Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/93d4533a-1c49-3ad5-84b2-78bd06f680ae.roa
File:                     93d4533a-1c49-3ad5-84b2-78bd06f680ae.roa (raw, json)
Hash identifier:          3a9ApbhWxSuCXQRQAvU5N1ALcC8Xh94NvpDwGeWmPCE=
Subject key identifier:   68:F3:0F:EC:8D:E9:26:37:6F:90:60:54:5B:DF:C8:87:04:F5:5F:86
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D56839370C0084F473FC65D80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/93d4533a-1c49-3ad5-84b2-78bd06f680ae.roa
Signing time:             Thu 24 Mar 2022 04:00:00 +0000
ROA not before:           Thu 24 Mar 2022 04:00:00 +0000
ROA not after:            Thu 28 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.62.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:56:83:93:70:c0:08:4f:47:3f:c6:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 24 04:00:00 2022 GMT
            Not After : Apr 28 04:00:00 2022 GMT
        Subject: CN=7ee12b5d-d117-4d66-86d3-86df0eefe8ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:56:01:f8:1a:a3:42:b1:6a:28:8d:87:5f:19:
                    56:c8:34:a1:82:28:b2:19:7c:32:12:55:a4:9e:b6:
                    d9:58:fa:16:3b:4d:dc:23:7d:95:9c:4e:86:ab:b9:
                    fe:aa:55:1d:5e:23:78:51:3c:0f:eb:3f:df:24:a0:
                    cf:75:d9:ad:de:66:5c:f8:a8:51:3f:cd:3d:26:3f:
                    80:99:a1:de:fa:10:ed:45:9a:7a:cf:ad:ae:14:32:
                    26:86:21:f4:cd:ca:26:24:d2:17:b7:1c:5b:20:9d:
                    79:ee:fd:53:b0:99:ff:f3:b1:9f:22:be:3c:b0:c9:
                    7d:31:eb:20:88:b8:cd:20:15:7b:cd:f6:29:e2:03:
                    74:78:db:d0:4b:69:59:5a:05:e4:ba:22:7b:f7:ef:
                    b4:2a:08:a1:ca:e1:c6:ef:7e:fd:13:88:c2:68:77:
                    77:bf:08:17:6a:35:b3:16:35:ac:95:74:73:61:e9:
                    d5:d9:e8:8c:ac:e0:3d:93:70:05:e1:04:3f:14:5f:
                    95:0b:ea:ad:42:f3:92:91:f0:2d:01:e1:c0:2d:3b:
                    d2:a5:a8:e2:ce:4d:2d:8f:87:b6:55:d7:7b:6c:bf:
                    d4:a8:a7:6a:91:79:92:9d:66:c7:40:7c:0e:e9:93:
                    62:07:48:5f:8b:95:f8:66:cc:cc:4e:91:d3:3e:f2:
                    f8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F3:0F:EC:8D:E9:26:37:6F:90:60:54:5B:DF:C8:87:04:F5:5F:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/93d4533a-1c49-3ad5-84b2-78bd06f680ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.62.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:71:ef:0b:fa:59:a4:9c:09:a8:56:3a:95:d5:d9:62:aa:97:
         bb:5a:b1:2c:5b:70:73:d1:9b:8f:a3:e2:4e:c5:8d:6e:a0:53:
         d8:3a:8f:52:c4:24:07:72:3e:a9:26:53:4a:1d:5f:93:8c:d2:
         79:09:d6:8b:53:e0:10:53:c8:92:ce:26:42:b1:48:8d:a7:d1:
         d2:5b:26:fb:9b:5a:db:f0:04:31:a2:3b:86:fb:7b:60:c8:1e:
         88:54:5e:0b:d5:b4:d4:77:70:5f:9a:0e:a4:45:eb:19:1e:ce:
         99:83:27:83:b0:59:31:0c:2b:9e:0f:86:6a:47:3c:5d:d6:9e:
         fd:ee:b6:1b:53:85:7a:92:da:08:0f:ce:60:80:40:a2:73:21:
         2d:26:f6:62:07:86:95:f5:cb:19:71:89:f1:69:3a:41:46:25:
         90:c5:f7:39:32:5d:59:48:c8:f0:ee:c4:9f:ce:16:7c:c3:c7:
         f3:fc:ed:ef:2a:3f:24:34:a9:08:60:cc:b6:13:1c:e5:23:7c:
         f2:1e:66:de:87:2f:4c:b1:86:95:fc:72:e8:3e:a7:d1:24:fa:
         9f:6b:61:de:61:35:dd:7c:95:5e:ac:14:49:85:67:72:9d:86:
         fb:79:2f:3e:ef:38:1e:fb:49:61:4c:60:19:27:f6:b2:78:97:
         61:bc:04:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----