-c7f4-359c-8165-835310dca3cd.roa (raw, json)
Hash identifier:          Wzbr0zWPNr/VtoVCr5q8gXdjVdYsNrW9MBqdxr7PrGk=
Subject key identifier:   D3:50:F1:2F:36:0C:74:4F:30:C8:5C:2C:9E:3F:8A:24:59:7F:6F:4C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858409F7E6EFF2C9631486C319080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5cb37048-c7f4-359c-8165-835310dca3cd.roa
Signing time:             Wed 18 Jan 2023 12:00:00 +0000
ROA not before:           Wed 18 Jan 2023 12:00:00 +0000
ROA not after:            Thu 23 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        16.187.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:9f:7e:6e:ff:2c:96:31:48:6c:31:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 18 12:00:00 2023 GMT
            Not After : Feb 23 05:00:00 2023 GMT
        Subject: CN=5b3fe955-9712-47e1-ac69-0f0684b47037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:97:a5:3a:19:f2:32:0c:2f:a1:d9:26:2b:7c:
                    54:cd:48:99:d9:e4:36:59:15:64:a2:c4:c7:1f:7f:
                    f2:97:35:94:87:2a:c8:5f:b9:46:bb:88:6c:12:b2:
                    75:48:f0:52:ef:63:3e:69:db:32:ec:a5:9f:31:f7:
                    1b:34:2c:2c:0a:45:ac:fa:5d:9e:b9:fe:e0:f1:70:
                    b4:70:15:f8:0d:b6:69:96:2e:0a:79:d9:38:f4:c9:
                    44:d6:2b:08:d3:4f:8d:eb:20:be:ac:67:bb:7b:d6:
                    02:2b:35:cd:23:97:7a:1c:9e:da:bd:fb:e9:24:2e:
                    d6:84:97:56:b7:36:a9:2b:ad:85:13:1a:84:ff:81:
                    ae:68:04:f3:cd:9c:04:c6:2d:b2:0b:94:d5:b5:00:
                    c5:8a:89:12:52:d1:79:65:a8:19:65:2a:bd:81:71:
                    fc:45:26:40:98:a0:cf:83:c0:38:63:09:21:d7:19:
                    05:8d:e0:c8:57:b6:f8:26:ca:f3:a4:02:c3:35:3b:
                    74:03:6a:16:b9:6c:2a:5b:ff:3a:a6:28:c8:d5:07:
                    67:24:0d:ae:68:a7:8d:c2:19:19:97:04:a1:e6:28:
                    82:d0:ee:08:b5:fe:0c:dd:96:e4:4a:0d:ca:bc:f3:
                    90:dc:25:6c:31:32:1d:b2:84:c9:0b:bb:68:8e:0d:
                    2a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:50:F1:2F:36:0C:74:4F:30:C8:5C:2C:9E:3F:8A:24:59:7F:6F:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5cb37048-c7f4-359c-8165-835310dca3cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.187.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:5b:a1:e7:69:90:bb:c9:88:8e:b6:fc:4d:84:31:48:58:73:
         e4:d6:2f:fc:fb:21:f7:34:fc:d1:be:a5:d9:ad:c5:d8:3b:12:
         36:1f:d4:67:10:78:73:29:8a:3b:56:b7:8d:fd:ae:13:4d:4c:
         16:a2:c0:ff:f4:de:9e:40:ce:7f:d5:75:6f:ee:39:f7:43:d3:
         6a:7c:92:c4:e4:a9:76:a4:50:f0:5c:e6:3e:35:88:51:a2:d5:
         3d:da:3d:92:77:f1:f1:05:30:e7:5b:95:f6:ba:93:a9:3b:d1:
         74:85:2a:60:f0:05:1f:3d:2b:c5:72:39:cc:9e:6b:1c:eb:c0:
         ca:80:66:be:a2:f8:45:63:ef:ce:a1:32:b9:7d:c7:64:b8:dc:
         2d:01:a5:96:ee:c1:d5:78:8f:d5:55:6f:d1:1a:fe:b3:de:1d:
         47:d2:98:f2:8b:e5:fd:03:ef:74:cc:63:7a:40:cd:f9:e6:ba:
         cd:cb:95:e2:16:88:b5:86:42:4e:08:25:c4:11:27:44:2b:c4:
         71:df:5e:47:15:db:9e:5b:6d:db:6a:d6:47:0d:7b:6f:ed:db:
         8b:d3:1b:cb:80:6c:83:f9:cf:56:95:64:f2:8c:a2:80:c0:1c:
         7a:b8:64:04:1e:cf:6e:7e:a8:7d:f6:4b:4f:16:e2:99:b5:1a:
         21:03:ef:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----