Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5f09925a-0289-3448-9369-270e58022f22.roa
File:                     5f09925a-0289-3448-9369-270e58022f22.roa (raw, json)
Hash identifier:          Tkvr7BTxDVaA4H9e2C3gYVQTgQWVcpM9tp4vFipdRv8=
Subject key identifier:   C6:E8:DE:82:32:B0:E0:72:40:F1:D0:67:66:0B:E3:1B:23:7F:98:1D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D567C29BD4E51362B1B366380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5f09925a-0289-3448-9369-270e58022f22.roa
Signing time:             Thu 24 Mar 2022 04:00:00 +0000
ROA not before:           Thu 24 Mar 2022 04:00:00 +0000
ROA not after:            Thu 28 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.49.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:56:7c:29:bd:4e:51:36:2b:1b:36:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 24 04:00:00 2022 GMT
            Not After : Apr 28 04:00:00 2022 GMT
        Subject: CN=2a04becd-fba1-4d18-af98-427848c32615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ed:9b:b2:6b:39:57:6c:10:67:e7:5c:e2:a4:
                    99:83:35:8a:4b:9b:84:2b:00:33:58:ff:a0:13:f9:
                    81:b5:c8:1d:ec:28:14:17:f2:d6:41:a6:a6:49:1c:
                    6f:8d:53:55:13:25:b6:59:e0:10:44:0f:6e:34:7c:
                    1e:14:0a:16:a0:fd:ed:ba:d1:bf:98:df:30:5c:75:
                    0f:bf:02:f9:4c:c8:38:ab:4f:11:da:c2:d0:5f:e6:
                    7d:28:87:d9:b5:f6:59:20:88:bd:a5:f5:71:dd:51:
                    0e:f6:8b:39:ba:35:e1:38:f6:4d:e8:5d:88:1f:6a:
                    e6:97:21:92:41:91:d7:0b:34:e7:5d:58:8d:ed:d9:
                    03:6d:20:60:31:a7:14:f5:db:71:e6:65:e3:18:b1:
                    7a:9e:aa:c8:33:96:7d:ed:88:51:5b:62:9c:0c:19:
                    e6:cd:58:25:5a:83:95:57:95:cc:80:64:0c:08:9c:
                    5c:7f:38:30:18:57:22:33:a9:75:1f:93:b5:28:cc:
                    6c:62:d2:b3:23:c7:9d:99:03:21:48:78:15:e7:d3:
                    54:3e:68:8c:fe:18:4f:f2:e8:ec:e0:d8:16:e0:bd:
                    48:26:84:62:ab:2d:6e:9e:7f:53:66:af:e0:e6:f7:
                    f9:b9:32:fc:16:94:6c:35:d1:f0:3f:7b:45:1c:07:
                    3d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E8:DE:82:32:B0:E0:72:40:F1:D0:67:66:0B:E3:1B:23:7F:98:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5f09925a-0289-3448-9369-270e58022f22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.49.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:91:2d:4f:2f:4f:69:25:9f:64:1e:fc:1a:73:56:82:a5:da:
         73:db:6e:0b:a9:28:b5:7a:01:9f:29:97:b4:4b:48:90:4e:67:
         5c:2f:64:99:51:96:b4:68:8d:b9:69:9f:60:9c:09:b8:57:38:
         a5:26:54:27:66:c4:bc:4f:6b:c6:e2:31:19:76:e6:2f:1f:73:
         ed:d4:7d:85:e1:46:20:93:cc:e3:21:89:7e:c2:85:4d:f7:24:
         e7:d3:8e:db:f0:b2:f5:85:bd:5a:e9:0f:45:1a:bb:af:b9:92:
         63:ff:c6:4f:bf:26:13:39:41:47:89:fb:aa:2e:fb:4b:89:d0:
         12:30:27:12:bf:34:20:d8:1d:bc:0f:fe:26:e6:f6:fd:27:a3:
         6f:42:9a:6f:5f:3c:17:69:08:fc:19:75:96:77:23:c9:a0:05:
         25:0e:1a:02:f8:0b:d3:8d:78:c9:94:ca:4e:dc:c6:11:63:ab:
         4d:ce:70:ef:a9:d8:9c:04:ab:5c:23:75:b2:72:da:27:53:52:
         19:50:27:48:8c:4d:fe:3d:8e:3a:d1:2b:76:22:25:a2:7d:b3:
         1b:78:69:49:ba:c6:0a:a8:7d:9a:28:51:fb:a5:12:e2:71:fa:
         28:ab:3d:25:7f:ab:ac:b0:a7:54:87:38:7a:02:da:72:ad:77:
         d8:cc:2a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----