Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ca6460af-ca7b-3cde-91eb-def402d0546e.roa
File:                     ca6460af-ca7b-3cde-91eb-def402d0546e.roa (raw, json)
Hash identifier:          OfLnCilVFLmgSO06BzAn7Cp5BGiM9Fvq4qIaIHoBwbA=
Subject key identifier:   09:28:FB:E3:CD:1E:0C:44:3B:A6:8B:81:60:5A:8B:91:FB:6D:E5:74
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F4DAA31E24D60A8F483335360
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ca6460af-ca7b-3cde-91eb-def402d0546e.roa
Signing time:             Mon 19 Sep 2022 15:15:07 +0000
ROA not before:           Mon 19 Sep 2022 15:15:07 +0000
ROA not after:            Tue 25 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        139.56.2.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:4d:aa:31:e2:4d:60:a8:f4:83:33:53:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 19 15:15:07 2022 GMT
            Not After : Oct 25 04:00:00 2022 GMT
        Subject: CN=cacb1cb6-6657-4983-adaa-a8e91b7dbcf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:88:54:78:7f:16:9d:32:fd:33:a7:3b:d8:ed:
                    d3:a9:8d:c4:52:e3:28:54:ad:03:12:63:95:b1:f6:
                    7b:e1:67:61:d3:73:3b:d3:e1:93:c5:06:b0:ef:a8:
                    58:24:25:59:6a:8d:4f:7e:71:cf:8f:2b:02:30:ac:
                    64:1e:25:2f:39:a6:79:e6:0b:8a:f7:03:b0:6e:49:
                    43:f2:f2:9d:ce:cf:a2:6a:78:37:e5:52:77:9b:01:
                    d0:fa:79:ce:08:c5:26:1b:87:27:15:a7:4b:93:9d:
                    3d:e5:2a:97:4e:6c:d6:a3:ed:b3:4a:f4:ca:17:1e:
                    5b:1e:6d:7b:3a:46:c0:d3:8c:d6:31:dc:80:e6:7a:
                    a2:51:0e:26:9e:5b:14:19:9e:69:ba:f4:d1:22:21:
                    e1:34:96:63:c1:39:8d:8f:4a:97:28:ba:17:61:32:
                    5a:1e:90:02:37:2c:8f:14:84:60:c9:ba:43:79:0d:
                    5e:69:4c:fc:c0:8a:8c:2e:96:25:63:b3:7b:68:4e:
                    9c:75:aa:36:81:21:b3:37:0e:dd:4f:d2:6d:ce:af:
                    18:9e:f3:d2:a2:a9:29:27:bf:c7:8f:4a:a8:ba:68:
                    1b:d4:e2:32:08:81:aa:5f:5a:8d:6e:d5:90:89:d7:
                    bc:eb:b1:ee:cb:ba:f2:d2:86:7e:3b:b4:c1:c5:d8:
                    03:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:28:FB:E3:CD:1E:0C:44:3B:A6:8B:81:60:5A:8B:91:FB:6D:E5:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ca6460af-ca7b-3cde-91eb-def402d0546e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:e1:d0:8f:40:68:95:2a:bd:82:7c:0f:55:10:25:b6:4d:77:
         cb:56:2b:dd:46:8c:bd:41:87:be:9e:1f:ac:cb:ca:cb:4e:98:
         c2:fa:d7:63:06:3c:09:cd:9b:38:ac:46:1b:8a:7a:4c:62:81:
         b5:aa:e5:54:dd:7b:40:99:f5:16:92:90:ca:23:1b:21:e2:4f:
         a8:21:c8:eb:4d:2a:8b:a3:b0:1c:1b:b7:83:7c:40:4d:92:f2:
         83:26:59:bf:ae:ba:dd:94:e3:aa:08:ef:d0:a3:96:2c:5f:fe:
         cc:dd:e2:c9:70:dd:50:41:24:f2:b1:1a:4e:5c:07:80:f7:5a:
         c5:7f:d6:24:62:9a:15:fb:b5:86:f6:67:e3:1b:de:65:60:d9:
         a9:d3:d6:05:1f:9f:21:64:48:75:fd:a7:77:d1:a7:7c:17:32:
         46:1a:7a:9a:f8:ae:a8:97:59:9e:05:35:9f:09:97:4f:09:c4:
         ca:0f:52:d4:ec:8d:c0:e0:3f:a7:c9:0e:7c:67:fe:86:d0:db:
         f4:16:79:4e:c2:9d:e8:a2:24:10:29:1a:fe:a9:20:b1:71:7f:
         cf:88:ee:92:c3:73:f1:e1:90:70:c7:37:23:bb:bf:55:e5:58:
         f6:ea:21:a5:24:d8:cc:ca:67:e8:a1:94:e1:50:b2:5f:25:89:
         e6:f1:62:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----