Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8a666583-0bf4-3902-b45c-67c99c7379cb.roa
File:                     8a666583-0bf4-3902-b45c-67c99c7379cb.roa (raw, json)
Hash identifier:          ZRXmPjEZTACz012ovpWxYZQVYceCqj27AfKpYvxZJoY=
Subject key identifier:   CA:08:DE:8F:A0:BB:8C:28:DB:40:6F:2F:CF:49:AC:1D:BB:A2:32:1C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FF242F5DF18B5656C693E3850
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8a666583-0bf4-3902-b45c-67c99c7379cb.roa
Signing time:             Thu 17 Nov 2022 12:00:00 +0000
ROA not before:           Thu 17 Nov 2022 12:00:00 +0000
ROA not after:            Fri 23 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        16.89.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f2:42:f5:df:18:b5:65:6c:69:3e:38:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 17 12:00:00 2022 GMT
            Not After : Dec 23 05:00:00 2022 GMT
        Subject: CN=f78c983a-a8f9-447e-9635-b56e8aea49c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:62:c3:01:1f:4e:8c:e8:50:dc:90:59:bc:b9:
                    64:04:19:f5:d7:f6:e3:ba:5a:91:3d:68:5c:a0:01:
                    12:8a:f7:37:c8:f0:a4:eb:07:49:b2:7a:d5:9c:82:
                    cf:c4:14:12:a1:0e:7f:eb:40:86:6e:ea:91:67:af:
                    33:ac:d7:c5:31:46:3a:72:50:1e:01:bd:5a:19:8c:
                    0b:f1:16:8e:05:00:43:b9:36:c9:2f:71:fb:cd:ce:
                    f6:25:37:5f:4e:d2:94:53:c7:77:2d:0b:ad:f2:61:
                    43:86:3b:16:c3:c8:07:6a:e5:9f:08:d9:cc:a5:32:
                    37:75:2d:6e:6b:c1:9d:ca:37:56:30:17:98:1e:ab:
                    06:cb:95:03:f6:ef:59:da:fa:c9:37:f6:1a:08:1c:
                    ef:90:ae:15:1d:ff:cc:d0:87:0c:5f:bc:f3:db:43:
                    11:8a:21:ba:3b:00:ca:7e:95:c8:05:6e:02:61:95:
                    be:3a:33:70:69:6c:fb:68:71:2d:19:cf:99:87:86:
                    19:ca:cc:02:fa:97:80:2e:c8:66:b9:24:ec:5b:c7:
                    d4:1d:e5:fc:9e:5a:03:c4:25:51:04:59:d2:8b:3f:
                    7c:75:30:4d:73:69:3f:1d:a8:d6:9b:ff:07:f6:8b:
                    2a:f0:3e:91:19:81:07:3d:3a:e3:e8:65:34:91:80:
                    51:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:08:DE:8F:A0:BB:8C:28:DB:40:6F:2F:CF:49:AC:1D:BB:A2:32:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8a666583-0bf4-3902-b45c-67c99c7379cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.89.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:a4:f2:98:87:da:41:b4:59:e7:85:d6:93:57:8b:ac:dc:2c:
         60:d4:61:10:54:1b:60:e6:bd:97:14:5d:fa:13:b3:87:95:f1:
         55:eb:90:80:4d:bb:b9:c7:3f:70:33:2b:f6:c4:a9:94:00:b4:
         1a:00:d3:cf:f0:23:4b:90:e4:c8:53:58:ca:80:c4:a5:2e:fe:
         68:d8:5a:df:b1:53:91:98:13:6b:ef:10:94:1f:e5:a3:05:76:
         d8:ac:dd:9d:e2:6e:50:8a:f4:84:e9:3f:bc:f5:4d:68:23:bf:
         68:18:9c:c3:ef:da:5e:c5:16:29:e8:35:0b:ba:ad:aa:29:93:
         b4:7e:75:b9:8d:4d:6a:86:45:f5:45:f0:14:18:ae:4b:84:d2:
         f5:b5:7f:0a:56:c2:fa:1d:97:c5:70:62:e5:52:ea:33:55:81:
         57:81:58:18:37:3f:c9:7d:78:41:7b:f0:ce:68:78:68:5a:c2:
         03:ae:70:fe:fa:c5:6e:bd:ab:d4:f5:07:3d:39:0b:57:cb:e8:
         5c:de:c5:a8:ae:3a:c5:b6:98:ca:08:1f:22:7e:26:a1:84:b9:
         fa:92:10:89:0f:15:e2:86:89:bf:88:1e:b6:54:8d:4f:5b:20:
         ee:39:c6:97:51:1f:d1:30:4e:d1:34:09:4d:5a:45:f9:5d:1e:
         07:2a:57:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----