Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bf998a21-5716-3526-90e7-54f936740132.roa
File:                     bf998a21-5716-3526-90e7-54f936740132.roa (raw, json)
Hash identifier:          kZdgZLQHA76N/lI1DVjMCUpydkZ4RoXQgyjrxsHkYW4=
Subject key identifier:   0B:AA:A5:A4:FF:DE:07:0A:10:65:E1:96:B5:27:EE:C3:8F:8C:08:AE
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840CBD780BDF79353E63DF71AC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bf998a21-5716-3526-90e7-54f936740132.roa
Signing time:             Fri 03 Feb 2023 12:00:00 +0000
ROA not before:           Fri 03 Feb 2023 12:00:00 +0000
ROA not after:            Sat 11 Mar 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        16.28.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:cb:d7:80:bd:f7:93:53:e6:3d:f7:1a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  3 12:00:00 2023 GMT
            Not After : Mar 11 05:00:00 2023 GMT
        Subject: CN=74ca262d-b70c-4a3f-8348-fadd98572bbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4b:36:6a:61:be:d9:fc:af:81:27:2f:fb:5c:
                    03:c4:63:ce:ff:a7:f1:01:31:18:84:86:b0:ef:f0:
                    90:7c:24:54:1e:c5:14:d7:18:97:f5:53:23:d8:8c:
                    18:07:d3:5e:10:d7:1a:eb:61:0d:22:c0:0e:e6:ae:
                    3d:12:c8:c4:91:e2:a0:7c:45:70:86:67:ad:6a:2e:
                    75:18:94:85:4a:9c:77:c0:85:47:51:d7:b3:56:a5:
                    97:7c:64:b7:35:d8:fd:6a:d1:f9:55:18:ac:0e:ec:
                    b3:7a:39:38:c3:bf:0e:23:eb:4b:ec:8a:59:4d:52:
                    22:d0:40:0c:5d:94:1b:d0:74:62:5d:9b:95:c0:cf:
                    56:e7:4e:e9:0f:fe:4f:25:1a:ef:fd:f0:56:04:46:
                    b3:7a:b7:9c:0c:17:c0:6e:ca:9e:43:1f:e1:15:68:
                    8d:34:ef:c9:68:aa:df:a3:e1:38:3e:16:43:f2:87:
                    61:e3:45:5b:4d:e4:e9:d5:3b:6f:3b:62:5b:ab:15:
                    e4:a3:24:19:e7:ec:db:b3:f7:91:f4:68:a1:43:e2:
                    c7:3a:69:8e:91:52:2e:9a:cd:dd:5a:ba:f2:51:94:
                    ec:f5:9c:d5:51:3b:93:c8:b8:c4:1e:dd:36:6b:d5:
                    1d:6d:b1:b4:5a:4f:ff:16:2a:c6:c5:33:89:24:95:
                    f1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AA:A5:A4:FF:DE:07:0A:10:65:E1:96:B5:27:EE:C3:8F:8C:08:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bf998a21-5716-3526-90e7-54f936740132.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.28.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:83:67:8c:f1:aa:96:6d:fe:86:7c:3c:cb:73:bf:38:d2:f0:
         13:82:a3:eb:7b:16:92:c8:23:ce:5a:a3:fd:0e:f9:30:7b:1a:
         9e:13:fb:ef:7b:f3:4d:d5:ed:a5:8e:93:c1:75:e8:ea:e3:0f:
         68:e9:cb:80:2d:38:73:fc:3b:cf:cc:61:19:d3:9e:f3:dc:01:
         94:66:38:5b:92:f8:56:28:3f:50:ef:19:65:18:14:c3:79:51:
         1b:a6:15:71:08:76:30:c0:59:b8:c9:f1:b7:f8:65:df:e2:bb:
         ea:aa:f7:65:32:d7:c1:33:8c:4c:87:62:9e:bf:25:b6:57:03:
         6d:9d:eb:0f:f6:e2:ab:ff:f7:07:8a:d7:76:ab:99:51:0e:a3:
         4f:3e:55:c0:2f:c1:7a:4d:8d:e6:df:ae:6f:cb:0b:f5:1c:85:
         96:b9:db:1d:ea:4a:3e:d0:1c:72:5d:0f:c3:2b:66:85:01:60:
         8b:5b:13:a2:a0:d7:83:36:df:03:7b:0d:75:a0:ba:0a:d1:af:
         bb:ba:41:ff:33:47:b4:0c:02:72:b0:06:8d:f4:21:30:90:57:
         08:91:e9:1a:41:01:fa:e7:fe:96:3d:6f:2d:6b:d9:df:99:08:
         81:7c:79:a5:5d:27:1b:9e:8c:ab:d3:33:b1:32:01:ca:6a:21:
         ee:58:c8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----