Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/60087dd7-3a7f-31a1-af93-7dc8f520775d.roa
File:                     60087dd7-3a7f-31a1-af93-7dc8f520775d.roa (raw, json)
Hash identifier:          WnMTi7VDo/slJwvElgPMyqHQiJrlVZfh5tFVFc4WNbM=
Subject key identifier:   FB:F4:FC:62:8A:02:96:46:DB:97:B8:C5:F8:21:29:89:F5:47:33:D2
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584091E25523E100ADAE82151580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/60087dd7-3a7f-31a1-af93-7dc8f520775d.roa
Signing time:             Fri 13 Jan 2023 12:00:00 +0000
ROA not before:           Fri 13 Jan 2023 12:00:00 +0000
ROA not after:            Sat 18 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        67.202.0.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:91:e2:55:23:e1:00:ad:ae:82:15:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 13 12:00:00 2023 GMT
            Not After : Feb 18 05:00:00 2023 GMT
        Subject: CN=354bd65d-4164-4e7f-b849-385b13d9afec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6e:71:cb:a0:d0:80:3e:b9:f5:41:7d:3f:f0:
                    00:1b:2e:0b:74:97:50:2b:29:75:f9:3d:08:16:6a:
                    68:72:69:96:7f:2f:1a:83:27:e7:64:d0:cf:77:46:
                    70:25:cb:04:d0:7a:2a:cc:d0:b2:38:98:f3:1d:73:
                    4c:8d:9b:15:17:c1:52:32:a5:e0:02:4c:dd:71:21:
                    c8:a4:0d:21:da:9f:b9:a2:4b:d3:96:5c:d9:e6:c2:
                    7b:17:82:b2:7f:40:a4:2b:4f:6c:b2:09:c0:da:7c:
                    5b:f8:9b:2e:5b:71:82:08:61:86:aa:c4:20:79:d9:
                    b2:65:bd:25:2b:08:23:66:68:28:a1:4b:0a:51:55:
                    62:fc:d6:31:06:f0:42:93:ba:94:c3:6a:7e:f0:77:
                    bb:a6:31:10:84:f6:db:f0:ab:61:76:a3:be:72:4b:
                    dd:9d:a1:8a:e1:61:38:22:a5:24:ce:f6:51:1d:b3:
                    45:51:ee:5d:e7:16:5c:e9:0b:0d:0f:a2:23:18:05:
                    8e:4e:b0:08:a9:99:85:39:e5:7c:23:10:12:eb:10:
                    b6:6b:b0:6c:71:3a:8b:29:0d:86:d6:6c:9e:ee:bf:
                    44:c3:38:a9:b1:f2:87:74:84:ed:cd:c3:4e:68:e6:
                    62:f6:26:04:85:e0:2f:42:93:0c:2c:36:a3:1c:bc:
                    29:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F4:FC:62:8A:02:96:46:DB:97:B8:C5:F8:21:29:89:F5:47:33:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/60087dd7-3a7f-31a1-af93-7dc8f520775d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.202.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:10:f5:c4:ac:55:49:d7:90:c7:ba:5b:15:cf:78:06:f2:c3:
         f5:1d:19:11:70:8b:b5:cf:22:e6:e0:78:4b:1f:ff:0f:28:9b:
         4b:20:11:10:fe:26:83:c7:f8:43:38:90:dd:cc:20:5a:56:fc:
         eb:8e:f8:3b:70:71:4c:41:82:17:56:a4:fb:47:17:97:a1:c4:
         65:e8:67:26:85:8b:4a:71:90:4d:f2:0a:93:b6:a2:6c:ca:ff:
         ed:9a:38:bd:65:93:a5:f4:55:cb:60:ef:c2:f5:6c:83:d0:a5:
         a5:4d:91:d1:31:05:c0:d3:7a:fe:66:c6:38:8b:1f:a0:ee:46:
         50:c3:cb:7c:ff:ff:62:4a:7a:85:b8:4f:9a:58:60:fc:d5:29:
         4b:b1:0b:52:70:88:26:ff:04:25:e3:a7:e8:f9:b5:23:11:f6:
         8b:c7:92:bf:3d:de:ab:b5:1a:03:e6:ea:19:33:18:4e:01:b7:
         ab:34:15:87:65:7e:d5:25:c1:5e:96:ff:27:54:1f:01:7b:20:
         d4:ce:8e:cf:86:b0:17:3b:98:26:e2:3b:89:01:6c:af:a1:2d:
         c9:ee:6c:77:8d:22:8f:df:b5:90:fe:c6:37:99:30:b3:c4:49:
         f5:14:c1:0f:8d:eb:33:dd:ce:4b:bf:09:92:af:ab:5b:c8:f4:
         99:70:bf:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----