Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/83c34d71-bd48-336d-b3fe-695661c6f211.roa
File:                     83c34d71-bd48-336d-b3fe-695661c6f211.roa (raw, json)
Hash identifier:          ZJJ9I0Yj4Fx8iFSTTg45aC+cWvo5/kQonJ4ybLpT4kc=
Subject key identifier:   C8:9A:A3:DA:2D:2D:28:4B:64:63:F8:33:AC:10:DF:DA:66:E9:A4:00
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858409CC29E78BEEAD1B4542D2F00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/83c34d71-bd48-336d-b3fe-695661c6f211.roa
Signing time:             Tue 17 Jan 2023 12:00:00 +0000
ROA not before:           Tue 17 Jan 2023 12:00:00 +0000
ROA not after:            Wed 22 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        56.243.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:9c:c2:9e:78:be:ea:d1:b4:54:2d:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 17 12:00:00 2023 GMT
            Not After : Feb 22 05:00:00 2023 GMT
        Subject: CN=0649a5ba-4cd4-4b27-9d20-f30d4e1a62f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:91:fd:9a:76:d1:fc:dc:ce:59:f6:37:93:57:
                    db:fa:37:50:80:90:dd:fa:c3:d9:a7:5c:7e:96:c8:
                    ca:bb:33:9c:04:1a:33:8f:5e:e3:e7:ad:27:b8:39:
                    2e:58:c0:da:47:93:d1:5d:f3:ba:c0:93:9b:27:e5:
                    e4:bb:7f:2e:b7:0e:66:ea:03:48:cc:8e:dd:2a:e9:
                    91:a1:b8:25:7d:82:5b:cb:c7:d7:42:a9:71:a7:24:
                    a9:c6:7f:51:8d:f4:a1:58:45:74:45:09:39:5a:62:
                    10:2c:52:08:fb:98:23:c7:1e:be:c1:05:5f:92:b9:
                    91:53:c8:cb:5c:32:ef:3a:f4:a0:48:3e:e8:04:b9:
                    f5:5f:e5:8e:02:3b:38:7b:39:36:bf:51:e9:e5:a1:
                    87:fc:58:fa:46:1a:ef:9e:ce:86:de:14:1c:60:cb:
                    79:f3:37:27:65:52:88:10:ad:37:48:35:07:42:1d:
                    24:35:00:ff:c4:93:a7:dd:4f:ad:b3:b0:13:7d:b4:
                    c2:01:11:6d:7c:76:62:81:8d:98:00:ca:fa:22:3b:
                    00:1c:94:18:d2:87:3e:bb:e9:d8:c7:20:b3:df:ea:
                    7e:c5:ed:f4:2b:3f:42:5d:d3:8f:da:5f:b0:2f:cd:
                    e3:6e:d8:d4:0f:64:eb:ef:81:f6:0b:c0:69:9a:18:
                    85:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:9A:A3:DA:2D:2D:28:4B:64:63:F8:33:AC:10:DF:DA:66:E9:A4:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/83c34d71-bd48-336d-b3fe-695661c6f211.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.243.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:01:7c:2a:c2:e3:41:74:5f:7d:0d:cd:e9:4d:3c:16:89:5a:
         c5:43:b6:4e:6b:2f:fb:7d:c4:8c:66:d1:f1:94:a0:67:2b:4c:
         89:1a:ca:2c:43:dd:a3:5f:5c:68:d8:86:2e:eb:0e:0d:31:dd:
         19:3c:07:1f:31:c0:43:a9:b2:4b:70:89:1b:19:11:71:3a:83:
         15:07:74:ed:d7:f7:a6:26:d3:b8:2a:49:73:a1:ca:8f:db:f9:
         66:e6:82:42:66:87:84:cc:7b:4b:3d:cb:b1:6a:c1:8b:89:53:
         9c:ec:76:7f:c7:25:a9:aa:8e:ff:04:30:63:36:aa:1d:01:1a:
         a3:ac:cc:34:5f:ba:21:73:1c:45:2f:83:23:20:91:ed:80:9f:
         0c:eb:f0:1c:c0:30:1a:30:e3:a1:76:d5:67:76:66:3c:48:5a:
         c7:ef:58:68:b9:ac:1e:f6:e9:c5:94:f9:00:f1:00:8b:8c:2b:
         23:7c:04:16:e2:30:37:bc:42:7b:28:22:ec:db:a8:91:b4:3e:
         1c:eb:8e:e1:b9:00:7f:09:b6:db:8c:ed:7d:9d:ce:57:9f:f1:
         ed:50:3d:aa:53:48:a8:b6:cd:86:73:1f:05:c2:a7:2f:8b:54:
         52:42:fd:a3:1f:6c:f4:d2:2c:a8:94:1b:4f:7b:f4:b5:8c:07:
         25:ab:25:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----