Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aadb3dd0-ddda-3a17-82e5-6bc281bdbe70.roa
File:                     aadb3dd0-ddda-3a17-82e5-6bc281bdbe70.roa (raw, json)
Hash identifier:          JigsHhDJ0d1ag22FU1Iy8knxOheVlaSM0Rnel4s7qJ4=
Subject key identifier:   A7:6D:73:0D:E7:AE:7E:D0:EB:F7:A0:7E:76:35:62:91:F1:A9:B8:E1
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CE3FEA0A0A1C9FF08B1A23800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aadb3dd0-ddda-3a17-82e5-6bc281bdbe70.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.189.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e3:fe:a0:a0:a1:c9:ff:08:b1:a2:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=4a9d9bb4-ee82-4173-857b-ae21cc5470b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a0:af:04:ad:e1:31:fa:ea:92:ef:1a:4d:9e:
                    d4:2d:f1:85:72:c2:89:d1:60:cd:9e:0b:86:4b:de:
                    a3:d5:df:21:55:27:f9:af:6c:ef:58:a8:88:07:5f:
                    53:b7:3d:c2:cd:b0:c5:5e:9a:f0:8b:f1:77:a3:8c:
                    89:34:a6:e5:7b:c7:ce:e5:af:79:a5:3d:51:7b:6d:
                    2f:13:09:3a:0a:c3:ab:3a:8b:c3:7e:84:57:cd:b0:
                    08:8e:f6:f2:2f:72:09:2f:c8:eb:8f:e8:5d:54:43:
                    c3:b4:c2:1a:f2:6f:d1:f7:c9:44:87:72:a2:65:84:
                    69:af:48:6a:30:2c:44:2f:79:ec:3b:8b:b3:e2:d5:
                    a0:b2:77:e5:cb:b5:1a:0b:45:a0:d4:09:d9:9b:e8:
                    e7:d0:f3:1e:de:4b:3e:3d:06:6d:a7:3c:f9:ef:c5:
                    68:4d:fe:91:f9:75:95:12:73:31:a2:7d:dd:4a:fa:
                    cf:b8:26:19:d3:62:7d:14:b3:a0:97:f9:fe:b5:de:
                    7d:89:76:2c:70:e5:c3:76:e6:a1:3f:3b:ba:d5:5e:
                    ed:c6:58:13:d7:8b:0b:32:b9:5d:df:5e:2d:f7:2b:
                    ea:c2:79:96:72:3e:70:5c:46:bb:e3:fa:26:c2:ab:
                    e5:d7:fa:32:50:3d:41:34:97:d8:50:fa:cd:8c:f5:
                    1d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:6D:73:0D:E7:AE:7E:D0:EB:F7:A0:7E:76:35:62:91:F1:A9:B8:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aadb3dd0-ddda-3a17-82e5-6bc281bdbe70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.189.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:88:f5:2f:6d:f9:38:51:b7:57:3a:6f:b9:69:d9:ab:07:ca:
         19:8c:41:97:8c:50:ef:d1:5a:a5:ef:f9:2b:76:9b:14:56:6f:
         33:14:e4:35:ea:a4:b5:5f:f5:c6:ae:ee:45:2c:49:e5:0f:71:
         78:ee:74:73:64:67:d2:1b:d8:d7:d3:c4:bb:29:91:ea:4e:4a:
         12:aa:82:0a:bb:19:39:bc:8f:9d:f4:ee:56:3b:79:01:7b:87:
         76:47:10:6e:64:a1:18:5e:20:82:de:4f:26:02:b0:a8:76:8f:
         ef:92:a5:00:ff:a2:4c:82:e6:b6:87:ab:81:fd:8e:e8:cb:6b:
         db:80:2c:20:5f:58:e6:42:d8:4a:a2:de:f8:85:b8:76:25:a5:
         a6:7b:8d:03:c7:15:70:de:98:10:fb:0a:62:f5:41:c0:c5:28:
         a3:0e:08:bf:2c:bc:1e:c4:11:63:17:80:2d:ab:57:ad:10:fd:
         bd:12:66:87:38:bc:41:ba:1e:83:d9:0b:cd:8f:71:89:6a:bc:
         5b:dd:55:6e:65:c4:64:a8:77:8d:46:45:fb:a0:1d:38:2a:1c:
         b8:8e:66:9a:6e:ff:0e:32:2f:59:69:fa:6a:fe:aa:78:5c:87:
         02:b4:ea:b7:0c:f5:40:f8:a7:56:0b:6b:d7:8d:d2:65:1a:46:
         b6:2d:24:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----