Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e522e622-d50d-3e4d-8bf3-847438c8db8e.roa
File:                     e522e622-d50d-3e4d-8bf3-847438c8db8e.roa (raw, json)
Hash identifier:          hJb9Row44olasBLsdEO4cqVtVWO5fZjALMVYsc+gT1U=
Subject key identifier:   F7:D3:41:A9:9C:73:FF:B4:F1:AB:B7:E7:8E:52:11:B2:3A:95:8F:26
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F542E01C9BE3B1E1FEC4A3980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e522e622-d50d-3e4d-8bf3-847438c8db8e.roa
Signing time:             Wed 21 Sep 2022 12:00:00 +0000
ROA not before:           Wed 21 Sep 2022 12:00:00 +0000
ROA not after:            Thu 27 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.24.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:54:2e:01:c9:be:3b:1e:1f:ec:4a:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 21 12:00:00 2022 GMT
            Not After : Oct 27 04:00:00 2022 GMT
        Subject: CN=0c33462c-7565-470f-baa4-d51696763666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:15:11:37:13:71:6c:22:23:8d:2a:64:cb:6a:
                    69:a2:4d:8e:72:dc:95:33:06:ac:04:3b:2d:a6:e6:
                    b3:ad:c8:53:f6:c7:29:2c:6a:81:83:ae:e2:eb:d4:
                    83:b6:0a:f3:f1:d8:00:bf:1c:93:e6:2c:b4:5e:63:
                    fa:6b:05:fd:8c:5c:6c:76:46:9e:9d:88:73:cf:74:
                    01:d9:44:ba:a2:64:ca:de:c8:2c:e3:66:07:d8:9b:
                    ba:b2:42:9a:57:b4:4b:8f:76:95:2e:fa:9b:83:61:
                    7b:33:34:8e:ee:6d:c5:c8:fb:ae:cf:c2:ff:ee:b2:
                    c3:a9:00:92:34:35:0e:30:32:44:44:17:fe:8b:b4:
                    d4:bf:69:31:d3:b6:30:cb:9f:b4:f4:f9:14:45:43:
                    65:55:d7:c3:51:54:10:90:d9:ac:2e:8e:ab:7a:e5:
                    ca:25:7d:b4:a2:e2:62:ea:11:6d:10:7c:bf:f1:17:
                    6a:00:21:d5:18:69:88:44:35:e5:67:3f:3a:23:97:
                    c7:32:44:e0:41:94:2e:44:61:8b:34:e9:5d:18:a1:
                    eb:c8:3b:4c:24:4f:93:55:51:26:8d:6c:26:39:12:
                    30:13:9a:d4:f0:9d:91:53:70:1d:3a:ae:1d:46:09:
                    ed:86:46:2f:80:93:2f:1d:ec:31:b3:f0:1c:c9:11:
                    c0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D3:41:A9:9C:73:FF:B4:F1:AB:B7:E7:8E:52:11:B2:3A:95:8F:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e522e622-d50d-3e4d-8bf3-847438c8db8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.24.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:01:87:6e:87:dd:2c:60:aa:5a:46:64:88:a6:e0:55:2c:40:
         b4:43:67:9e:df:9b:65:1d:9b:75:1b:a2:e4:34:74:f9:73:63:
         4f:d4:5c:86:a4:4c:7f:0d:65:90:13:8c:5d:e0:bb:fa:7c:94:
         02:4c:c6:b8:2d:6e:0d:56:6a:93:d6:49:50:b6:6f:1b:80:cb:
         ee:9a:89:94:b0:16:c0:c3:1e:4c:07:f7:8d:0f:76:50:14:d8:
         b2:12:f3:9a:4e:e2:46:5b:99:7f:59:99:75:8b:fb:13:ac:36:
         4f:92:ba:31:b1:0c:7c:77:3c:b1:ff:38:b8:3e:80:bf:5a:22:
         15:50:d5:45:dd:62:b5:f5:51:d0:df:ea:f0:31:5e:34:87:45:
         82:17:cf:43:56:61:5b:82:25:55:37:09:16:6d:58:27:3a:dd:
         fe:28:6b:29:e5:bb:80:0c:06:81:c3:78:df:ac:2f:bb:7c:63:
         e6:43:6f:0c:1c:14:c2:fb:cf:31:25:b3:35:a3:dd:81:f1:42:
         86:04:48:df:71:78:fd:ef:ae:5f:5d:55:2a:62:27:5b:04:0d:
         d3:a2:12:d0:c1:e2:92:4c:12:a8:c6:0f:aa:b9:03:0e:90:73:
         7a:53:0c:0c:a6:dc:e5:b7:4d:ce:ea:77:32:c0:62:08:51:71:
         2a:a1:dd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----