Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/82ce984f-2a5c-3181-8a9f-b1bcc529812b.roa
File:                     82ce984f-2a5c-3181-8a9f-b1bcc529812b.roa (raw, json)
Hash identifier:          BJJ8tTwWdwjjp/daX2cwBNAAu0s8KD1zyWlaYnLfToM=
Subject key identifier:   C1:1A:DC:0A:AB:BF:4A:CE:0D:1F:B6:CF:07:51:2E:34:4A:4E:B0:AA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EDDD22A0B52FC53732332A680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/82ce984f-2a5c-3181-8a9f-b1bcc529812b.roa
Signing time:             Wed 10 Aug 2022 12:00:00 +0000
ROA not before:           Wed 10 Aug 2022 12:00:00 +0000
ROA not after:            Thu 15 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.49.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:dd:d2:2a:0b:52:fc:53:73:23:32:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 10 12:00:00 2022 GMT
            Not After : Sep 15 04:00:00 2022 GMT
        Subject: CN=11cb8553-c7d0-4ecf-a1a0-7d420f304c38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ed:a5:51:6a:3d:70:91:ed:f4:50:02:aa:56:
                    3d:c5:f5:36:76:23:45:76:44:2d:35:f1:0c:5b:d6:
                    6f:d0:83:f7:70:7e:f2:ae:e2:b9:70:a4:35:f6:50:
                    c8:08:b2:a2:ad:32:12:e7:aa:7f:0d:e9:03:39:38:
                    e5:f0:4c:6e:f1:3a:d0:e3:11:01:81:07:6e:cc:6b:
                    86:81:65:14:62:b1:48:a9:d3:77:f5:0a:ce:db:30:
                    3e:3b:84:d5:08:94:f5:aa:a6:1f:26:d0:dc:71:4f:
                    06:8d:ee:b2:97:f5:ee:3f:33:87:25:0b:e8:03:b8:
                    c7:d3:57:b8:f1:e9:d6:c2:50:a5:44:a0:a3:68:15:
                    8f:37:a4:85:d6:6f:5f:e1:5b:96:c8:3d:b8:d1:6f:
                    cc:54:66:42:49:71:e6:60:1f:7e:c1:58:1e:6d:19:
                    35:2c:5b:75:34:0c:d4:c0:8b:45:66:d7:3a:ca:66:
                    14:10:d0:aa:cd:76:e0:f8:b1:2b:2c:5c:bf:9a:68:
                    cf:1e:3a:f7:35:f1:ed:7c:fd:e9:0a:22:64:63:7f:
                    07:a9:6a:ac:82:95:bb:37:74:0d:40:5b:60:68:28:
                    0e:21:f9:21:c8:2c:04:db:67:84:0c:e3:3e:80:33:
                    58:ee:0f:d7:03:3d:3e:3a:b6:16:64:bc:d4:19:dc:
                    7b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1A:DC:0A:AB:BF:4A:CE:0D:1F:B6:CF:07:51:2E:34:4A:4E:B0:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/82ce984f-2a5c-3181-8a9f-b1bcc529812b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.49.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:27:36:e0:b4:71:5c:6d:a5:f7:e7:e3:1b:43:33:9c:85:70:
         9b:7b:61:ac:f4:77:ac:38:4a:58:88:71:d2:1d:1b:02:77:84:
         3b:96:a9:b6:8a:72:0f:0b:48:d4:ce:dd:ac:66:22:f3:b5:8a:
         0e:61:64:67:54:e9:41:a4:8f:8f:1d:0c:11:ef:8f:15:ac:38:
         ee:d4:d5:aa:1f:24:50:e0:31:58:b9:98:53:e4:fd:ff:a9:d6:
         9c:22:b8:a6:b4:38:96:da:d9:5b:52:3a:65:a8:1b:13:96:72:
         40:fd:a1:fd:90:73:87:64:83:84:16:78:19:63:84:94:28:e8:
         21:3c:03:7f:de:9a:19:ef:0d:06:09:67:00:bf:3a:1b:3f:67:
         52:b5:bf:a2:07:79:15:0f:d5:cc:c8:ae:36:49:90:7e:a7:6e:
         8c:1c:3a:6a:a5:55:1d:6a:91:80:c9:92:c6:9f:91:50:fd:31:
         39:9a:e0:3b:6d:d0:b3:e9:32:be:4e:ee:97:e5:cc:6c:7b:08:
         83:18:61:a6:2a:e8:d8:45:aa:60:92:7e:6a:fe:24:9c:5c:1b:
         07:6d:d7:1d:eb:8d:e4:2c:eb:f4:a9:60:9a:9f:29:d8:8a:61:
         a6:80:87:f7:01:cf:af:5f:f4:2b:89:15:71:18:7b:fb:64:c4:
         74:02:8c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----