Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bc07a7c9-1783-307a-80b4-fb89f1831a9b.roa
File:                     bc07a7c9-1783-307a-80b4-fb89f1831a9b.roa (raw, json)
Hash identifier:          O4Tfclraq/SHppIjn6acStgK8XfhSXRDDo0GAzQ65lU=
Subject key identifier:   48:84:91:7A:7A:5D:DD:94:62:2A:01:D9:1C:BF:86:E5:D0:72:36:B9
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584056A5D03C6E6C36D52AC2F4A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bc07a7c9-1783-307a-80b4-fb89f1831a9b.roa
Signing time:             Fri 23 Dec 2022 12:00:00 +0000
ROA not before:           Fri 23 Dec 2022 12:00:00 +0000
ROA not after:            Sat 28 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        156.27.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:56:a5:d0:3c:6e:6c:36:d5:2a:c2:f4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 23 12:00:00 2022 GMT
            Not After : Jan 28 05:00:00 2023 GMT
        Subject: CN=fbffe4d4-17c1-4ff4-b949-eaecdddbe3a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fa:e8:88:14:e8:de:53:16:ea:13:80:9a:d2:
                    5b:18:3e:c7:84:90:4c:00:f1:3f:f2:7e:b5:63:95:
                    59:9e:16:65:5f:37:be:10:01:36:de:05:df:d3:01:
                    c8:d7:d9:e6:32:fd:94:c9:f1:4b:bd:38:15:3d:2d:
                    fe:f6:47:0e:57:bb:99:37:6d:5a:4b:e3:47:e4:bb:
                    26:2d:82:87:69:e9:ca:ce:ce:eb:ec:1f:37:bb:28:
                    e0:bb:f8:8f:b3:ee:95:d7:4e:d8:22:76:18:cc:66:
                    ed:11:b6:b1:e7:32:86:4e:e4:89:4f:80:69:dc:0b:
                    7d:8f:c4:71:9f:14:e5:90:99:04:ae:70:ea:89:2b:
                    31:48:d3:ce:25:ba:bf:e9:92:fe:61:8f:da:f5:cd:
                    a2:72:8c:6b:10:5c:4c:53:6a:58:b8:cc:ca:0e:6f:
                    3c:df:a6:01:e5:67:c6:14:e7:0c:2c:bc:40:ea:f7:
                    b1:90:13:c5:0e:f9:f6:80:f6:02:7e:42:74:80:1b:
                    7b:22:e3:53:9e:ee:b7:aa:06:47:ce:60:49:cd:bf:
                    8d:3f:66:85:41:7f:b2:da:3f:bc:64:6e:45:8b:ca:
                    fb:9d:23:06:bb:aa:78:aa:d1:d7:73:c9:00:87:72:
                    ad:d3:4a:ef:aa:9b:d8:33:8b:77:db:c1:3e:d3:63:
                    55:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:84:91:7A:7A:5D:DD:94:62:2A:01:D9:1C:BF:86:E5:D0:72:36:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bc07a7c9-1783-307a-80b4-fb89f1831a9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.27.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:f1:34:6d:33:76:2a:c9:50:b6:b8:6c:b6:f2:3e:e2:7f:0b:
         07:8e:38:e0:b0:3f:ec:84:0c:c3:7d:2c:8a:76:ab:2d:3a:55:
         df:cd:37:71:ba:f7:d8:9a:b6:9b:71:de:59:84:ad:55:a2:86:
         40:08:e2:6d:d6:90:fc:52:4e:12:26:4e:36:25:78:09:cf:82:
         89:1a:a8:46:1b:ef:5d:9d:7f:f8:50:e5:06:50:86:b6:0c:0f:
         6b:28:12:b1:5e:b9:f5:1e:2a:61:8d:87:f8:a6:fe:55:3b:25:
         ea:a4:b7:57:85:33:77:32:78:65:73:7f:91:27:66:e0:e3:46:
         ee:d1:4f:db:da:af:d6:1c:e6:9b:64:71:ff:96:94:ac:f4:60:
         e7:69:45:80:55:b7:cf:c7:a3:00:78:7c:87:8c:b5:a5:d6:91:
         14:d2:1e:e8:7a:be:99:6c:7b:54:98:4b:9e:29:0c:1b:8f:c6:
         52:68:c1:ec:78:0e:6d:91:5a:f7:f3:77:e5:d6:86:4c:1e:8e:
         ca:f6:64:f7:d9:48:c4:ae:55:4c:89:58:93:6d:0d:47:40:8b:
         36:99:43:66:15:e9:b4:43:da:66:41:5c:f0:8d:cf:9e:a3:0f:
         e0:40:aa:14:bf:1a:dc:09:1b:1a:99:45:35:50:cd:eb:83:9f:
         6f:62:34:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----