Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df463b33-8090-3899-8d9e-98dc811016a0.roa
File:                     df463b33-8090-3899-8d9e-98dc811016a0.roa (raw, json)
Hash identifier:          ujszSk1TPXjjH+K/1PWwKX1UwZ6OuLpT4Q1Sa4EUAxY=
Subject key identifier:   E9:56:A7:BD:07:41:AD:0F:D7:00:E9:35:56:FB:7D:14:D1:CE:5D:A6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EA02B951948D130D13EC1E540
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df463b33-8090-3899-8d9e-98dc811016a0.roa
Signing time:             Tue 19 Jul 2022 12:00:00 +0000
ROA not before:           Tue 19 Jul 2022 12:00:00 +0000
ROA not after:            Wed 24 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        170.15.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:a0:2b:95:19:48:d1:30:d1:3e:c1:e5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 19 12:00:00 2022 GMT
            Not After : Aug 24 04:00:00 2022 GMT
        Subject: CN=eccc1e66-345d-48ba-bc5c-b5623c0d1109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:65:9f:29:61:a2:74:e0:be:69:c1:f3:e1:4b:
                    51:bc:df:df:06:ce:c6:bb:ba:d6:50:bb:35:d5:60:
                    8a:2b:10:65:06:43:81:a1:82:d7:f7:ee:29:08:d4:
                    b7:d0:72:d3:18:02:ca:7b:fd:05:9d:0f:4b:73:6c:
                    12:4d:36:b1:b9:74:0a:6b:3e:a9:70:7b:a6:41:3d:
                    9b:ad:69:f5:7d:e1:db:94:da:16:ae:c2:6f:49:1e:
                    d4:c7:e2:02:22:70:3d:8a:af:8a:1f:af:fd:60:44:
                    8b:64:ce:fe:d1:89:00:98:72:c1:5f:cd:59:f2:12:
                    ad:25:65:6e:7a:c1:b5:3b:4e:18:2e:8e:83:62:ee:
                    da:1a:6d:c7:f6:eb:85:a9:ba:62:90:20:f6:c8:7a:
                    1c:e3:ba:38:7f:1c:37:56:f7:a7:b3:f4:09:2a:2e:
                    1e:78:71:e5:56:2b:25:2b:62:4f:d4:9b:28:75:a9:
                    14:23:6d:75:6b:b5:64:b4:98:29:f8:5b:cd:a8:e3:
                    3e:5c:75:82:de:10:85:58:d7:ae:9b:65:0b:b1:c3:
                    7d:a2:5d:38:1e:97:49:03:01:24:ce:67:71:10:da:
                    c8:62:61:13:30:5a:7f:c4:08:0e:cb:7a:f4:94:19:
                    1e:7e:3a:bf:a7:97:1f:60:70:b7:d1:37:0c:5b:fd:
                    91:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:56:A7:BD:07:41:AD:0F:D7:00:E9:35:56:FB:7D:14:D1:CE:5D:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df463b33-8090-3899-8d9e-98dc811016a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.15.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:14:00:8f:81:9a:71:0f:86:46:4f:64:c0:05:43:95:7d:dc:
         b6:ec:25:62:99:98:fd:24:a3:8e:18:13:c4:d8:17:cf:fb:bf:
         44:ca:2b:0c:5f:2a:b4:b3:d5:86:15:42:65:91:56:19:99:26:
         6e:6d:b5:f7:e8:3f:08:95:29:54:ac:95:2f:c9:16:ba:e4:c2:
         2e:d5:dd:7b:c7:b5:bd:2e:0f:cc:25:c1:64:8e:47:09:f8:75:
         e9:33:f0:df:e5:55:88:c7:c8:14:54:89:2d:e3:ca:c0:e8:99:
         8e:0f:3b:b3:51:19:30:95:ef:f8:da:31:b7:af:a2:64:32:84:
         e4:7f:8e:9d:b0:60:49:9f:c4:a5:ee:46:43:7c:97:b8:5e:4d:
         7a:08:68:7c:52:e9:59:2b:f0:3f:8a:a1:bf:23:36:8f:ba:3f:
         6d:d6:d8:c1:54:59:b7:90:88:12:57:5b:e7:09:bb:f3:46:c2:
         d4:13:da:59:7b:2b:d0:55:36:ec:33:66:00:ee:2a:b5:fd:8f:
         75:2d:3c:7c:b2:23:a3:de:ea:32:2b:0f:9b:fb:34:63:f4:65:
         c8:72:b3:1b:10:18:36:ed:16:92:08:be:1b:b4:50:f2:b7:83:
         4f:9c:1c:62:bd:98:de:ef:f6:3b:d1:f6:af:14:c6:8d:ce:33:
         35:b3:1f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----