Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/eb7504b2-cbc6-3b87-9891-00cf1c90f837.roa
File:                     eb7504b2-cbc6-3b87-9891-00cf1c90f837.roa (raw, json)
Hash identifier:          8D3Dhdw8rWFVjriQD2hJG6E8RTf4DdrTlg0fdViykZQ=
Subject key identifier:   7B:6F:A3:37:33:A3:82:4F:F5:67:71:F5:4E:5F:21:B0:61:90:90:64
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858407835135EE7A2F458E0113E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/eb7504b2-cbc6-3b87-9891-00cf1c90f837.roa
Signing time:             Wed 04 Jan 2023 12:00:00 +0000
ROA not before:           Wed 04 Jan 2023 12:00:00 +0000
ROA not after:            Thu 09 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        171.73.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:78:35:13:5e:e7:a2:f4:58:e0:11:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  4 12:00:00 2023 GMT
            Not After : Feb  9 05:00:00 2023 GMT
        Subject: CN=68a03139-cc9e-4eec-bc35-900448bc8fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f8:d5:1c:14:ea:30:cb:c0:17:a7:f1:65:6e:
                    1f:f4:ce:a8:88:b0:e3:b2:eb:6a:c6:55:26:09:4d:
                    9b:25:3e:c9:85:76:c7:73:ae:c5:73:40:7a:7a:b5:
                    c6:b9:1a:16:cd:09:58:16:41:81:de:a5:db:38:66:
                    70:f3:cf:e1:98:83:f2:04:dd:55:26:37:3a:c0:ed:
                    ca:cf:9d:a8:c4:7f:44:c6:cc:33:19:3e:ee:e7:5c:
                    dc:02:85:9d:02:b2:87:16:01:b9:ac:4b:df:3b:3f:
                    dc:85:0f:b8:75:e0:fe:19:40:8e:39:7e:e8:89:39:
                    63:57:e2:80:e7:45:16:4c:82:9b:4b:3e:62:9e:3b:
                    12:31:47:03:7c:6b:15:d2:2a:8f:90:55:11:90:1b:
                    90:d2:94:a6:f3:2a:8d:30:4e:64:c5:63:11:87:11:
                    8a:51:19:17:5b:05:be:60:1d:8d:c1:7b:bf:1f:b3:
                    7c:2c:21:33:f6:91:66:ad:34:b7:bf:9b:44:ad:05:
                    4e:35:db:30:16:66:71:ce:cb:43:ca:b1:81:1c:4a:
                    b7:24:09:ca:df:92:55:3f:c3:6d:7e:a6:92:b8:41:
                    b9:1d:30:b9:33:38:3f:6d:93:91:7f:2a:e1:22:39:
                    1c:88:85:3c:dd:e8:49:91:22:31:2a:6e:30:06:6d:
                    14:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6F:A3:37:33:A3:82:4F:F5:67:71:F5:4E:5F:21:B0:61:90:90:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/eb7504b2-cbc6-3b87-9891-00cf1c90f837.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.73.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:79:32:33:bb:9a:60:3e:47:07:4c:70:b9:e5:0c:dd:1a:5f:
         f6:ff:3e:d6:67:86:81:31:56:4f:21:9f:06:80:0d:16:4a:48:
         c7:ef:ef:e9:82:67:8c:13:fb:39:f8:e2:22:a9:0a:53:4c:ee:
         3e:83:ff:b9:5b:15:6e:2a:f7:37:ec:42:d1:d3:85:8d:a8:7b:
         2a:fe:7b:4a:b0:52:ad:1e:98:08:9a:6e:49:5d:30:3f:a6:d2:
         55:1f:84:e8:07:79:cf:62:31:41:17:de:40:c3:67:91:53:0d:
         81:a5:a9:4a:1c:16:dc:ba:58:1d:b2:c9:da:67:3e:99:c5:17:
         a2:0d:03:05:64:40:48:af:26:f8:1b:89:19:a4:63:be:9a:d1:
         c7:92:23:a5:72:25:b3:be:3e:46:09:47:68:bc:6d:c0:ff:20:
         24:92:b4:8a:c2:c1:a6:1e:fa:b6:e6:05:b0:e5:f0:c0:ff:67:
         c4:03:e2:23:db:0e:10:79:59:51:08:9d:b6:44:c5:88:0c:0f:
         f6:4e:4f:b6:a2:76:00:b6:6d:c4:66:55:74:a7:55:60:be:fa:
         59:24:df:d7:4d:55:88:cb:4e:d3:fd:b6:ee:b5:67:d8:49:93:
         78:16:ea:03:81:cf:dd:fb:bd:80:5a:61:3b:ce:d4:53:bc:8c:
         4a:e3:74:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----