Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70f7e53b-627f-38a2-9d70-25ed2c5c87a5.roa
File:                     70f7e53b-627f-38a2-9d70-25ed2c5c87a5.roa (raw, json)
Hash identifier:          puAYAAl9bulZ13qxFzygk7PAXVeMkgT6Tw2sOlmUr1c=
Subject key identifier:   B7:79:BC:4F:22:0B:A8:99:62:85:C1:13:5E:5D:43:55:FB:A8:C8:C0
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F9BB7AA5D9FD1E07072A04B80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70f7e53b-627f-38a2-9d70-25ed2c5c87a5.roa
Signing time:             Mon 17 Oct 2022 12:00:00 +0000
ROA not before:           Mon 17 Oct 2022 12:00:00 +0000
ROA not after:            Tue 22 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        173.83.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:9b:b7:aa:5d:9f:d1:e0:70:72:a0:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 17 12:00:00 2022 GMT
            Not After : Nov 22 05:00:00 2022 GMT
        Subject: CN=80a82d61-2ec5-46d9-85ae-f76762f7b37d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:17:9d:3f:0f:44:29:a3:f9:d0:73:23:f7:8c:
                    68:0a:eb:5e:18:26:fd:b5:c5:83:0e:1a:7a:54:88:
                    7d:7b:c0:f2:5d:32:a6:a6:4c:e4:16:f3:52:70:d7:
                    68:be:a5:13:6d:d4:8f:3e:b0:ce:60:c7:12:f8:06:
                    a7:66:07:72:4d:78:53:4e:ce:40:e4:31:b5:ae:ba:
                    89:f3:95:33:ee:64:b4:d1:48:a2:ab:1b:a6:8b:19:
                    93:63:4a:21:80:e3:68:59:fd:42:8b:14:6c:d6:0a:
                    f2:86:67:58:f6:b0:1c:75:6e:84:a7:2a:f9:7f:a1:
                    76:f1:ec:39:43:be:46:d5:cb:ad:f0:c6:ad:e4:5d:
                    c8:ab:2c:8e:aa:df:84:32:79:3f:38:f1:96:5b:fb:
                    72:2e:24:55:06:a9:f8:e2:af:29:65:c1:a2:58:64:
                    ef:18:24:3d:3f:ea:2c:c8:2b:eb:69:9e:a4:83:71:
                    1f:01:d5:b9:dd:d3:4d:28:c6:d7:37:28:d1:88:9c:
                    65:bf:b9:9e:f1:9e:61:b8:9b:cc:92:76:dc:ac:2d:
                    d2:34:f3:ba:5f:96:77:d8:a2:45:c6:b0:54:4f:ca:
                    81:16:c2:c3:52:5c:60:12:34:96:17:0b:b8:ef:e2:
                    f7:4b:d6:4c:0e:ad:a3:93:56:6e:5f:6d:ba:6f:e6:
                    f7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:79:BC:4F:22:0B:A8:99:62:85:C1:13:5E:5D:43:55:FB:A8:C8:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70f7e53b-627f-38a2-9d70-25ed2c5c87a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.83.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:c6:2d:f8:50:ff:f2:78:7b:b9:71:81:25:f5:4b:c5:26:d7:
         6b:35:dc:7c:9c:92:34:e9:2e:af:bc:3a:e0:19:70:3e:8c:e3:
         9f:84:67:02:96:54:d8:ef:73:aa:fb:64:94:27:10:af:da:8e:
         56:ea:2f:53:82:a9:3c:b1:02:22:53:81:1b:39:0f:dc:6c:26:
         b8:1c:2f:cf:95:70:c5:70:2f:d1:ee:3f:47:21:d0:6a:4c:23:
         82:64:9e:fc:50:cc:b0:f7:d6:2c:27:49:0e:8c:64:af:08:a7:
         05:1d:f5:ea:c2:75:84:46:33:e5:b9:e3:80:ae:fb:14:24:9f:
         25:10:ac:96:ea:39:7e:26:74:d9:4f:67:7c:83:19:51:25:24:
         c4:c3:cb:d9:04:5a:8d:b4:55:2c:33:a3:a2:0b:d0:72:29:8b:
         ea:d4:92:df:3e:be:36:b1:53:14:16:ac:53:d7:ba:be:8b:6f:
         bd:5b:cb:7d:38:ca:ec:b4:15:86:2e:c6:7b:46:c6:b4:87:3d:
         13:b6:78:e9:bb:b9:1a:35:1b:7a:9b:8c:28:5c:77:ab:e7:c0:
         56:ff:87:3c:56:b6:8a:85:bc:ca:21:d7:2e:80:b1:25:48:38:
         13:24:d2:54:d3:26:3a:44:34:9b:4c:86:18:ba:a8:1c:41:c1:
         be:94:8a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----