Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c61ff4a3-0e9e-350a-82fe-be0f6315c8c6.roa
File:                     c61ff4a3-0e9e-350a-82fe-be0f6315c8c6.roa (raw, json)
Hash identifier:          7WJuywiApFnotmWdQMlpuCYzaWgUoJpVL5tZOdim/4o=
Subject key identifier:   53:A4:C8:A3:25:8E:DF:FF:02:3D:AE:BA:E1:37:59:9B:3D:D7:99:01
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E9595E7DCD6C6BC3F95311000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c61ff4a3-0e9e-350a-82fe-be0f6315c8c6.roa
Signing time:             Fri 15 Jul 2022 12:00:00 +0000
ROA not before:           Fri 15 Jul 2022 12:00:00 +0000
ROA not after:            Sat 20 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        108.156.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:95:95:e7:dc:d6:c6:bc:3f:95:31:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 15 12:00:00 2022 GMT
            Not After : Aug 20 04:00:00 2022 GMT
        Subject: CN=f3931e93-f82b-4209-8a62-76f34e6a9326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fa:39:fc:4b:fc:15:33:4e:e2:cc:c9:c6:dd:
                    56:5d:83:2f:bb:4f:9e:4d:e3:18:aa:8b:81:0b:01:
                    69:3f:f3:a0:5d:f2:78:5a:d1:10:41:b5:89:ee:11:
                    5f:73:3d:30:d6:97:c9:9c:80:e6:59:24:1d:67:50:
                    03:80:be:90:7f:b7:74:7e:8e:0c:82:f4:fc:51:c4:
                    3c:95:8d:ff:14:34:04:1f:f6:6b:fb:cb:f3:06:1c:
                    82:89:8d:fc:b3:94:4e:24:ce:aa:1d:bd:c9:9d:e6:
                    5b:50:4e:6f:1d:9d:96:30:97:97:75:f1:f8:54:38:
                    e8:9d:cc:53:2d:cd:e7:fd:20:7f:bd:dc:83:82:47:
                    a2:7f:f9:98:f2:85:b6:6d:3b:c6:19:51:60:92:f1:
                    02:79:09:de:60:f2:1a:ed:ce:1b:f3:9e:ff:53:48:
                    38:bb:f7:31:37:f6:13:4c:95:57:75:78:d4:e9:0e:
                    ea:a5:29:05:6a:6a:d3:1b:76:7a:bb:d7:34:8d:21:
                    a3:7d:0f:bd:1b:e4:39:d2:59:3a:27:68:72:ef:a4:
                    5e:a1:25:fa:20:b9:57:5a:41:1a:41:8f:b1:01:b7:
                    40:8a:e3:4e:a2:a1:84:fe:e4:48:f3:79:ff:76:a8:
                    b1:1b:8f:84:11:c6:e9:e2:08:3e:77:06:20:e8:c8:
                    cc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A4:C8:A3:25:8E:DF:FF:02:3D:AE:BA:E1:37:59:9B:3D:D7:99:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c61ff4a3-0e9e-350a-82fe-be0f6315c8c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:cf:df:fd:8f:19:42:cc:aa:9d:4d:b6:49:8f:9c:d8:ab:4e:
         fa:50:da:4c:c5:fc:9d:1e:30:da:bd:34:8f:7e:68:2e:4f:6b:
         3b:3b:e4:2c:26:d1:ad:e6:f9:89:c7:5f:b0:4b:68:05:13:20:
         f4:ce:f3:83:71:55:b3:bc:95:61:fa:5b:0c:07:fe:91:97:73:
         59:c0:39:64:d6:bb:2b:33:a4:3b:f4:d7:25:73:35:f0:e2:fe:
         b6:b2:12:9b:25:53:83:1a:1d:57:cb:0c:2f:be:a3:4c:b7:49:
         65:d2:4a:1d:86:7d:53:fc:f6:01:23:2a:b2:6b:93:b5:b6:19:
         30:e3:a7:19:1d:57:ae:3b:b3:9a:bd:5a:2b:9f:10:2e:1b:45:
         a2:13:1a:f1:82:43:c5:f7:74:33:06:bd:93:d3:b1:e6:5d:ac:
         8c:da:8b:d2:8a:5b:e3:1f:df:80:d0:42:1a:39:1e:1e:7a:03:
         38:4b:cc:13:1a:8b:db:b6:70:5b:a4:98:5a:a9:05:65:7b:f6:
         64:51:ea:43:53:25:41:82:0d:a2:53:11:5a:38:78:c2:be:79:
         a2:3b:1f:3f:0d:ae:4e:f9:e6:2c:47:d0:64:14:b4:ba:02:49:
         0c:e0:1c:5b:9b:8d:2e:8c:09:5a:1a:99:79:75:d7:04:77:0e:
         49:1e:ab:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----