Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a7cf514a-a000-3c19-8a67-1290a9af5abe.roa
File:                     a7cf514a-a000-3c19-8a67-1290a9af5abe.roa (raw, json)
Hash identifier:          QpO0kgaoAj1ILE5ioY7DbFbUVnI7i2gW7sRskmrQXmk=
Subject key identifier:   14:91:B7:B0:D7:A3:2B:AB:C1:29:33:FF:EA:6F:E6:B4:F1:CA:C7:4A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C95C4625D69FCF9938305E400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a7cf514a-a000-3c19-8a67-1290a9af5abe.roa
Signing time:             Fri 14 Jan 2022 05:00:00 +0000
ROA not before:           Fri 14 Jan 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        16.204.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:95:c4:62:5d:69:fc:f9:93:83:05:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 14 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2022 GMT
        Subject: CN=30bd30d3-6948-45ff-bf54-276fe7ec2863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4c:3a:43:12:c3:d5:c3:bc:df:16:13:54:d3:
                    10:0d:7c:89:06:e3:30:1a:32:2b:89:22:7b:b5:30:
                    1f:34:79:f3:b0:21:da:d8:58:8b:ab:cf:09:d7:fb:
                    78:be:61:4b:b9:0b:91:a7:48:7a:27:69:18:33:5e:
                    c2:d4:6d:7d:bb:f2:72:26:f1:12:83:b8:3d:34:40:
                    ba:b9:f4:f5:87:51:2a:a1:a5:0c:ce:ff:28:e5:22:
                    bf:57:8f:09:ff:30:2c:f2:11:d5:02:b6:40:5b:38:
                    f3:1b:f1:5b:d3:12:63:74:ae:a2:4b:26:f1:51:fc:
                    40:15:52:b0:84:d0:e8:a0:11:45:71:af:a9:94:66:
                    5e:13:1a:03:92:0c:25:ff:e6:1c:42:2d:55:86:c7:
                    82:e2:83:11:89:a8:00:58:13:cb:8d:57:11:24:74:
                    6b:ff:7b:7f:2e:85:3c:ea:16:01:44:c8:00:e0:75:
                    58:4e:e5:76:fe:06:43:24:e2:f9:d4:19:52:6c:1d:
                    b9:ce:5a:92:ed:71:cd:30:1f:b0:c0:ce:08:18:f0:
                    5c:12:8e:19:7a:62:91:e8:d2:00:ce:b5:1b:8a:0a:
                    90:b3:8d:df:89:49:78:e5:1e:26:db:49:72:cf:eb:
                    f5:26:19:c0:94:90:37:71:60:f0:1d:81:49:d4:48:
                    92:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:91:B7:B0:D7:A3:2B:AB:C1:29:33:FF:EA:6F:E6:B4:F1:CA:C7:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a7cf514a-a000-3c19-8a67-1290a9af5abe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.204.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:18:94:f0:2e:d3:e9:05:5b:ca:1d:13:11:34:48:16:9b:bb:
         96:97:8e:10:84:17:02:6e:56:ab:29:63:bd:e8:a8:4e:d8:28:
         1c:4d:dc:1d:82:95:2f:11:52:35:d0:2c:d8:e3:01:ff:b6:b3:
         45:a4:e8:41:d0:c0:11:31:4e:53:3d:13:1f:14:ee:9f:1b:6d:
         6d:29:4f:88:06:d5:ce:57:30:38:8c:c2:5c:0f:4a:e2:68:36:
         c1:74:4a:5c:f9:2c:bd:c6:e1:2c:17:0b:73:db:b9:d5:53:70:
         2a:56:ac:07:cf:6c:31:2d:28:67:f4:0f:8e:d0:4a:68:65:35:
         52:f6:49:46:cb:ad:5a:0f:f2:8c:e0:e2:33:82:7c:2b:11:27:
         24:42:b8:48:60:ca:49:68:fd:19:38:41:8f:69:74:88:6f:68:
         7c:fc:7f:e3:ba:de:b3:de:42:62:52:81:fa:ca:03:df:a8:38:
         d3:cc:34:c9:d6:8b:68:13:49:8d:f7:0c:05:71:7a:3e:1f:3d:
         91:4f:fb:43:13:8f:35:eb:f9:89:b9:8a:1f:5d:dd:a6:d9:6d:
         0d:1f:d9:b2:a2:01:a0:ac:1b:f1:02:3a:41:20:42:61:20:d4:
         3e:a4:d4:36:d3:9f:b6:05:00:d3:b8:27:d3:87:63:29:09:e3:
         03:ff:9e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----