Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5fbb813a-22da-357f-9e6b-721297a888ab.roa
File:                     5fbb813a-22da-357f-9e6b-721297a888ab.roa (raw, json)
Hash identifier:          ABB8YBEnLmHDgjXhZ7fr+nfI0zPuC6B1ZM1vxMLYFc8=
Subject key identifier:   93:B7:9A:8C:4F:E9:55:80:3E:2E:FD:43:D1:52:E6:53:5E:EC:4D:BF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E4341FD6CB8CFAF25EF8D53C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5fbb813a-22da-357f-9e6b-721297a888ab.roa
Signing time:             Wed 15 Jun 2022 12:00:00 +0000
ROA not before:           Wed 15 Jun 2022 12:00:00 +0000
ROA not after:            Thu 21 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.90.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:43:41:fd:6c:b8:cf:af:25:ef:8d:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 15 12:00:00 2022 GMT
            Not After : Jul 21 04:00:00 2022 GMT
        Subject: CN=2813f77e-fd0a-4a7a-bfb8-b298bd7fd074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c4:10:b3:4d:49:bd:47:cf:4f:5f:42:59:0e:
                    9a:6a:b7:e4:6c:4b:82:fa:5d:82:1f:07:5c:11:1f:
                    d3:b1:43:01:48:3d:49:d6:82:8b:6e:11:1e:67:10:
                    a4:99:96:d5:e4:a8:8d:16:f8:a0:5a:ea:ea:00:cd:
                    63:43:56:a7:fb:2a:34:ee:4c:c4:47:36:34:d4:46:
                    a0:1d:1b:78:6a:7d:e4:26:eb:47:33:37:9f:64:e9:
                    85:2d:6f:90:3c:a3:73:89:8c:3d:f3:41:a3:f1:ab:
                    a8:92:b0:01:86:1b:fe:c4:53:f0:f3:c0:51:1a:5d:
                    96:42:23:2e:97:02:71:c3:2e:26:65:2e:ef:ad:70:
                    93:3e:ed:1a:d9:a3:27:5c:d0:ce:b2:52:a6:8a:2e:
                    97:6d:46:06:16:cd:80:de:16:49:95:3c:98:4e:e1:
                    33:df:9a:a2:7a:17:29:5d:ed:e3:21:da:f8:b2:8d:
                    b9:d9:af:10:55:a7:af:27:73:52:1a:a6:70:22:7d:
                    91:59:9d:e6:8d:35:ea:de:06:bf:95:44:a9:43:d4:
                    2a:22:9e:c4:37:b1:5e:f5:ed:9b:f4:cf:c5:49:2a:
                    24:c8:ec:7d:0f:1c:fa:08:2b:9a:5a:1e:5a:33:f0:
                    8e:03:c6:03:c1:d9:35:b7:e1:d1:c7:e0:a9:e9:96:
                    f6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B7:9A:8C:4F:E9:55:80:3E:2E:FD:43:D1:52:E6:53:5E:EC:4D:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5fbb813a-22da-357f-9e6b-721297a888ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.90.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:c6:0b:1d:ea:20:cf:e0:04:08:59:82:a1:aa:19:00:9b:ac:
         90:04:a4:d0:e1:d0:21:7c:d0:81:98:a7:00:f1:7c:a0:44:ee:
         e6:64:f3:f8:f2:75:a9:e3:ce:cd:b9:b5:de:a9:bb:55:5c:9c:
         b3:06:f5:5d:cd:7e:83:74:f6:10:2b:cb:42:1c:6c:82:35:f5:
         61:2a:6d:fb:3c:68:46:20:26:70:54:e5:ec:8f:63:6e:54:71:
         a9:b9:a6:8f:0d:62:d5:b0:07:65:22:9e:1a:f0:09:40:c9:68:
         2c:e6:c7:c9:4e:67:d9:04:4e:d8:01:7b:c4:0f:55:e5:0c:2f:
         f5:00:c5:2a:6f:07:a0:cc:10:27:79:d1:e9:97:61:88:87:2f:
         fa:75:37:c3:6d:78:ed:bd:7f:5a:2a:74:7d:13:23:23:66:fe:
         2f:3a:f5:5a:85:62:04:fe:76:93:c6:56:11:9a:1f:2b:4d:f7:
         1f:f1:55:12:6b:61:5e:6f:f9:51:64:55:8c:f5:ca:38:4b:83:
         f5:6a:7d:67:71:63:63:d5:97:48:8e:ef:79:7e:a0:2f:da:90:
         4f:1d:99:d7:f1:ee:a9:a1:4f:0d:1d:04:ac:20:19:be:4e:40:
         39:46:b3:72:6a:a8:cf:66:1e:62:68:6a:4c:69:c8:cc:23:8c:
         36:a6:38:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----