Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/736bcba5-8d70-3f8d-a28c-005814845b6a.roa
File:                     736bcba5-8d70-3f8d-a28c-005814845b6a.roa (raw, json)
Hash identifier:          wCOTUKyCR0KWe7ksZn4tOohAQgj0PsqRxBFSdodYSos=
Subject key identifier:   98:BB:50:72:D2:85:D6:4B:8C:35:A4:12:BE:2F:39:5E:C4:93:27:77
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584067DCD87B00A3E3841C2A5E80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/736bcba5-8d70-3f8d-a28c-005814845b6a.roa
Signing time:             Thu 29 Dec 2022 12:00:00 +0000
ROA not before:           Thu 29 Dec 2022 12:00:00 +0000
ROA not after:            Fri 03 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        57.204.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:67:dc:d8:7b:00:a3:e3:84:1c:2a:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 29 12:00:00 2022 GMT
            Not After : Feb  3 05:00:00 2023 GMT
        Subject: CN=014ecab3-bab9-47da-b3cc-8fabb06110a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ee:e8:c0:f2:1e:1d:25:d7:3d:79:31:6e:eb:
                    bf:3a:43:9c:b5:0b:dd:c9:f7:ce:71:b7:6e:1c:a4:
                    ee:00:1c:12:1b:d3:44:ca:2a:9a:99:ae:e8:8e:fc:
                    a2:46:ad:74:4d:f1:7c:0d:9a:e4:67:6d:12:4c:67:
                    d1:0b:e9:54:10:f8:fd:ed:e0:00:3f:dc:a2:4a:94:
                    4f:11:40:6c:c2:ea:74:be:5d:53:20:55:e5:8b:92:
                    40:98:cc:38:7b:9d:73:22:96:80:c5:16:53:86:e3:
                    c5:10:74:da:a3:39:34:76:75:c7:60:95:13:85:14:
                    df:73:02:68:49:36:02:23:ee:83:88:b7:af:f4:6a:
                    27:e5:d6:32:85:ad:a4:98:30:c4:6e:97:4a:cc:fe:
                    43:fa:9c:5f:65:d0:33:5f:88:6a:57:55:1e:e9:3c:
                    4c:ba:a6:8a:40:cb:21:2f:9c:a4:9f:d3:45:b2:8f:
                    82:f8:f9:64:63:c6:29:a5:05:b9:3f:a1:4e:e4:f4:
                    a3:b9:1f:f8:d3:c1:88:9a:49:9f:37:79:bd:85:cc:
                    99:29:cc:b1:1d:92:46:97:6e:02:2b:9b:13:8b:b4:
                    ab:b0:db:2a:3f:29:61:85:41:01:af:e0:4f:99:15:
                    f5:0b:df:e5:21:6f:4b:c5:d4:65:8a:66:08:c9:61:
                    ac:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BB:50:72:D2:85:D6:4B:8C:35:A4:12:BE:2F:39:5E:C4:93:27:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/736bcba5-8d70-3f8d-a28c-005814845b6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.204.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:c9:93:52:0a:0c:88:1a:5b:3b:bb:0c:01:41:43:fa:bc:e7:
         2b:f0:2d:e4:b9:3e:2d:72:fa:32:95:33:78:13:ee:82:1a:ee:
         89:19:b9:b2:77:7e:b9:83:d3:e1:7e:3e:4c:18:c3:eb:85:c6:
         08:7d:eb:5b:79:2e:6f:81:2f:86:75:2c:77:26:10:e9:5b:cc:
         60:b1:d3:86:52:5a:0c:76:24:f4:01:a2:5c:93:b7:0b:58:61:
         bf:44:dd:7b:4e:53:09:97:26:c4:ee:85:73:dc:1c:3f:de:60:
         2a:ec:82:90:f2:f8:d2:05:a1:e8:f5:db:0b:83:e5:ea:7e:a2:
         b9:33:72:14:df:f2:06:27:2e:79:ae:2d:78:e9:5d:f0:ba:62:
         64:14:e2:20:ac:67:12:bc:ca:7f:48:be:77:4f:bb:3f:9c:f1:
         55:ac:f6:13:15:18:6d:4d:bd:76:bf:0b:9a:4e:10:f4:c5:2b:
         5a:d6:9d:b8:46:15:10:d2:88:5a:e2:14:32:9e:ff:b6:a9:a6:
         cb:b3:08:72:67:23:01:dc:36:63:25:33:05:03:c0:6f:ed:5c:
         92:82:25:ae:43:9b:ac:04:70:d5:d2:db:ff:34:9a:3b:bb:3f:
         2d:22:6a:37:04:74:84:45:42:f9:f4:d5:3a:7b:b9:b9:99:89:
         5b:a9:46:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----