Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8f6abc7a-c218-334d-a73d-5d5407f39f45.roa
File:                     8f6abc7a-c218-334d-a73d-5d5407f39f45.roa (raw, json)
Hash identifier:          hw+63nDRp6B4hUDnsnEsZBX9SmK/jNMlbXwpSzQaEBs=
Subject key identifier:   EF:CE:D2:0D:9C:5D:0C:48:ED:06:A5:89:C4:69:F6:39:FC:EA:BB:A3
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F58EB7B63F252ADCA2E9A1380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8f6abc7a-c218-334d-a73d-5d5407f39f45.roa
Signing time:             Fri 23 Sep 2022 12:00:00 +0000
ROA not before:           Fri 23 Sep 2022 12:00:00 +0000
ROA not after:            Sat 29 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        54.136.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:58:eb:7b:63:f2:52:ad:ca:2e:9a:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 23 12:00:00 2022 GMT
            Not After : Oct 29 04:00:00 2022 GMT
        Subject: CN=92c46091-3df1-4db2-b46b-748448d334fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f6:28:4d:33:a5:d7:12:e9:f9:1e:b0:48:b0:
                    69:9b:c0:be:da:5b:18:ef:62:43:06:58:81:03:8f:
                    b9:e3:c6:9b:b1:d9:af:2a:e5:5c:08:4b:a0:e4:82:
                    52:d2:2e:8b:fb:21:1c:eb:6c:44:77:9d:d7:d5:34:
                    80:7d:50:be:c4:c2:56:71:52:7d:83:21:25:da:e2:
                    4c:f7:c3:74:2a:86:8e:a9:0a:b7:8b:09:a7:a1:9b:
                    d9:d5:09:02:f8:6c:36:6b:4d:49:b5:c8:5f:72:24:
                    e0:59:8e:33:24:5b:93:7c:73:23:52:bf:2e:a9:97:
                    41:1f:e9:0c:d1:72:9c:bb:5b:6e:d0:75:50:f9:3a:
                    d6:a2:a3:9e:1d:4b:fd:3e:a5:0b:2f:7f:a1:e3:4e:
                    14:59:4f:1c:47:73:63:46:1c:06:92:62:d6:ea:04:
                    59:01:57:cc:ec:c5:68:f0:00:69:7c:9e:48:e3:56:
                    e0:52:7a:27:ce:55:a1:bd:e3:19:7f:e7:e0:bf:cb:
                    3f:4d:9f:3d:ae:d8:aa:6c:0c:f9:0d:07:16:e2:f1:
                    ee:23:88:3e:e9:70:b7:c2:c4:0c:9b:c7:e5:54:5e:
                    38:3e:3d:26:86:06:62:9c:d5:af:93:c2:55:6f:04:
                    2d:07:20:5c:ff:ba:b7:95:71:45:75:f3:9b:dd:51:
                    e1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CE:D2:0D:9C:5D:0C:48:ED:06:A5:89:C4:69:F6:39:FC:EA:BB:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8f6abc7a-c218-334d-a73d-5d5407f39f45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.136.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:58:cf:20:79:4e:41:dc:b4:81:0b:78:2f:2f:7c:50:f0:e8:
         61:8a:8a:93:10:6f:b7:8d:88:e0:53:2d:9d:ba:c6:5d:62:7e:
         ea:46:42:3c:87:88:4d:ef:99:9e:b0:bf:8b:97:29:1a:db:78:
         79:fd:06:93:b3:27:be:93:00:c6:45:b0:55:72:bf:1d:ff:23:
         b3:da:f2:a0:1b:a3:96:ed:07:70:69:6b:3c:3c:01:09:1c:b6:
         61:5d:b3:ca:5c:f7:2c:a1:d2:69:6b:fb:78:83:7a:2b:c0:36:
         72:75:8c:37:4a:f3:e3:a0:8b:95:26:7d:ae:55:c3:4c:e1:9d:
         e4:d6:54:40:5a:db:c4:e9:cb:c1:a8:62:8d:3d:9d:d7:07:22:
         e6:9d:81:5d:d8:cd:91:2f:8e:76:8d:fd:da:cf:f9:40:36:31:
         8a:82:d7:c2:5b:ba:37:b8:54:4c:9f:25:2c:2d:85:8f:c5:99:
         ba:05:54:d2:71:7a:46:2a:3a:df:5f:e0:bb:7e:1c:1e:71:71:
         13:d5:58:75:2b:95:14:da:fb:68:54:b4:7a:56:c5:6d:aa:01:
         07:d4:00:9b:d9:b9:95:26:35:a1:8a:88:a3:75:61:80:22:2e:
         a9:c7:f2:ae:18:7d:26:80:d4:60:1d:77:ca:d9:fd:e3:ff:b7:
         b4:e5:c7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----