Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9b0ad35c-418b-3a83-9e09-ea100b3718e2.roa
File:                     9b0ad35c-418b-3a83-9e09-ea100b3718e2.roa (raw, json)
Hash identifier:          nUau9hicqo15CugUQgQnOc3viYX5Bhr9Ko/hUswnx/w=
Subject key identifier:   F1:5C:BF:14:A2:F9:97:83:3C:43:4C:63:8F:51:97:D2:3F:8D:95:80
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840C0A573A734882AFB0D25BE00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9b0ad35c-418b-3a83-9e09-ea100b3718e2.roa
Signing time:             Mon 30 Jan 2023 22:42:07 +0000
ROA not before:           Mon 30 Jan 2023 22:42:07 +0000
ROA not after:            Tue 07 Mar 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        16.50.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c0:a5:73:a7:34:88:2a:fb:0d:25:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 30 22:42:07 2023 GMT
            Not After : Mar  7 05:00:00 2023 GMT
        Subject: CN=661571b1-245c-43f5-94ca-01f8abf7d61f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:76:38:58:ac:c8:e2:78:0c:18:6a:4a:33:7c:
                    0b:35:66:ac:c0:33:56:2e:89:00:e0:d9:07:44:93:
                    0c:de:2c:ab:41:2c:27:25:01:79:54:5c:51:93:93:
                    b8:6b:08:b5:a8:b9:79:59:b5:6f:3c:6b:2d:22:6e:
                    31:42:3d:33:12:62:a0:b2:04:9f:a3:ef:51:27:71:
                    78:ab:03:20:e8:c9:c7:40:cf:78:3f:3a:aa:08:8c:
                    27:9f:cf:b9:eb:5f:5f:62:f9:1d:b0:e8:7a:11:a3:
                    24:3f:72:51:56:c4:21:60:91:26:aa:a8:f2:f0:7a:
                    df:36:b6:eb:c0:0d:02:16:ad:0d:11:29:44:6c:6c:
                    5c:70:35:6b:5b:d0:3b:97:93:33:fc:a7:ea:67:f9:
                    35:93:ec:0c:62:01:3f:c3:ca:28:a2:79:b3:99:27:
                    99:0e:ff:f4:66:56:ae:e8:fc:c8:55:80:59:f4:12:
                    b0:de:d4:22:08:6a:44:fc:c6:86:ed:77:c5:86:4e:
                    de:34:37:fe:52:17:e1:10:f6:07:9f:31:77:bc:57:
                    f2:df:ff:69:54:09:69:37:1b:fd:02:e1:ab:c1:eb:
                    a4:53:1d:4a:c2:a9:53:ce:02:74:96:fa:1c:87:c4:
                    ab:d5:c4:f4:b4:15:a5:82:08:52:88:58:bf:0d:d4:
                    fe:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5C:BF:14:A2:F9:97:83:3C:43:4C:63:8F:51:97:D2:3F:8D:95:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9b0ad35c-418b-3a83-9e09-ea100b3718e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.50.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:b1:ae:ff:40:f3:32:b7:82:c0:19:13:2b:51:70:9f:b5:5e:
         44:4a:fd:71:8d:19:df:23:81:41:45:5c:66:30:ac:61:1e:52:
         dd:78:22:6a:32:a1:64:21:a0:16:b9:2d:c6:3c:27:28:77:2d:
         61:f5:52:56:6d:a5:b3:ed:42:37:e1:59:c4:0f:a2:b7:90:f7:
         8e:ce:f8:52:f7:23:44:70:fd:2f:d9:ea:91:49:f0:26:33:8d:
         f8:9c:b0:04:93:a6:58:fd:ae:1d:e7:70:49:5a:59:b0:64:d3:
         3d:b6:fa:a7:16:80:2c:c5:08:b1:a9:b9:78:e9:bb:99:23:b4:
         b6:30:91:51:38:13:e3:41:43:ca:ae:9d:44:c8:1d:f2:88:f7:
         6a:d8:91:32:f6:ce:07:11:e4:da:43:45:7f:3c:c9:c8:a1:89:
         88:90:78:ea:20:72:19:e5:f1:41:86:20:23:5a:24:99:5b:25:
         5b:12:85:0c:79:56:7f:c5:3b:f6:25:63:a7:bd:1c:93:90:f9:
         07:9b:f2:4c:e2:2c:d2:9b:83:69:75:de:18:5b:dd:b5:2d:a1:
         a4:cc:9d:d9:51:d4:5c:45:93:d7:00:9c:d7:d2:e2:69:aa:d5:
         0a:a7:24:18:26:bd:59:f4:9e:a8:07:9c:67:c1:4d:e4:33:60:
         0f:86:29:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----