Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8da5b58b-266e-3a2f-8e8e-9346eb17c3d7.roa
File:                     8da5b58b-266e-3a2f-8e8e-9346eb17c3d7.roa (raw, json)
Hash identifier:          FpqpkEkSZhltal6yibVSufqG5VIpwsVqKojxQjXLzKU=
Subject key identifier:   D9:7B:7F:9C:20:D0:49:DC:BF:58:45:D3:64:F7:2E:31:8D:5C:46:3A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840B2B01A26EE6591444C96B300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8da5b58b-266e-3a2f-8e8e-9346eb17c3d7.roa
Signing time:             Wed 25 Jan 2023 12:00:00 +0000
ROA not before:           Wed 25 Jan 2023 12:00:00 +0000
ROA not after:            Thu 02 Mar 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        16.75.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b2:b0:1a:26:ee:65:91:44:4c:96:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 25 12:00:00 2023 GMT
            Not After : Mar  2 05:00:00 2023 GMT
        Subject: CN=27bcb5b6-b596-4ef3-9a70-c3e7f61b7d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:94:e5:99:09:3f:2d:7a:95:33:c9:6f:f6:c4:
                    8d:d1:95:0e:66:52:1d:92:c0:9e:13:43:95:ed:14:
                    47:20:53:91:89:26:66:a2:46:cf:bb:50:08:50:2b:
                    76:b9:5d:2a:60:2b:e2:4f:88:d0:4f:34:68:4b:6f:
                    4c:3a:2a:96:a3:15:a7:11:cc:a9:98:53:4b:94:31:
                    ff:a9:d7:1c:9b:e6:72:2a:3d:18:a6:c6:9d:38:4c:
                    6f:e2:c5:ad:de:bc:40:17:cf:18:32:3f:48:08:54:
                    99:14:9b:cc:f0:8a:ae:41:c1:38:2e:35:3e:67:9a:
                    72:e2:86:0e:57:f7:4e:9c:c1:64:92:a5:2a:41:48:
                    b9:e2:cd:79:d3:d3:a4:a3:80:41:75:d7:aa:42:ff:
                    bf:40:4a:c5:e6:6d:53:45:ce:41:92:5b:cd:c9:4d:
                    9e:7c:cd:7c:78:7c:73:6e:6a:f6:2c:5e:94:11:94:
                    0f:68:c2:c6:ff:81:24:b6:8f:f1:fa:00:44:1f:9b:
                    c8:69:bd:06:45:aa:34:0d:5a:c2:1e:f9:3b:d7:41:
                    19:94:d4:e8:bb:7c:e0:b6:95:0b:0d:75:fb:76:ef:
                    ef:3e:74:73:01:9c:9b:03:a4:ae:61:c3:d4:c2:6c:
                    7e:ef:d6:80:d6:2f:17:d0:84:77:a0:13:e2:ca:85:
                    be:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:7B:7F:9C:20:D0:49:DC:BF:58:45:D3:64:F7:2E:31:8D:5C:46:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8da5b58b-266e-3a2f-8e8e-9346eb17c3d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.75.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:d5:ed:d6:36:38:2e:78:fd:f9:aa:6a:0a:ea:6c:33:59:d5:
         62:52:50:0f:5a:a7:53:6a:51:f6:12:f6:be:ea:44:9f:65:01:
         6d:57:2e:66:56:58:cd:65:92:34:94:3e:e8:36:c4:e1:c2:ec:
         8a:dc:de:e4:64:ee:e1:32:84:1d:06:62:c9:36:f4:e5:01:5e:
         f3:d9:21:81:90:63:52:15:87:eb:1b:70:7c:a1:f6:19:63:14:
         65:32:60:33:21:31:46:b4:d0:58:80:3c:23:5e:75:cb:8b:d8:
         83:07:ae:64:90:88:06:6b:da:05:0b:e6:a4:47:23:a9:59:10:
         d7:75:14:de:c8:49:2f:1f:73:a1:fd:ef:f9:6c:0d:56:e3:d4:
         55:c4:f4:de:eb:1f:88:6a:e0:f2:7c:7d:da:68:c2:fa:32:d8:
         f0:ba:ff:3e:11:a2:5d:11:ac:57:31:51:f0:8a:5a:55:4b:1d:
         04:14:20:a4:2a:26:6d:69:f4:6c:88:ad:c7:42:c1:d5:e9:49:
         86:9b:a4:e0:9e:a5:91:8c:44:09:13:41:e3:9a:0a:13:7a:65:
         4a:a8:b8:7f:14:de:d0:30:b0:5b:93:24:81:a9:c9:8f:c6:0d:
         60:b4:11:23:ce:1d:c4:da:50:de:29:2f:e3:f0:0c:30:3e:05:
         83:f1:56:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----