Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b3a5f8ae-4d38-39cb-93cb-ba907f539fc2.roa
File:                     b3a5f8ae-4d38-39cb-93cb-ba907f539fc2.roa (raw, json)
Hash identifier:          x24pAP8Z1BxRAbp/h0gX6BpZ2/SDpyXfUZMlBbcafc0=
Subject key identifier:   0F:5C:6E:E3:B3:46:3F:58:BD:D0:01:C8:92:92:73:13:CD:61:3F:46
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858408EEAF8DC991D08CABE135800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b3a5f8ae-4d38-39cb-93cb-ba907f539fc2.roa
Signing time:             Thu 12 Jan 2023 12:00:00 +0000
ROA not before:           Thu 12 Jan 2023 12:00:00 +0000
ROA not after:            Fri 17 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        70.131.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:8e:ea:f8:dc:99:1d:08:ca:be:13:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 12 12:00:00 2023 GMT
            Not After : Feb 17 05:00:00 2023 GMT
        Subject: CN=ae10fa6a-8a79-48ad-8dbf-4ee701811727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d5:bb:37:5c:a4:92:c5:9c:df:8e:25:a8:41:
                    09:70:09:f2:c2:fc:4d:05:48:73:8e:c5:bc:df:9c:
                    7b:82:93:0b:4e:4e:57:50:cf:61:55:13:1f:e9:a1:
                    0b:b3:33:c9:94:a7:51:89:10:fa:56:fe:d7:5c:43:
                    ca:6b:4c:54:d7:16:01:ad:86:5f:4f:80:35:bc:da:
                    f1:73:57:18:5f:a5:71:2b:a0:b4:26:8c:03:6b:5a:
                    15:fa:5c:26:70:2f:4c:da:18:52:89:4e:45:ec:dd:
                    2e:4a:c1:05:cb:5c:72:e4:00:7a:6d:df:20:3f:0b:
                    1d:3b:90:ca:7f:cc:0d:7c:6a:0a:0a:a4:d0:aa:f1:
                    a0:a4:82:10:ee:42:a2:c2:86:ca:54:56:7e:a9:2c:
                    87:fe:af:7d:fc:6f:81:b1:15:31:5b:74:61:a9:22:
                    f2:22:cc:4e:da:e5:92:d6:c9:35:2a:3a:92:f3:08:
                    ba:78:75:1a:82:76:22:65:31:3b:a9:51:a2:6a:95:
                    96:94:7f:d4:95:a9:ad:54:c1:b0:33:81:65:ed:27:
                    35:64:4e:cb:17:f6:41:5d:a6:99:a5:99:c7:22:af:
                    d0:ec:08:9b:ff:ee:25:6d:0c:c1:aa:7a:a3:01:0b:
                    06:8d:82:39:af:92:55:4d:99:1d:25:84:28:6f:42:
                    16:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5C:6E:E3:B3:46:3F:58:BD:D0:01:C8:92:92:73:13:CD:61:3F:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b3a5f8ae-4d38-39cb-93cb-ba907f539fc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.131.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:ab:5d:15:84:c7:79:69:e9:77:38:c0:23:5d:98:96:3d:c6:
         77:86:1f:8b:3a:51:8f:63:83:8b:90:f2:7d:d5:9f:7a:0e:ef:
         58:47:07:34:b3:46:51:00:9a:06:b8:71:bd:19:3f:20:0d:f3:
         ca:22:db:b8:22:ed:9d:49:1f:80:ef:30:d0:65:a0:e1:12:d4:
         d2:4f:3c:4e:fe:07:d5:e8:c3:98:58:dd:6a:96:a4:a7:f2:9a:
         ac:b9:ca:ec:f4:32:21:17:c0:cf:af:73:23:e3:db:24:5a:ca:
         f2:14:80:b5:bc:da:a6:78:51:d3:9e:8e:aa:37:ba:5a:48:de:
         35:d5:ea:4f:7d:ef:cb:74:fb:09:4f:77:07:52:df:5c:54:78:
         b7:ce:c8:3d:a0:6a:ab:b5:a1:b5:23:5e:da:51:58:01:e5:ae:
         e0:b1:d1:c8:b4:44:37:6c:72:ef:b3:2e:9e:d4:b4:7c:94:87:
         e4:32:16:87:0f:c4:7c:df:29:f0:e8:da:21:39:a4:e6:82:6e:
         31:59:61:b0:bb:de:cd:14:ef:70:f2:11:62:28:c0:93:57:ff:
         9e:bd:e1:53:8c:a2:0f:e9:ce:a9:1c:26:48:6d:b4:44:9a:90:
         4a:2b:92:9a:d9:9a:63:04:6f:0e:b0:78:3d:82:bf:a2:14:d4:
         b0:b6:06:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----