Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ba1c171b-5c66-31e7-b78a-0129977ea3e1.roa
File:                     ba1c171b-5c66-31e7-b78a-0129977ea3e1.roa (raw, json)
Hash identifier:          oatXD5uc2e8KzV7XOPlDFy2MuWRgS/wKDUovrY3jp9U=
Subject key identifier:   0A:66:45:A4:6B:A9:D4:8F:F1:E7:B8:8A:9D:F8:1A:67:9A:11:B4:9B
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858409AAAD939D013565E3751EFE0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ba1c171b-5c66-31e7-b78a-0129977ea3e1.roa
Signing time:             Mon 16 Jan 2023 12:00:00 +0000
ROA not before:           Mon 16 Jan 2023 12:00:00 +0000
ROA not after:            Tue 21 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        16.175.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:9a:aa:d9:39:d0:13:56:5e:37:51:ef:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 16 12:00:00 2023 GMT
            Not After : Feb 21 05:00:00 2023 GMT
        Subject: CN=ed6cc338-da07-488a-8d9d-d4273dbda20b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8a:82:a9:2e:55:41:72:4b:27:ec:de:65:31:
                    29:26:23:47:b4:69:dc:f6:90:d7:4b:8e:e0:fd:54:
                    5d:e2:d0:4f:6e:10:31:1b:66:36:00:60:f4:04:0c:
                    32:a8:75:b3:72:b6:fa:c6:9c:2d:3f:d0:59:f9:86:
                    55:07:bd:13:42:65:ef:ad:c2:70:46:cd:27:fe:3a:
                    db:b3:04:99:81:79:e7:34:ba:e8:66:a6:05:32:d6:
                    ac:8b:67:3c:b2:a7:26:7f:4f:17:5b:2f:70:69:ff:
                    d1:cc:d1:ea:bd:cb:82:a5:10:2d:a6:ce:df:41:4e:
                    d2:74:36:e4:be:98:13:db:44:4d:75:c1:e8:8a:75:
                    7d:39:73:5d:18:a9:5a:80:97:b9:dd:e8:47:88:f4:
                    e0:bd:46:e7:57:6f:d1:75:61:80:85:fd:37:c1:c8:
                    f0:56:54:cf:dd:ef:b6:45:92:5f:ad:ee:d3:6f:68:
                    78:57:41:a3:a1:2f:2a:e7:fd:8e:8f:cb:c2:66:dd:
                    0b:5b:97:93:9f:c1:aa:7c:19:c6:2c:b5:b8:2a:25:
                    d6:90:eb:78:e3:d3:21:be:76:46:9b:0b:6b:78:11:
                    07:8b:77:30:6b:4e:fb:21:55:eb:43:cb:d6:86:b6:
                    43:c5:ec:09:ea:61:74:c6:d9:fb:07:3d:d9:f6:0c:
                    3e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:66:45:A4:6B:A9:D4:8F:F1:E7:B8:8A:9D:F8:1A:67:9A:11:B4:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ba1c171b-5c66-31e7-b78a-0129977ea3e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.175.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:8f:68:37:8c:03:24:87:9c:5e:46:b7:a7:bd:86:81:08:41:
         6c:0a:70:bf:8c:4f:17:f5:5e:db:a3:49:a9:9e:ae:b0:bd:76:
         46:ec:0d:b0:39:24:c4:97:be:ae:16:31:96:e9:00:8a:c5:ac:
         5f:fe:e5:9a:47:f2:20:3c:ff:b8:19:ef:46:d7:c4:a6:47:95:
         0c:25:45:72:40:0d:4e:e0:fc:16:b4:bb:54:7a:4a:7e:8a:05:
         d3:b2:3c:27:52:34:19:e9:76:a0:5f:43:9e:8e:af:dc:a0:b2:
         60:5f:09:96:0c:31:19:fe:dc:8f:fd:fa:b9:d1:28:9c:a8:4d:
         68:0c:31:46:74:3d:1b:a8:ff:44:f2:5e:df:30:f4:0b:3e:d1:
         05:b6:c0:af:b6:c2:82:c8:29:86:b5:11:b4:b7:ca:77:19:3d:
         82:df:e8:ed:0d:85:30:cd:ce:35:0b:66:40:0d:07:74:c9:91:
         34:3e:83:94:93:a9:4a:14:10:69:33:fe:21:80:ca:3c:b5:67:
         7d:dd:a8:71:39:e6:24:e7:ac:83:97:c0:23:bb:2e:38:92:92:
         3a:95:73:2b:ff:b3:db:56:e2:8b:9c:68:08:a7:e8:3a:cb:9d:
         4e:7f:d6:f2:06:5b:99:b4:9d:08:19:21:07:39:45:b8:7b:ce:
         a5:a0:41:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----