Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a117633e-f061-322a-affc-88da6805735a.roa
File:                     a117633e-f061-322a-affc-88da6805735a.roa (raw, json)
Hash identifier:          BVr+CxLhQE8645feu0z2B7eYKeu+uB47xRwZxmsAryY=
Subject key identifier:   C2:7A:3D:81:75:87:68:7F:09:A9:AB:31:EB:1F:99:CA:E1:9C:50:D6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E944E31B34BF41EF3072E8400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a117633e-f061-322a-affc-88da6805735a.roa
Signing time:             Thu 14 Jul 2022 21:12:08 +0000
ROA not before:           Thu 14 Jul 2022 21:12:08 +0000
ROA not after:            Fri 19 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        54.43.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:94:4e:31:b3:4b:f4:1e:f3:07:2e:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 14 21:12:08 2022 GMT
            Not After : Aug 19 04:00:00 2022 GMT
        Subject: CN=76c1cca4-b0ad-4b03-8fe0-1d0af08f5f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c2:88:72:23:89:ad:39:eb:08:dd:6a:ba:86:
                    75:e4:fd:e0:35:75:a0:6d:13:aa:0f:92:33:67:e7:
                    a4:04:70:a3:75:7b:d8:3a:5a:a3:cf:88:0c:cf:2b:
                    67:da:16:b1:41:55:a9:4c:d0:e7:40:71:3e:33:a2:
                    20:74:b1:dd:b7:45:33:2b:7a:9d:f3:0a:7c:ed:df:
                    e0:56:85:dc:fc:23:67:05:1d:e1:72:53:6f:4f:35:
                    0e:fd:9e:8e:5f:eb:95:ea:82:60:b9:dd:7b:47:49:
                    0c:27:5e:b2:17:20:b2:76:05:98:5d:81:f8:c1:0b:
                    6a:33:40:5e:88:b3:ca:14:92:66:35:b7:1f:d1:1e:
                    5f:05:fd:13:6b:bb:d2:50:72:22:f0:88:58:fc:a1:
                    95:bb:a0:48:88:19:48:a0:69:ae:13:b3:6b:1d:42:
                    bb:2b:6f:94:97:a7:aa:55:43:76:6a:c0:89:e0:6d:
                    5b:a0:27:4c:65:40:51:51:69:3e:5c:c6:5d:bd:2e:
                    3c:40:23:c6:b2:0d:69:07:04:2c:77:b8:4c:3e:04:
                    bf:9c:b1:64:5e:45:56:b1:e5:ac:cc:d1:91:16:36:
                    8a:24:c5:c7:a5:f6:6d:98:97:cf:d1:ed:4d:1f:e0:
                    aa:ac:37:96:db:77:f9:58:e2:a0:30:d7:b8:b4:20:
                    a1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7A:3D:81:75:87:68:7F:09:A9:AB:31:EB:1F:99:CA:E1:9C:50:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a117633e-f061-322a-affc-88da6805735a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.43.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:88:ae:7c:bc:7d:d2:50:05:dd:d2:d8:4a:8b:34:b6:71:40:
         3a:c9:88:3b:39:49:7b:a0:5c:17:8c:97:ae:e0:f1:46:24:ec:
         56:94:2a:e2:a3:d8:13:dd:5c:f7:92:b8:83:4f:00:9e:3c:5a:
         47:50:90:c0:09:89:47:89:72:ca:63:a1:fd:fb:24:e5:f4:cb:
         65:ee:e2:70:d6:4b:54:52:f2:ec:7b:a9:e3:f0:cc:77:8f:e6:
         c1:b0:26:d3:8a:df:5f:51:11:56:b6:dd:5b:23:b7:d7:79:73:
         29:e2:4b:00:cf:3b:ce:14:f5:72:f8:20:8b:9c:54:71:90:98:
         b1:66:c9:07:28:ea:77:49:38:ea:04:0b:ab:54:85:df:e3:0d:
         fe:c8:43:ad:b5:6d:07:6a:34:03:35:f7:da:47:7f:49:ee:fd:
         7b:4f:d9:77:48:64:c8:84:c2:4e:20:c1:21:a7:38:2e:6a:f7:
         28:8e:77:c5:24:f4:7f:90:81:43:3c:44:03:d6:0f:bf:75:e7:
         20:df:ce:4a:73:1c:fc:59:6d:ad:d8:3e:a9:8d:06:a6:8f:a3:
         12:f5:81:f2:74:ac:53:85:1f:29:63:33:ec:80:70:dd:bf:81:
         03:a4:11:89:7c:d9:c6:44:8f:dd:9e:89:b0:f9:e4:d2:f1:a0:
         fe:ac:77:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----