Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6f474ab6-be0e-3ac1-a7d7-828bc616d068.roa
File:                     6f474ab6-be0e-3ac1-a7d7-828bc616d068.roa (raw, json)
Hash identifier:          JUqpsLtQvJdS+OOWC3Vcbd3W7XG7pEUifcavJzhFLlo=
Subject key identifier:   59:BF:19:9A:DC:6F:DB:35:09:53:0F:B1:35:C4:46:E4:2D:6D:75:54
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F5760BC0B4AFD3DB28ABDFC80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6f474ab6-be0e-3ac1-a7d7-828bc616d068.roa
Signing time:             Thu 22 Sep 2022 12:00:00 +0000
ROA not before:           Thu 22 Sep 2022 12:00:00 +0000
ROA not after:            Fri 28 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        54.20.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:57:60:bc:0b:4a:fd:3d:b2:8a:bd:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 22 12:00:00 2022 GMT
            Not After : Oct 28 04:00:00 2022 GMT
        Subject: CN=d7fad3de-fb78-4ae3-9c9f-576d5884f282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:73:c0:c1:c2:38:82:7e:4f:78:4a:bd:0e:9a:
                    ce:c6:58:25:e4:45:b6:67:da:7a:1c:06:b8:4e:07:
                    5d:d2:a9:63:62:01:ca:93:27:3f:6a:91:f7:64:91:
                    5e:32:0f:b1:e0:0b:e9:41:a5:89:a4:d1:69:20:b2:
                    da:fe:a2:f8:9c:b0:9f:91:8d:d1:a3:01:94:87:e7:
                    b1:9d:3d:c5:e6:db:65:ef:ce:ec:4e:71:86:2a:13:
                    91:1b:47:d4:3d:0e:41:cd:c1:be:22:b0:5b:d0:cd:
                    38:5b:8d:73:e5:83:2e:ea:d8:01:66:e5:00:df:75:
                    db:f2:81:3c:4f:c4:0d:32:17:da:2e:ed:3e:c6:be:
                    8b:17:dc:65:d0:56:21:21:b3:4f:2d:42:74:ff:c5:
                    44:c7:15:9e:3e:16:37:fc:5d:23:11:7d:0f:4b:6a:
                    0d:43:cc:c0:c1:29:06:da:9e:4d:17:51:be:a1:f0:
                    7a:56:5d:0d:64:f2:40:ce:8f:db:46:0e:45:40:4a:
                    94:e7:ab:94:7d:cc:d4:cc:14:d7:f7:d5:f5:7c:99:
                    78:dc:b4:04:16:04:a4:cf:fa:b1:a8:82:31:51:6e:
                    30:15:13:5f:d1:5e:70:c9:9c:7a:9f:b9:80:53:c1:
                    5e:42:ac:54:33:57:45:83:8a:d5:13:6a:c7:88:56:
                    a1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BF:19:9A:DC:6F:DB:35:09:53:0F:B1:35:C4:46:E4:2D:6D:75:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6f474ab6-be0e-3ac1-a7d7-828bc616d068.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.20.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:51:94:10:66:e4:a3:79:5e:5d:da:1f:a8:cc:89:62:de:d5:
         5a:38:28:ed:ef:94:51:43:02:ea:6c:39:db:71:d9:4f:eb:77:
         6a:1f:c8:73:01:17:c3:b1:a6:3d:cf:0d:89:54:2c:cd:f6:12:
         a2:9a:f5:8c:23:f8:d2:da:92:ad:e8:72:96:4b:c3:cc:86:98:
         33:3f:79:e1:c3:9b:04:a5:5e:1f:8d:c9:f4:cd:3f:be:a3:e5:
         2b:ca:ad:31:ac:e3:a2:72:1e:c1:5d:2b:33:c7:35:cd:80:77:
         ec:b5:f3:ca:dd:eb:bf:87:d3:ca:c1:73:76:85:71:ac:b8:7e:
         92:34:2a:c7:e8:f9:9a:9a:08:c9:40:71:4d:81:99:de:a4:66:
         68:5c:bf:cf:99:e0:d0:d4:8d:15:4b:73:22:2a:35:04:bc:cb:
         d4:83:56:79:e3:f4:7c:08:9b:f4:d5:4a:d8:06:a6:b1:5c:44:
         a8:1c:e6:ba:45:c1:48:c0:63:31:0e:79:1b:03:12:87:0d:b9:
         c3:a9:32:ac:b1:2f:d2:a2:3d:b8:f0:18:0e:6a:fa:9e:a7:ae:
         9f:30:8a:ca:cb:b4:2a:e4:b2:e9:d2:44:16:72:13:24:92:b0:
         32:1d:0d:e4:d5:b7:bf:51:e3:95:06:f4:1d:0f:12:92:bd:f4:
         eb:16:4b:84
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD9XYLwLSv09soq9/IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDkyMjEyMDAwMFoXDTIyMTAyODA0MDAwMFowLzEtMCsGA1UEAxMk
ZDdmYWQzZGUtZmI3OC00YWUzLTljOWYtNTc2ZDU4ODRmMjgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXPAwcI4gn5PeEq9DprOxlgl5EW2Z9p6HAa4
Tgdd0qljYgHKkyc/apH3ZJFeMg+x4AvpQaWJpNFpILLa/qL4nLCfkY3RowGUh+ex
nT3F5ttl787sTnGGKhORG0fUPQ5BzcG+IrBb0M04W41z5YMu6tgBZuUA33Xb8oE8
T8QNMhfaLu0+xr6LF9xl0FYhIbNPLUJ0/8VExxWePhY3/F0jEX0PS2oNQ8zAwSkG
2p5NF1G+ofB6Vl0NZPJAzo/bRg5FQEqU56uUfczUzBTX99X1fJl43LQEFgSkz/qx
qIIxUW4wFRNf0V5wyZx6n7mAU8FeQqxUM1dFg4rVE2rHiFahdQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFm/GZrcb9s1CVMPsTXERuQtbXVUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNmY0NzRhYjYtYmUwZS0z
YWMxLWE3ZDctODI4YmM2MTZkMDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMANhQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAC1GUEGbko3leXdofqMyJYt7VWjgo7e+UUUMC6mw523HZT+t3ah/IcwEX
w7GmPc8NiVQszfYSopr1jCP40tqSrehylkvDzIaYMz954cObBKVeH43J9M0/vqPl
K8qtMazjonIewV0rM8c1zYB37LXzyt3rv4fTysFzdoVxrLh+kjQqx+j5mpoIyUBx
TYGZ3qRmaFy/z5ng0NSNFUtzIio1BLzL1INWeeP0fAib9NVK2AamsVxEqBzmukXB
SMBjMQ55GwMShw25w6kyrLEv0qI9uPAYDmr6nqeunzCKysu0KuSy6dJEFnITJJKw
Mh0N5NW3v1HjlQb0HQ8Skr306xZLhA==
-----END CERTIFICATE-----