Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a72e2e63-981a-3d55-856c-2327f1cb9c71.roa
File:                     a72e2e63-981a-3d55-856c-2327f1cb9c71.roa (raw, json)
Hash identifier:          6aa2LPEf7eMK3NvvkVjlBNYm/TKHRmfgtj6o5/yWhrY=
Subject key identifier:   F0:76:02:A3:92:D3:87:79:BC:C0:3C:87:F7:A8:FC:39:AF:6C:93:AF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840D498A165191D17895FE64B80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a72e2e63-981a-3d55-856c-2327f1cb9c71.roa
Signing time:             Mon 06 Feb 2023 12:00:00 +0000
ROA not before:           Mon 06 Feb 2023 12:00:00 +0000
ROA not after:            Tue 14 Mar 2023 04:00:00 +0000
asID:                     8987
IP address blocks:        182.30.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:d4:98:a1:65:19:1d:17:89:5f:e6:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  6 12:00:00 2023 GMT
            Not After : Mar 14 04:00:00 2023 GMT
        Subject: CN=f85191e3-29cb-45b8-8d02-72011b764500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:48:bf:c6:f7:7c:af:91:d1:82:49:50:fc:3a:
                    08:69:c4:96:f2:6b:f2:5f:65:d9:a9:15:5b:22:60:
                    2e:0d:db:fd:c3:e9:44:27:3e:2f:bc:ea:fa:55:3c:
                    89:ab:9e:d6:04:fc:13:0b:ef:a8:dd:9c:36:03:02:
                    15:b4:4a:ef:06:9f:9c:c9:5e:05:fe:a1:ba:17:da:
                    30:16:ee:a1:4a:48:ce:9a:a2:5d:4a:d5:5d:39:10:
                    19:8d:81:ed:f8:0d:06:2d:2d:e9:b2:dc:4b:da:b3:
                    be:0a:d3:15:6f:65:85:ea:05:bb:ad:83:d1:2a:d2:
                    75:a6:a8:87:de:9f:8a:b6:05:46:98:b3:0a:a8:45:
                    bc:40:b6:33:fc:3c:09:2c:0a:b6:9b:42:77:bd:ee:
                    bc:06:df:3d:25:e4:a5:26:6d:40:fb:40:11:b8:58:
                    65:9a:a4:a5:f3:1d:97:8a:ae:b0:61:d2:99:13:65:
                    cd:82:d5:10:3b:a7:a2:20:6d:36:51:66:d0:3e:b5:
                    15:cb:cb:f3:b1:36:ca:54:b3:4c:65:b0:e2:eb:96:
                    9e:50:d0:11:7d:ea:3d:69:5b:93:a1:bc:ef:7a:e7:
                    88:76:3c:fa:f5:e4:9d:04:a3:68:93:a8:8d:7d:d5:
                    b4:e7:ad:9b:c2:d8:3e:c0:26:60:97:e4:34:0a:6c:
                    f1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:76:02:A3:92:D3:87:79:BC:C0:3C:87:F7:A8:FC:39:AF:6C:93:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a72e2e63-981a-3d55-856c-2327f1cb9c71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.30.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:9c:b0:1b:0a:13:9a:9c:25:3e:17:d9:b6:7a:cb:e7:e0:27:
         d1:ec:58:d9:7b:9d:a7:d6:34:56:90:45:b7:9e:54:47:ec:96:
         6d:f1:0c:75:65:18:fd:05:a1:f4:97:2f:47:f7:2c:92:3d:f9:
         ec:8c:20:58:91:e5:81:97:90:c2:bd:24:c0:3c:03:35:b4:15:
         7b:1a:e0:73:bb:d9:e3:34:6c:4f:fe:47:2e:02:df:61:e7:37:
         83:d8:a4:2e:97:52:7e:47:98:c4:42:24:4f:80:73:26:0e:48:
         39:cb:02:b3:19:be:8f:6c:23:48:75:eb:2a:e6:7f:6c:67:c1:
         fc:7e:1e:53:f0:93:17:66:7e:6e:d6:5c:36:e8:3e:dc:3c:c0:
         4a:91:aa:7f:90:64:70:ab:11:69:05:06:88:c6:22:7f:8f:ff:
         c8:19:a2:47:4d:71:d2:25:97:af:65:d9:97:35:79:1b:7a:ab:
         42:b2:9d:c8:34:9e:08:0c:70:2b:96:76:76:d5:9d:7f:86:5a:
         f5:e2:96:1e:be:9c:f7:04:06:f3:47:40:1a:10:9c:94:5f:55:
         f3:60:92:44:ce:cd:81:ed:68:a3:ec:0f:2e:df:17:b2:bb:a5:
         f1:9b:cd:15:0d:ae:bb:fc:10:d7:d7:7d:af:9d:16:5b:2a:42:
         1d:bf:1e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----