Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dbb0077e-57fe-3e9f-8e08-651dcc2c017d.roa
File:                     dbb0077e-57fe-3e9f-8e08-651dcc2c017d.roa (raw, json)
Hash identifier:          FQUifODeO8PcReDX1DEPV4kTyFV+PDVoiQ1KSxDXYDM=
Subject key identifier:   69:8A:0D:98:99:9D:1E:35:6D:B0:C9:4F:68:63:69:E6:B4:00:15:B3
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D07ADAB4E4E13F9092150E120
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dbb0077e-57fe-3e9f-8e08-651dcc2c017d.roa
Signing time:             Wed 23 Feb 2022 05:00:00 +0000
ROA not before:           Wed 23 Feb 2022 05:00:00 +0000
ROA not after:            Wed 30 Mar 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.142.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:07:ad:ab:4e:4e:13:f9:09:21:50:e1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 23 05:00:00 2022 GMT
            Not After : Mar 30 04:00:00 2022 GMT
        Subject: CN=10981e3c-c1cd-4bd5-ad79-49b4dc12baa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:33:4d:57:df:15:15:45:8a:4d:98:ad:8f:d1:
                    f0:02:08:cd:ae:7a:e0:57:71:af:5e:82:a6:fc:1b:
                    55:aa:02:1e:c0:6e:99:e8:ba:3e:eb:60:17:60:94:
                    e9:0d:5d:f6:e1:73:de:cf:41:5c:60:92:83:9d:76:
                    62:f0:74:de:46:32:9b:ca:78:d4:90:c6:28:be:31:
                    e2:10:6c:65:5a:01:7c:5d:4e:d2:a2:91:26:bd:6b:
                    4f:9c:20:98:69:2c:ac:36:25:0c:87:04:bc:42:4c:
                    a1:04:77:b0:4a:1d:db:07:d8:90:b7:48:eb:8a:be:
                    91:b6:73:eb:ce:43:3d:d6:af:e9:83:13:19:bc:9f:
                    6e:f3:1a:a9:8a:84:fa:77:87:fc:b0:09:f8:2f:7f:
                    5b:87:f7:be:71:ca:3d:9a:e2:e9:e2:25:5b:89:71:
                    ec:d3:53:80:41:8a:1c:64:69:84:ce:ce:b2:e7:9a:
                    b5:72:eb:52:3a:d9:11:75:20:b0:d1:63:4e:1b:d3:
                    24:c3:22:37:55:bf:94:d2:ca:ef:fd:9f:74:b5:83:
                    bf:19:99:90:9e:5c:12:43:65:b8:bf:69:a9:18:df:
                    af:af:14:a3:fd:73:60:9a:1e:81:98:92:f5:13:38:
                    15:59:e9:74:3e:10:c1:cf:96:15:55:a7:1e:e6:77:
                    fb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:8A:0D:98:99:9D:1E:35:6D:B0:C9:4F:68:63:69:E6:B4:00:15:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dbb0077e-57fe-3e9f-8e08-651dcc2c017d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.142.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:3d:1c:dc:83:00:40:39:00:f8:6a:18:ab:5a:85:6c:ba:97:
         1a:98:7d:5d:75:92:8f:d0:46:87:6e:bf:6b:ff:5d:94:5a:3c:
         06:6e:c3:61:99:5b:8f:f8:b8:bb:1b:e6:c0:04:fa:72:3b:f4:
         3e:73:1b:cb:5f:70:2f:c6:4a:fa:08:b2:f0:0b:1f:90:a1:35:
         77:58:34:f5:83:70:31:7c:50:2f:f6:14:cc:f5:4a:c3:f9:e0:
         f0:db:ae:c5:9d:3a:7a:35:b9:40:21:86:c8:ef:a4:10:59:15:
         85:28:18:75:fb:e0:ab:6f:e2:b4:84:d0:7b:cd:f3:cf:48:88:
         df:21:f4:fe:8b:9d:68:e8:74:39:3b:41:bd:20:b2:52:fa:f0:
         1e:48:53:c1:b1:9b:68:cb:47:bc:1d:7f:c5:87:68:7d:96:22:
         6c:df:85:f6:bc:88:33:26:3c:eb:a5:6d:6d:0b:2c:e7:08:53:
         df:83:e4:40:0d:f6:76:7e:e8:c4:01:8d:4c:1c:be:e1:91:9d:
         34:67:7d:2c:34:bd:6a:5b:b0:53:10:54:85:58:f7:fc:3b:0e:
         19:97:db:9e:83:58:e9:85:a1:48:7a:bc:91:b6:99:94:09:b1:
         0a:52:35:c6:d0:b9:d1:46:e3:b3:2f:9d:83:01:d1:2b:0a:99:
         92:09:ef:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----