Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9954b3b9-2d32-3513-a506-bba9ce301506.roa
File:                     9954b3b9-2d32-3513-a506-bba9ce301506.roa (raw, json)
Hash identifier:          x9N/mgYbaI6I2qj4WPDtwAh2zUzQyYFJdErk5PCDjX4=
Subject key identifier:   3D:81:09:05:A2:B3:8A:0C:21:19:6A:F3:48:A9:7E:A1:36:13:64:C0
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F05CFA0E9D9C8E80627626040
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9954b3b9-2d32-3513-a506-bba9ce301506.roa
Signing time:             Wed 24 Aug 2022 12:00:00 +0000
ROA not before:           Wed 24 Aug 2022 12:00:00 +0000
ROA not after:            Thu 29 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        134.38.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:05:cf:a0:e9:d9:c8:e8:06:27:62:60:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 24 12:00:00 2022 GMT
            Not After : Sep 29 04:00:00 2022 GMT
        Subject: CN=757c138d-aedb-4383-a0df-df787a2d2fa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:77:a6:f6:dc:37:49:25:23:be:da:06:8a:54:
                    c0:64:f7:cf:53:0c:4b:6c:d7:ee:f7:59:74:cb:25:
                    3d:b8:b3:1f:4b:3b:92:b7:56:4f:fd:fd:75:c7:e4:
                    07:f5:83:3c:9e:52:12:9b:7f:42:98:55:a6:bc:a9:
                    ae:5e:85:09:8d:9f:b5:aa:d3:6d:84:3c:66:88:f4:
                    01:b0:2c:7e:39:27:3f:62:09:c2:50:a2:ff:42:98:
                    42:b1:3d:8a:11:69:39:65:b9:97:01:62:0f:c1:d0:
                    aa:b4:2d:ee:59:35:43:ca:b8:e0:a8:da:f5:46:b9:
                    d6:eb:db:db:e9:5b:64:55:d4:20:9e:bd:7b:e0:17:
                    9d:63:fe:cc:bc:5b:e5:2f:08:b0:62:f0:35:21:44:
                    2a:36:80:f2:a8:06:a5:0f:0d:66:e6:5f:f4:b3:f6:
                    94:28:15:b5:ab:e6:d0:39:25:c0:0d:f2:04:83:75:
                    d7:f0:b1:6e:34:59:e0:08:7a:87:c8:cd:3e:87:88:
                    35:07:ce:c4:38:da:2b:ce:84:a2:a1:34:4f:06:98:
                    bb:6b:8c:a7:60:bb:b1:ea:14:f9:37:33:0b:12:23:
                    7e:36:78:cf:8e:7c:69:9b:f1:56:77:51:44:87:09:
                    d3:d2:b9:41:51:72:c9:f3:d0:ba:eb:54:bd:de:7e:
                    a3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:81:09:05:A2:B3:8A:0C:21:19:6A:F3:48:A9:7E:A1:36:13:64:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9954b3b9-2d32-3513-a506-bba9ce301506.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.38.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:b7:12:36:8f:6c:fa:d1:34:2e:db:f9:35:1e:49:ef:e0:f8:
         9c:1f:71:f8:77:ce:4a:e8:dc:3c:31:ec:c6:8f:e2:87:61:e2:
         cb:75:a0:5f:ba:04:66:aa:d4:70:2a:cd:e1:4f:cd:8b:84:cf:
         e5:76:69:05:f5:e5:c1:3c:08:ad:a8:61:83:21:d9:f8:0e:d2:
         b7:d3:94:d5:88:03:c1:1b:9a:29:ad:bd:54:6f:d9:a6:b2:07:
         b1:87:92:0d:01:20:8b:0d:66:85:25:ac:cc:c6:e2:8c:b2:ce:
         94:04:37:e8:9e:99:40:08:48:ca:a6:3f:02:c0:57:0c:17:dc:
         3c:3e:e8:25:c8:2a:c4:1a:1a:70:4c:64:e4:10:ff:9c:27:7e:
         68:ea:16:50:8f:35:dc:aa:c5:30:68:47:de:a8:f6:b5:04:b5:
         a6:5b:cb:46:ec:08:73:50:7a:e3:1f:be:7e:2c:21:cd:fe:e5:
         0d:33:10:ed:24:7f:b5:6c:cb:72:2e:95:0c:70:cc:7c:30:ae:
         50:b8:79:eb:cd:c1:bb:f5:07:16:5a:bd:69:b3:57:fb:3d:8b:
         4c:53:0a:3f:be:d1:40:2b:64:4a:7e:0a:ec:48:36:d0:77:c9:
         26:5b:f2:9b:d6:be:8a:20:47:5f:6b:67:81:77:ba:2d:6b:8f:
         31:c9:39:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----