Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/794af605-0a27-3ffc-b21a-6905242aed43.roa
File:                     794af605-0a27-3ffc-b21a-6905242aed43.roa (raw, json)
Hash identifier:          rnjEWCQyYBvx/X+k/giko3kaL+zw3TztR3TD0f+0pkI=
Subject key identifier:   6C:1A:6D:E8:CA:1F:E7:1B:9F:8A:41:2C:DB:80:FF:33:44:ED:D6:37
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840C3953D0B2946AFE3760E3B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/794af605-0a27-3ffc-b21a-6905242aed43.roa
Signing time:             Tue 31 Jan 2023 12:00:00 +0000
ROA not before:           Tue 31 Jan 2023 12:00:00 +0000
ROA not after:            Wed 08 Mar 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        170.15.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c3:95:3d:0b:29:46:af:e3:76:0e:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 31 12:00:00 2023 GMT
            Not After : Mar  8 05:00:00 2023 GMT
        Subject: CN=6ebad8d6-f1da-4667-990a-d582a9e6a6f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9a:98:b9:fb:f1:fc:7e:06:5f:cf:eb:43:2b:
                    95:2e:3c:1b:da:22:48:45:5d:e8:b1:35:fc:ba:61:
                    5c:6f:ec:50:21:6c:af:86:9d:e0:7b:ad:27:66:3f:
                    12:ad:d9:0a:52:3e:43:fd:3c:15:1c:a7:a8:64:13:
                    29:59:cb:21:d4:9f:78:5c:4b:40:a2:59:30:1a:dd:
                    69:99:5c:38:85:9d:b0:f4:2a:4e:14:db:0a:30:ee:
                    4f:ab:ab:73:60:2f:67:82:d8:db:98:00:5b:7e:a0:
                    71:fa:ab:75:3b:27:a1:a9:50:dd:21:39:1c:32:7d:
                    26:25:17:fb:75:91:0f:a9:6f:21:90:33:a8:1a:91:
                    0e:37:3c:36:29:e4:7e:fd:ab:10:65:8e:db:ed:59:
                    ad:91:52:4b:5d:2b:39:5d:e0:48:bb:07:da:ff:83:
                    25:6a:98:d8:04:e9:68:f7:f6:af:f5:49:3e:d5:8a:
                    ef:ee:a4:fd:93:cf:35:4e:d2:ab:fa:75:0a:f4:b2:
                    0d:d5:23:d7:03:3d:bf:13:c7:23:41:b3:6d:4c:2c:
                    56:c2:dc:1f:5f:4b:16:60:58:05:b3:74:39:80:de:
                    26:ab:51:e1:0d:12:ce:c6:b4:1b:ea:33:da:a6:8c:
                    ad:56:7d:6a:41:98:2e:7f:78:77:3d:dd:a5:01:83:
                    8f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:1A:6D:E8:CA:1F:E7:1B:9F:8A:41:2C:DB:80:FF:33:44:ED:D6:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/794af605-0a27-3ffc-b21a-6905242aed43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.15.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:d7:88:2d:b5:81:65:74:81:d4:41:ce:7b:6d:c7:8b:4c:05:
         9d:6e:d4:02:a3:20:db:a6:f1:ca:24:0b:d9:6e:11:49:0d:19:
         20:6b:bf:be:7a:47:0e:b1:c4:e8:8b:39:c4:37:ee:7c:ea:7a:
         7a:19:6f:12:58:71:96:1a:15:bb:1b:3c:d5:85:55:d9:a6:41:
         c8:eb:86:9d:2f:d4:3e:9c:b9:44:e0:1b:3b:7f:10:53:eb:36:
         20:78:74:85:13:17:3e:1b:c2:44:20:13:ad:9d:43:ce:11:e2:
         3c:f6:69:cd:0a:b8:a3:6b:6c:69:f5:9c:d9:3e:8d:0e:c4:81:
         34:31:a3:a4:50:19:b2:e6:0b:de:62:d6:38:a3:00:12:f5:c7:
         89:ce:ec:ca:ba:f9:31:f1:e4:62:8d:22:4b:41:f1:37:15:30:
         10:df:3f:1a:40:d9:46:9f:24:e3:fd:81:ab:b0:c8:7c:bd:18:
         ae:2f:5d:37:7d:87:ae:05:d6:c8:1c:21:7a:06:67:c0:10:65:
         b3:ad:c7:7b:05:97:2d:69:d8:87:17:19:5b:a5:89:85:30:ff:
         90:36:a3:17:c8:5c:92:92:1a:27:3b:b9:63:62:8b:7b:f2:5f:
         ca:ca:58:ab:05:f0:2b:61:d1:eb:dc:8e:13:01:44:bb:cf:6b:
         5f:f4:69:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----