Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6281bc82-c1f4-3a23-b613-a8b9201cb947.roa
File:                     6281bc82-c1f4-3a23-b613-a8b9201cb947.roa (raw, json)
Hash identifier:          eJhUCmLJKKoNwSNwe0qbVM0kNwEiMLs1iYuTri8Aj7w=
Subject key identifier:   53:DE:36:7C:F6:0D:E8:6B:39:0E:52:D7:89:5C:B3:03:2A:3C:BC:24
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F8AD9DC5D229410D62BB34F00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6281bc82-c1f4-3a23-b613-a8b9201cb947.roa
Signing time:             Tue 11 Oct 2022 18:48:07 +0000
ROA not before:           Tue 11 Oct 2022 18:48:07 +0000
ROA not after:            Wed 16 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        56.109.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:8a:d9:dc:5d:22:94:10:d6:2b:b3:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 11 18:48:07 2022 GMT
            Not After : Nov 16 05:00:00 2022 GMT
        Subject: CN=13d22759-9011-47a3-8926-a11e693a30e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2b:b9:2f:2f:71:da:99:92:1e:40:8e:d2:d4:
                    fe:79:35:f2:ec:79:a6:a2:9c:69:4f:c5:32:e3:23:
                    c7:9a:c9:3a:7a:28:c3:7f:9f:31:80:22:9f:79:3d:
                    4c:8b:d8:97:14:fc:4c:70:04:45:82:ea:2e:86:ff:
                    88:97:7e:ae:ff:19:8c:c8:2a:89:7d:fb:f3:34:44:
                    cc:26:dd:7b:9d:86:40:a2:4c:a9:65:10:bc:69:92:
                    4d:ee:c4:26:b1:b5:13:3e:39:f0:7a:c7:13:7b:72:
                    72:86:27:5c:68:96:4d:c6:fa:7a:ec:3c:1e:75:b7:
                    88:bc:b9:9e:13:2f:f3:6b:21:db:3c:df:75:b0:c4:
                    7d:6a:4a:04:93:62:8e:89:45:13:0b:68:28:04:e2:
                    5a:10:11:b1:fb:b3:6f:4d:00:9c:6f:e3:d9:33:52:
                    f9:d3:c3:a1:72:95:3a:f3:d6:23:8c:ad:4b:2e:30:
                    82:0e:0a:c3:42:cd:fb:92:b8:3e:3f:c2:b5:77:47:
                    3f:02:d1:e6:d2:10:21:0c:35:8f:3d:47:e8:56:9d:
                    05:10:87:eb:2c:16:a9:a4:f9:ab:04:68:cc:47:66:
                    b9:fc:88:33:41:6a:07:e3:40:f9:ca:15:75:80:bc:
                    65:81:9d:66:56:72:b2:e3:27:f1:59:b3:4a:94:d6:
                    d8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:DE:36:7C:F6:0D:E8:6B:39:0E:52:D7:89:5C:B3:03:2A:3C:BC:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6281bc82-c1f4-3a23-b613-a8b9201cb947.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.109.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:6c:d4:05:14:be:14:a3:fd:b8:3f:a6:21:b5:4f:af:f4:d9:
         f2:17:52:e2:9e:44:1c:8f:98:cd:56:60:cb:e2:03:c0:8e:f9:
         b3:f7:dc:27:4a:12:89:82:70:52:09:b3:14:cf:47:1c:72:68:
         24:d0:00:09:e7:58:92:8e:e4:8e:e5:63:16:1d:ef:06:56:7e:
         67:bb:67:7c:a5:34:e4:e4:74:14:98:9c:d3:03:81:97:ad:de:
         2a:94:d0:61:24:ac:c7:d6:95:59:14:24:ce:93:ef:39:2f:1f:
         22:ac:8b:7d:11:7f:a9:a9:9f:31:0f:8d:55:b3:1b:ef:96:0f:
         47:5e:e1:f8:a4:42:fe:cd:b5:07:c0:df:c2:33:3d:45:72:c5:
         bc:67:57:d0:5d:b1:80:fb:af:f7:2d:cf:96:57:52:28:f2:83:
         69:b3:48:4b:92:01:0e:71:5c:31:f2:e4:9f:f7:65:6b:b3:bd:
         35:ad:c9:93:9f:14:1a:ff:ea:45:69:56:b2:89:25:86:a5:a2:
         31:c7:d3:6e:c3:b1:62:ff:64:c7:f2:98:47:a1:8e:4f:f7:4b:
         7e:69:fd:c7:29:eb:41:70:74:31:a2:a8:97:43:4c:bd:97:4c:
         db:93:b4:da:3d:12:da:bd:15:4a:f0:2e:09:cd:50:b6:56:62:
         91:6d:60:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----