Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6a0e247f-7630-3a99-8618-32f5ebfd08f1.roa
File:                     6a0e247f-7630-3a99-8618-32f5ebfd08f1.roa (raw, json)
Hash identifier:          4Dcj4yZWkmPyWhBkK+GCFPI8kCMSXekn8SyYsShte0M=
Subject key identifier:   02:90:0B:C2:3D:65:0C:84:DD:79:F9:18:3A:35:F0:18:B6:9F:9E:AC
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DF2FF133C2585A065AEF6B900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6a0e247f-7630-3a99-8618-32f5ebfd08f1.roa
Signing time:             Wed 18 May 2022 12:00:00 +0000
ROA not before:           Wed 18 May 2022 12:00:00 +0000
ROA not after:            Thu 23 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.102.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f2:ff:13:3c:25:85:a0:65:ae:f6:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 18 12:00:00 2022 GMT
            Not After : Jun 23 04:00:00 2022 GMT
        Subject: CN=8f173632-4460-49c1-b71b-e67a5ec0570f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:16:5f:92:48:d4:d0:f1:b0:82:48:01:ce:a0:
                    c7:29:54:64:a6:ae:f5:2b:82:aa:31:9d:39:6b:bb:
                    62:67:74:93:21:c3:0d:56:41:c3:45:df:e9:4b:13:
                    e0:77:8e:bb:bf:e5:a9:7a:f2:7a:7d:99:39:a5:8c:
                    46:bf:8a:7d:d8:22:5c:b0:73:d1:33:8c:73:ae:ca:
                    20:8f:d7:40:1c:26:86:73:ed:33:df:de:2c:8f:3f:
                    c4:7f:7f:63:5f:35:15:e2:3e:b5:cc:a2:7b:ad:3d:
                    ce:ad:0c:ee:60:a0:53:b8:57:5c:d3:bd:00:d2:bd:
                    f8:9c:c4:8a:09:66:10:b6:4d:9d:9c:82:a2:8d:9c:
                    ee:f5:bc:db:dd:90:7f:ef:8b:00:af:06:e7:96:91:
                    67:e2:eb:9b:97:54:a7:4f:87:d2:c8:56:12:a6:79:
                    56:c4:d6:0a:68:a0:e0:37:c6:ec:c0:ec:11:2f:61:
                    af:aa:83:94:d3:ab:a2:9d:87:a0:10:97:e5:d8:bc:
                    fc:c0:52:1d:71:17:fc:05:36:47:c8:c6:81:30:3a:
                    98:34:6a:81:6d:ed:25:15:7b:1f:22:ec:7d:b2:30:
                    04:20:f4:9f:7a:a1:5b:c2:60:bb:c2:74:0c:02:c1:
                    c1:22:ea:a4:80:e7:03:e5:c8:eb:3c:fa:bc:8b:b9:
                    43:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:90:0B:C2:3D:65:0C:84:DD:79:F9:18:3A:35:F0:18:B6:9F:9E:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6a0e247f-7630-3a99-8618-32f5ebfd08f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.102.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:5c:4e:e7:8b:7f:23:34:b6:39:7f:82:da:ee:f8:4c:90:ca:
         48:e0:b4:a9:9d:0f:f5:5a:0c:aa:22:3c:3b:05:bb:3e:e0:ff:
         47:0e:e8:6d:0b:05:78:ef:8e:cd:da:cb:39:f9:5b:21:f8:00:
         63:83:4e:a3:8f:92:c7:22:6d:a1:60:b7:92:2f:34:03:d7:91:
         14:9d:48:31:d3:2a:96:85:2a:de:7a:48:78:d7:1d:4f:e2:ab:
         d9:79:68:2d:a1:f2:07:7b:d5:fb:b4:4b:8f:aa:4d:13:b4:80:
         82:d3:00:17:03:3f:70:b6:0e:33:b4:bd:e1:3c:47:13:ff:c5:
         15:8b:43:ab:ce:36:37:11:b4:09:69:4e:fc:20:6c:2f:0d:9a:
         d4:4d:19:52:e8:c0:f7:9b:a8:5b:2e:ff:b3:05:c6:aa:c1:9b:
         d1:12:a2:b4:6b:8c:92:a9:d3:41:66:f8:3b:15:55:cc:32:e0:
         50:26:06:38:9a:07:29:1f:92:3a:73:e8:d6:05:ed:13:f7:3c:
         e0:b3:7b:40:0b:e8:33:27:60:d4:f4:93:81:37:d7:53:85:52:
         77:cb:11:14:99:54:27:f2:ab:e2:74:4a:a9:20:78:ea:57:3d:
         db:1a:28:3b:63:a2:c6:dc:26:69:46:4a:89:64:3d:05:b8:b2:
         f5:79:b9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----