Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/660d4225-3254-3727-a873-5699ac81ad1d.roa
File:                     660d4225-3254-3727-a873-5699ac81ad1d.roa (raw, json)
Hash identifier:          HFiTb/v8bdn90Z+QPQEW5Q93XCcOSjWmuGOTyko4z3g=
Subject key identifier:   2B:15:43:FE:03:BA:0E:D9:3A:0A:7C:A0:BE:4A:02:D3:F9:22:A3:7C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858409C6214DDD6CF95D7814B49C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/660d4225-3254-3727-a873-5699ac81ad1d.roa
Signing time:             Tue 17 Jan 2023 12:00:00 +0000
ROA not before:           Tue 17 Jan 2023 12:00:00 +0000
ROA not after:            Wed 22 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        198.14.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:9c:62:14:dd:d6:cf:95:d7:81:4b:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 17 12:00:00 2023 GMT
            Not After : Feb 22 05:00:00 2023 GMT
        Subject: CN=a65987e7-f69c-4906-be37-2c951c90c81e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a7:06:e0:8d:4b:de:1f:b9:6e:3b:90:d8:8a:
                    5b:68:8b:3d:fc:af:05:0c:a1:b4:b3:c5:3d:b3:63:
                    9d:f9:f6:40:c4:8b:83:64:54:00:fd:bd:3a:c6:9f:
                    07:6b:d6:d5:d6:97:de:a9:c4:04:e8:b3:3a:f6:65:
                    7a:11:b7:47:08:9b:b2:ef:08:3f:27:2a:1e:30:a3:
                    06:7f:96:ec:06:6a:8b:c1:57:e6:5a:ab:d9:62:2a:
                    0a:2f:f4:85:f2:50:b8:7b:0e:ec:78:d4:7d:f0:a8:
                    af:9f:7e:a0:a9:a5:87:84:81:56:04:8b:99:c3:25:
                    60:53:cc:cb:7d:11:48:d2:e5:72:8d:00:f2:2c:80:
                    26:6b:da:6a:aa:16:a4:61:a8:17:3b:e6:59:32:b2:
                    15:83:c3:03:43:5c:ba:ab:4c:4e:e0:23:65:83:a8:
                    cf:5e:af:6f:67:ee:c2:bf:79:48:54:e4:08:45:86:
                    96:2f:fc:26:fa:2a:85:a2:f3:c1:e5:fc:11:67:f0:
                    e6:e4:6e:03:a7:0d:81:99:77:da:f8:b9:0a:21:bd:
                    db:63:34:e6:d9:73:22:64:89:7e:f1:df:6d:51:93:
                    08:ad:10:1c:c4:2d:42:73:44:2b:74:80:9b:1c:85:
                    f5:6a:03:d0:d1:3c:98:00:34:bf:4c:0c:1e:d8:91:
                    e2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:15:43:FE:03:BA:0E:D9:3A:0A:7C:A0:BE:4A:02:D3:F9:22:A3:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/660d4225-3254-3727-a873-5699ac81ad1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.14.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:a2:ee:3f:d5:c1:70:9d:c2:df:67:da:d7:10:31:8c:c9:1f:
         6e:5d:b9:e8:40:bb:64:07:2f:e8:d3:42:af:22:9a:fc:4b:3c:
         20:60:6b:2a:5a:e4:2d:5f:8f:27:95:cc:91:e7:26:c1:42:0d:
         60:9f:84:9d:e8:01:1c:6b:69:5b:d5:93:82:b1:2d:07:32:f0:
         25:f9:21:81:4b:dc:2e:64:f1:89:46:1a:ac:d8:ec:be:14:71:
         0c:76:95:c9:8f:95:68:2c:0b:9c:db:91:22:b8:e5:56:e6:44:
         66:fb:c8:93:78:65:2b:e2:25:49:6f:4d:a0:88:ce:ec:00:f7:
         b4:2b:f7:de:ce:8e:e3:39:f2:3f:e6:c2:47:f8:73:eb:86:6d:
         ca:34:4b:7e:c8:0d:9e:dc:7d:f5:f6:72:92:b6:e6:cf:5d:6a:
         7f:5d:b7:4b:d0:d6:20:68:b1:1a:47:65:4d:4a:b0:92:9d:21:
         e0:fc:31:b1:fa:01:ef:09:e6:08:2a:2b:dd:0f:78:2a:36:d9:
         ad:bd:9e:92:dd:ff:7c:5a:69:b2:de:d5:81:e4:1d:53:79:d9:
         dd:66:f2:ff:15:32:24:ce:a4:fd:45:ec:e6:1f:d6:67:0d:42:
         75:2a:c1:6b:d3:d5:66:8d:41:de:a9:12:46:dc:71:27:0c:48:
         7d:19:29:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----