Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b96ac49c-3c8b-3081-aaeb-869505cbb3a0.roa
File:                     b96ac49c-3c8b-3081-aaeb-869505cbb3a0.roa (raw, json)
Hash identifier:          YcAH45w0pKo/p347hDzEuoFU+X3kgBYnZWBZwsCSfOk=
Subject key identifier:   AB:CC:D9:05:63:89:5A:C6:8D:E5:8F:85:56:87:90:59:79:14:E7:DD
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D3D9090B3D56379BCC5714600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b96ac49c-3c8b-3081-aaeb-869505cbb3a0.roa
Signing time:             Tue 15 Mar 2022 04:00:00 +0000
ROA not before:           Tue 15 Mar 2022 04:00:00 +0000
ROA not after:            Tue 19 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.136.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:3d:90:90:b3:d5:63:79:bc:c5:71:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 15 04:00:00 2022 GMT
            Not After : Apr 19 04:00:00 2022 GMT
        Subject: CN=54d94949-b96f-4b06-b015-470fd339719b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b2:2a:af:66:77:b2:86:0f:3c:a7:fd:b1:df:
                    21:56:f4:5b:8c:ce:64:b9:b0:01:73:cb:66:bd:41:
                    4b:c8:1d:3a:16:a8:a5:92:1f:4f:2d:44:c2:aa:28:
                    a3:67:aa:28:2c:61:96:9c:51:35:8f:6d:5d:0d:a1:
                    03:ac:56:3a:eb:7d:7e:96:65:d2:75:25:dc:d3:5f:
                    09:dc:de:48:b8:ad:ca:c0:56:14:61:75:2e:e8:f0:
                    3b:f8:57:86:97:f4:bf:49:98:56:2c:fb:1c:ec:d8:
                    55:7b:03:99:f9:52:3b:e6:35:0a:20:0e:ad:f1:12:
                    c2:d7:d6:45:50:ae:e7:92:6d:22:41:b8:33:4d:70:
                    be:86:0e:5e:0b:c3:cc:e6:fa:42:5c:2c:d7:b9:41:
                    3a:e7:ff:5e:69:cb:c6:f1:28:9b:5d:64:e4:c5:6d:
                    16:c2:f5:41:f9:9d:d5:42:9d:06:4c:2a:50:d7:8a:
                    df:06:2b:ad:f1:ed:e6:5b:64:82:02:2e:26:4c:6c:
                    70:c2:3d:68:68:23:a8:fc:14:5e:fb:c6:c4:59:97:
                    7e:5e:b1:3e:5c:db:be:78:c3:0d:3c:62:87:1b:bb:
                    b3:4d:d5:ab:0c:ad:3f:aa:15:dc:22:60:8b:e5:89:
                    bd:8c:ab:82:c8:b2:8e:d3:b5:07:8f:21:69:6e:12:
                    75:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:CC:D9:05:63:89:5A:C6:8D:E5:8F:85:56:87:90:59:79:14:E7:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b96ac49c-3c8b-3081-aaeb-869505cbb3a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.136.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:2a:08:64:3f:e5:92:84:3b:28:52:b7:4e:37:20:9c:a5:34:
         0e:1b:9c:d9:aa:a3:5e:a3:4d:39:c9:92:ca:ae:b1:74:f1:b0:
         90:8e:cd:c2:94:62:17:37:e9:be:63:a1:07:25:d1:f0:12:5f:
         df:c9:0b:6a:40:a1:1f:7f:ed:62:a6:5c:85:ea:37:77:fd:c3:
         42:c7:c6:40:31:08:a5:97:bc:82:a7:f1:04:87:ae:4d:ee:2a:
         47:51:46:92:37:b6:75:0a:b6:f1:41:f4:96:0a:83:01:aa:5c:
         fd:9e:54:f7:0d:b2:ce:94:73:5f:18:b8:a6:67:c5:9b:6a:85:
         50:4a:b7:4a:6e:f8:7d:16:b7:66:9e:5e:9b:eb:3c:71:11:3d:
         fc:99:ce:14:eb:0b:10:56:da:19:eb:fd:47:f3:90:a3:02:1b:
         24:a8:57:4a:bd:23:4e:d6:fd:56:40:e7:da:5b:a4:e9:c1:fd:
         ed:83:71:91:24:94:6a:8a:c5:12:83:19:21:98:8e:75:ee:ff:
         b7:83:05:99:fb:7f:ed:56:55:01:0a:f6:64:d4:4f:1f:f3:36:
         cb:f4:1d:6c:0c:2a:9f:c1:44:bf:6f:c2:58:b1:90:f0:89:f5:
         ec:46:20:18:15:cf:67:d3:2d:ff:52:80:19:a4:c2:c5:38:97:
         da:b0:b0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----