Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9f7a61ee-9752-3c5f-87e8-6f92c1b204ba.roa
File:                     9f7a61ee-9752-3c5f-87e8-6f92c1b204ba.roa (raw, json)
Hash identifier:          +EgRpdZw0SIRL4bjj6HGLW0hx3Y2cC3OrkrwUBT7Qy0=
Subject key identifier:   B3:91:67:19:42:66:F8:DD:29:A8:F1:7E:14:60:87:BD:AB:C5:5B:2A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FF6031FB02FCD962088AAFF00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9f7a61ee-9752-3c5f-87e8-6f92c1b204ba.roa
Signing time:             Fri 18 Nov 2022 12:00:00 +0000
ROA not before:           Fri 18 Nov 2022 12:00:00 +0000
ROA not after:            Sat 24 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        99.151.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f6:03:1f:b0:2f:cd:96:20:88:aa:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 18 12:00:00 2022 GMT
            Not After : Dec 24 05:00:00 2022 GMT
        Subject: CN=ef4382da-2bae-4df6-b856-a0a8829cd2c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:61:36:e7:c2:ad:02:5f:f2:94:ad:bd:fb:42:
                    da:d0:84:3d:50:58:40:7c:d6:b0:e8:e8:a3:33:d3:
                    12:f3:63:19:57:5a:b7:c5:b3:7a:5a:cc:be:ab:b2:
                    70:1c:bc:17:ee:2c:81:d3:c7:c3:ad:8d:12:d1:88:
                    0b:f0:40:bb:0e:a6:b0:f0:da:21:66:d5:81:2e:04:
                    44:f1:21:91:54:cb:0f:01:07:1a:83:d7:13:95:ff:
                    fe:7a:45:e4:29:41:fb:55:46:bb:7c:9c:5d:73:9c:
                    05:19:d1:61:ce:ee:ba:5a:64:13:50:90:49:4e:0a:
                    9e:c5:14:29:5f:a7:d8:db:2c:c0:30:7e:84:6e:cf:
                    51:0d:39:45:ba:1e:6a:6e:36:a8:80:ba:1c:79:fe:
                    70:a2:ab:7c:2a:aa:0b:da:a0:e9:80:2e:e0:51:95:
                    b4:aa:38:2b:9d:67:8d:ae:54:4b:0b:39:7b:28:a8:
                    06:63:fd:ba:c0:1f:33:fd:44:a8:20:3a:61:1f:33:
                    89:b1:86:ad:b6:3c:cf:c5:fe:c4:2b:5d:a7:b4:d8:
                    48:fd:8c:3d:84:74:f4:18:f8:be:68:fd:5a:be:2c:
                    20:d3:7f:5e:7a:aa:0d:61:7d:f4:78:56:12:4f:aa:
                    41:3c:2d:fa:4d:13:a7:0e:6e:7b:09:01:da:71:cd:
                    1b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:91:67:19:42:66:F8:DD:29:A8:F1:7E:14:60:87:BD:AB:C5:5B:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9f7a61ee-9752-3c5f-87e8-6f92c1b204ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.151.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:1a:49:e5:1b:23:c8:4b:65:a9:d3:4b:b6:69:c5:54:50:a6:
         57:ed:c1:63:ff:7a:92:31:08:26:43:51:6e:76:72:31:ff:89:
         1e:22:21:c2:3c:2b:32:95:a7:2c:59:88:7b:b9:0f:81:5e:44:
         c8:a3:63:d2:be:d7:94:9b:fb:15:31:17:42:8c:0f:17:61:d9:
         98:23:30:d4:2b:63:c3:3a:b1:34:ad:b6:f6:f3:b2:5e:63:31:
         d7:88:47:93:ef:6b:3b:57:94:e6:7f:ad:02:9c:ed:84:d8:e1:
         fe:83:87:fa:b1:69:fc:3a:8d:bb:41:ce:08:5d:f8:e4:c6:80:
         f0:e4:bb:a4:a3:1a:4c:7f:57:a8:b6:1f:5e:ae:16:74:ff:7e:
         0d:51:a3:bc:a9:30:12:fd:b1:9f:b3:b9:ab:75:5d:55:56:c2:
         56:0d:d0:3f:18:bf:9b:29:4b:cc:3a:be:e8:27:7c:df:0c:6a:
         ae:bb:95:a8:19:48:09:bc:28:ae:31:bd:f4:6e:f8:df:e3:e6:
         fb:60:e9:59:0e:a9:58:73:62:1e:65:f5:27:11:f0:21:dc:b4:
         1a:77:d8:42:b0:0b:91:ad:12:b8:77:36:37:1c:f3:46:d7:80:
         e3:26:50:bf:a5:30:82:33:cf:b3:92:5a:87:a1:cc:35:4c:c8:
         db:c7:cf:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----