Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ce0d5bd1-6f00-371e-84a4-70b9d03d86b2.roa
File:                     ce0d5bd1-6f00-371e-84a4-70b9d03d86b2.roa (raw, json)
Hash identifier:          24dHycaOBzrZweFfE0WeFONIe4ohYGQ0YTZmteOFTDo=
Subject key identifier:   60:DA:2A:50:BE:5D:28:6C:1C:54:C8:4A:44:8B:26:4A:5D:9E:67:2B
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858408903B8F90DF48E8D52267200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ce0d5bd1-6f00-371e-84a4-70b9d03d86b2.roa
Signing time:             Tue 10 Jan 2023 12:00:00 +0000
ROA not before:           Tue 10 Jan 2023 12:00:00 +0000
ROA not after:            Wed 15 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        56.157.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:89:03:b8:f9:0d:f4:8e:8d:52:26:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 10 12:00:00 2023 GMT
            Not After : Feb 15 05:00:00 2023 GMT
        Subject: CN=d7f9913e-9a1b-435f-a3d8-e9285d24eccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:55:1d:15:6a:d9:10:19:05:34:77:9e:57:53:
                    42:1f:cb:79:19:d0:fe:60:6a:3b:00:36:da:b5:2b:
                    da:73:e6:ef:3e:a0:9d:45:88:b2:e5:7d:b0:fc:3e:
                    fc:78:39:b8:40:2e:06:93:85:3e:03:07:6b:26:6a:
                    b8:be:a1:f5:2f:ff:e4:8a:d7:36:c7:32:ea:b9:92:
                    ad:ce:3f:c4:40:3d:b9:1a:77:2b:bf:e2:df:64:49:
                    9d:d3:32:02:1a:52:c1:9e:a6:ce:8e:90:d0:55:de:
                    9f:16:91:01:d6:7c:dd:18:f2:e3:02:b3:1f:c5:4f:
                    da:4e:36:92:b6:6e:cf:fe:1a:bb:4a:59:50:37:ab:
                    8a:0a:83:e6:27:a6:c4:9a:2b:25:b6:35:eb:3e:76:
                    b4:3d:ed:c7:ab:6c:81:05:0b:91:b7:8f:c3:08:47:
                    8c:fc:11:8b:ee:c3:15:7e:89:d1:2f:cf:7b:0e:4d:
                    2c:3d:f3:d5:18:e8:75:36:35:1b:54:22:d7:a2:02:
                    fc:c9:42:8a:88:0d:9c:e1:22:f6:51:3f:52:f6:c1:
                    83:95:22:fa:c2:ef:0f:20:01:54:8f:f8:f7:d6:62:
                    8b:22:db:f6:01:0b:99:e6:ba:96:d4:c9:e2:56:db:
                    50:b5:2f:6c:2a:ea:49:b7:c0:51:ae:16:56:e7:29:
                    cb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:DA:2A:50:BE:5D:28:6C:1C:54:C8:4A:44:8B:26:4A:5D:9E:67:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ce0d5bd1-6f00-371e-84a4-70b9d03d86b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.157.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:db:83:8d:2c:44:46:d5:63:03:85:0c:9b:14:96:1e:5c:64:
         a9:27:6a:d3:36:56:7c:ad:e7:dd:12:da:be:6f:76:b1:ea:2d:
         31:a0:c9:a0:7c:5d:8d:5a:99:e4:32:5a:f9:9c:c1:56:1e:1b:
         22:cd:e5:2f:1f:82:f6:a7:2f:62:7b:4e:98:a2:d9:a0:a1:8e:
         14:26:e0:72:f3:22:d4:2a:ff:df:47:7e:37:6a:28:1f:9a:31:
         3b:f1:10:15:3e:f6:8a:1b:75:84:2f:46:9f:10:f4:86:0a:2a:
         c2:45:87:3e:e0:a1:a5:01:ad:d4:06:44:0e:a4:9d:a2:9b:4f:
         c8:cf:2f:6b:42:e1:a0:08:cd:51:58:b3:8c:c3:bf:78:10:77:
         d7:9e:a2:2e:30:71:45:2f:cb:7d:34:31:a1:a2:a7:bd:19:08:
         33:f7:a3:d5:19:be:a2:53:6e:63:30:17:96:56:15:a5:c8:89:
         19:0f:f5:f0:e9:27:cc:ef:4c:a0:5f:a6:91:29:d8:b9:e1:94:
         a2:9a:c5:87:12:49:47:4f:ac:ef:d4:3f:65:be:17:ce:2f:80:
         dc:b6:be:cb:95:77:96:4b:19:36:1c:37:91:22:c0:43:51:8f:
         c2:ae:d0:11:e8:0a:0b:d1:6a:6e:69:cd:fd:4d:d9:36:e3:18:
         30:f0:89:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----