Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/eafe446f-d8be-3c95-a478-af3618efbff5.roa
File:                     eafe446f-d8be-3c95-a478-af3618efbff5.roa (raw, json)
Hash identifier:          g5M8ATCFOGVBOVbFiY0d2ziE/z3IORR2K2T8JDDGVGQ=
Subject key identifier:   EA:7C:3F:F6:FF:0F:51:15:DE:E3:22:2B:FC:CA:42:83:A4:5B:64:1D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858404426D64BB25F3AE198AB22D0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/eafe446f-d8be-3c95-a478-af3618efbff5.roa
Signing time:             Fri 16 Dec 2022 12:00:00 +0000
ROA not before:           Fri 16 Dec 2022 12:00:00 +0000
ROA not after:            Sat 21 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        99.79.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:44:26:d6:4b:b2:5f:3a:e1:98:ab:22:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 16 12:00:00 2022 GMT
            Not After : Jan 21 05:00:00 2023 GMT
        Subject: CN=d76c0ec0-6b53-455e-a285-bd23eb315c5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7a:20:91:6d:50:6f:0c:fa:06:da:0a:f3:41:
                    1b:bf:18:3d:88:65:67:4d:47:23:59:e7:5f:84:fd:
                    62:53:b8:ba:9d:48:62:31:3b:5a:8c:d1:38:2e:7e:
                    96:d4:ad:83:56:a9:e9:a1:f8:30:fb:01:6a:fc:f8:
                    e2:6a:52:d7:2e:b3:33:1b:8b:19:96:0f:52:be:9b:
                    4b:a7:00:6b:7f:ca:84:49:b5:e0:58:d9:df:63:4d:
                    37:30:67:d5:a9:e4:29:39:14:88:ed:0b:df:24:8f:
                    8b:67:a8:89:2c:41:d2:69:e7:98:49:a6:0d:60:92:
                    ed:e3:3b:89:07:ec:15:11:3f:22:d3:25:b1:39:21:
                    7a:b8:59:08:b9:ad:9d:ab:61:f0:72:ed:20:b1:87:
                    bf:77:ed:8a:42:c7:02:e9:42:be:3e:7f:3b:c1:af:
                    7c:d2:3b:a5:da:69:43:da:fb:30:aa:4b:b1:07:41:
                    fa:09:d3:47:db:89:e1:7b:36:7b:a7:a0:17:b0:9d:
                    e7:d8:f5:f2:23:c7:86:bf:93:3f:09:ca:c0:8d:84:
                    91:e6:20:3b:bf:c8:a3:bc:5f:3b:91:44:4f:cf:59:
                    92:98:6b:c9:d4:4c:ba:0c:02:3e:6f:16:3f:4f:4b:
                    b5:91:f0:d7:1e:08:ca:c4:ad:24:6c:2c:20:69:63:
                    5f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7C:3F:F6:FF:0F:51:15:DE:E3:22:2B:FC:CA:42:83:A4:5B:64:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/eafe446f-d8be-3c95-a478-af3618efbff5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.79.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:cf:d5:91:f8:64:f2:3f:7f:e1:e9:4f:e3:b5:cf:b1:fa:eb:
         ea:13:93:2a:74:d1:de:f6:7b:dc:3d:f3:83:b8:11:af:99:32:
         af:47:5f:ae:6b:84:e3:c9:c0:88:f8:f7:2b:05:3a:0f:cb:1c:
         5c:46:c8:fb:37:66:f3:9a:57:84:3c:f9:ed:2b:cc:d9:85:6d:
         d8:a7:a5:39:e9:ef:01:dd:b1:02:a7:b7:46:ab:7a:01:88:d8:
         78:d6:4d:1f:39:65:36:dd:e6:e6:5e:15:a1:d7:51:47:5d:b7:
         0c:90:d4:22:51:a7:61:b5:35:67:4a:ee:f9:99:1c:36:15:78:
         c7:32:e0:76:fe:0a:40:bc:6c:26:82:a5:83:d8:c6:32:f9:08:
         04:5a:a6:15:43:24:4c:5d:84:01:d9:b0:de:f8:37:ea:12:a0:
         76:3c:ef:a5:7f:b5:ad:a3:6b:5b:cd:07:d1:92:7d:40:38:76:
         27:2d:c6:72:47:a3:b8:51:94:58:8b:d7:9c:87:c9:81:68:ad:
         d7:ef:e5:56:cc:a4:2b:d6:be:c2:c6:f2:b6:54:f4:38:56:94:
         f6:c4:f5:1c:7f:c5:7a:a9:df:0a:8c:24:e8:48:2b:bb:95:fa:
         f0:8d:53:bc:e4:90:21:e3:b4:01:c7:40:08:05:ea:a9:4a:18:
         b6:29:0e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----