Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9c29efb0-41b8-3c2d-982a-b6da874fa0ab.roa
File:                     9c29efb0-41b8-3c2d-982a-b6da874fa0ab.roa (raw, json)
Hash identifier:          tiqNFF4+AbFlLi9dOCdHhMXQPYU5SG19PRDWU92K+28=
Subject key identifier:   84:53:FB:D2:75:66:49:8A:AA:9B:F0:4C:8E:50:30:52:74:86:6C:B6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858408C903A2C00C649D797315480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9c29efb0-41b8-3c2d-982a-b6da874fa0ab.roa
Signing time:             Wed 11 Jan 2023 12:00:00 +0000
ROA not before:           Wed 11 Jan 2023 12:00:00 +0000
ROA not after:            Thu 16 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        57.180.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:8c:90:3a:2c:00:c6:49:d7:97:31:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 11 12:00:00 2023 GMT
            Not After : Feb 16 05:00:00 2023 GMT
        Subject: CN=2ec054bf-db8b-42c9-875e-d9f77a43cdc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b2:97:c9:17:3f:4d:66:e2:be:aa:ec:6a:98:
                    ad:9c:af:33:d8:d5:98:a3:ca:fa:41:24:9d:69:1d:
                    31:7c:ba:4e:33:d1:d5:88:9a:2a:62:31:fd:8e:8d:
                    0c:7d:6e:19:b6:93:a0:b6:56:4d:57:91:2e:c0:a5:
                    a1:a6:7c:3e:7e:64:86:96:7e:96:d6:fd:d5:a6:8e:
                    46:03:43:6f:0d:18:d3:64:6b:06:65:a1:3a:c0:64:
                    88:6c:5a:c7:ef:4b:86:32:9e:0f:70:93:ec:b4:2f:
                    70:3e:e1:09:fa:ee:22:ec:52:3c:e2:2e:ad:f2:fe:
                    9c:61:31:06:4e:18:b7:a5:66:de:66:43:6b:df:25:
                    5c:d6:aa:28:42:75:4b:e7:fe:02:06:ae:c9:2b:c6:
                    e6:7f:ef:88:02:ed:56:62:93:8f:39:aa:78:36:46:
                    e8:3b:ca:ec:37:44:a1:91:27:7b:c1:01:17:9e:86:
                    27:81:57:be:f7:8f:5d:89:f6:96:69:2c:89:49:87:
                    26:b6:24:68:15:71:f3:32:62:a0:f3:68:b0:89:c7:
                    00:50:06:f3:fc:50:05:5f:ce:40:10:53:12:9f:69:
                    3c:c9:9f:9b:35:ba:65:4f:b2:e0:cc:39:8e:25:6a:
                    48:d6:90:f5:84:3b:c2:7f:72:ba:f7:bb:85:d9:4f:
                    f3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:53:FB:D2:75:66:49:8A:AA:9B:F0:4C:8E:50:30:52:74:86:6C:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9c29efb0-41b8-3c2d-982a-b6da874fa0ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.180.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:db:f8:65:26:42:fc:a7:05:a2:ca:62:50:81:c5:1f:d4:58:
         43:b5:bc:2f:27:54:c7:8a:a3:20:81:98:8e:33:da:03:b4:ce:
         4e:3b:13:79:33:c5:72:c1:8e:05:ed:5e:03:77:c4:60:3a:25:
         7a:86:7a:f1:e2:fb:fc:6e:b7:0e:4a:8b:6f:4a:fe:9a:d2:3c:
         5e:4b:84:96:d8:bb:94:bf:28:6d:0b:bd:da:a2:7d:e8:7e:5e:
         bd:92:14:15:5a:d5:4d:03:81:cd:a8:e2:cc:ef:b2:8e:72:80:
         6a:68:b3:dc:e0:3b:82:98:51:eb:17:cc:d0:d5:22:b5:b5:20:
         bb:58:ec:bc:a5:89:48:ec:ce:33:62:ed:26:4c:e8:21:2f:4f:
         b7:46:28:eb:20:be:1d:4d:b0:cb:20:9c:7f:4c:20:b4:9d:92:
         7c:13:3d:66:d3:b9:d1:63:1c:30:b6:e9:22:4d:20:20:f1:04:
         d4:c5:72:4d:cf:da:09:e9:7f:46:a6:a2:aa:7c:0a:06:4d:21:
         2c:45:f5:a3:8d:a8:37:e2:d7:e5:db:f1:f8:58:90:40:dc:de:
         00:d5:82:31:f5:67:d3:0d:84:02:0c:f1:f2:72:2a:8c:74:05:
         4c:64:5d:ac:35:77:42:75:d7:ae:d5:f2:bb:95:d4:c9:d2:c7:
         84:65:61:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----