Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/99612976-6c4a-36b6-9db4-9bafaaec2b78.roa
File:                     99612976-6c4a-36b6-9db4-9bafaaec2b78.roa (raw, json)
Hash identifier:          /syAlqSVVS2EQ/2rG85PRUM9twCRAj2ru45MH+KJmSo=
Subject key identifier:   0F:07:FA:48:28:90:11:E1:C2:77:B1:BD:2D:EA:65:E5:6A:F2:EE:89
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840B5821D70BF51F902F835CF00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/99612976-6c4a-36b6-9db4-9bafaaec2b78.roa
Signing time:             Thu 26 Jan 2023 15:12:07 +0000
ROA not before:           Thu 26 Jan 2023 15:12:07 +0000
ROA not after:            Fri 03 Mar 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        99.84.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b5:82:1d:70:bf:51:f9:02:f8:35:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 26 15:12:07 2023 GMT
            Not After : Mar  3 05:00:00 2023 GMT
        Subject: CN=a4123109-4511-475f-8394-a46c95302b28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4b:75:a3:e3:a4:28:d2:3a:95:b1:3b:2d:2e:
                    a9:09:40:fa:f4:59:ba:f1:71:b0:93:8d:62:f9:59:
                    d2:64:31:38:d4:cb:2e:3b:64:67:47:9c:7a:d2:be:
                    a6:c8:72:17:10:f6:bf:2e:de:83:13:6c:94:24:cf:
                    50:f8:73:71:71:3e:e3:8c:d9:d1:1b:64:24:76:d1:
                    eb:c6:78:dd:56:ca:94:08:d0:47:70:65:8a:89:92:
                    ec:ca:80:2a:72:75:18:35:97:13:c1:28:fc:a7:4d:
                    9b:78:97:a3:db:08:54:89:e5:a0:20:ef:ed:1f:7a:
                    d2:22:88:65:a5:77:ea:59:af:44:64:ce:37:1b:f2:
                    01:5c:79:de:68:f2:d6:2e:77:18:3e:90:c2:2b:6b:
                    e5:e5:d7:c9:6e:db:f9:29:85:49:e3:c8:ea:af:03:
                    fc:65:be:e2:ba:4b:52:60:1a:5e:80:9f:34:d0:b8:
                    5b:af:61:1d:81:63:fb:f2:d1:8d:e2:88:69:82:4d:
                    3c:31:62:c9:06:d4:f2:83:9f:31:14:f4:c1:86:54:
                    bc:b2:19:4d:ee:d2:1b:e5:5c:e6:bd:ac:8c:3b:39:
                    b5:73:66:ca:0e:e1:35:26:b9:eb:30:eb:5b:2e:72:
                    7a:65:e7:70:95:d8:b1:4c:f1:f8:51:15:3a:94:03:
                    54:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:07:FA:48:28:90:11:E1:C2:77:B1:BD:2D:EA:65:E5:6A:F2:EE:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/99612976-6c4a-36b6-9db4-9bafaaec2b78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.84.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:6b:ac:04:54:85:a2:ca:05:b3:43:b0:18:8f:7c:88:03:29:
         b7:90:82:e3:2f:76:ac:2d:de:bf:ee:ec:77:43:37:64:3e:91:
         ff:ff:e7:6a:10:55:1e:0c:22:a8:8d:57:89:90:57:91:02:b2:
         70:f5:af:bf:3d:f5:27:0e:0a:15:ed:c9:ac:3f:68:1e:fa:31:
         2f:09:eb:b9:11:69:cd:9a:6a:e7:e1:13:e2:4b:c4:47:e9:f3:
         68:16:54:59:b0:c6:77:ea:43:3b:3e:b7:ca:21:3f:58:44:cf:
         07:70:90:e4:37:d6:8c:c0:5d:88:45:d1:aa:b4:25:f9:15:52:
         d8:de:d0:e1:9d:36:40:40:af:18:70:24:73:8c:f2:0b:ea:6a:
         d8:2d:fc:1f:7c:fe:99:6d:66:cf:20:73:13:e1:ca:1c:f4:8a:
         d2:fd:3c:d4:e5:58:f8:b6:d3:58:6d:23:34:f3:55:6f:e6:cb:
         0c:09:44:fc:06:91:13:4f:f8:74:0c:45:61:a3:99:cb:72:60:
         ec:ed:92:e2:4d:1d:6c:3e:92:d1:c7:b7:eb:8e:9e:d2:00:9d:
         f2:b0:f4:94:86:5c:9a:e8:e9:91:d9:8c:e9:68:a5:60:98:78:
         2f:e6:6f:58:b9:5d:bc:84:0e:1e:3d:54:da:98:4c:d4:49:59:
         d7:55:3b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----