Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ed8e4bf7-527c-3b7f-b298-cf151c46f8fc.roa
File:                     ed8e4bf7-527c-3b7f-b298-cf151c46f8fc.roa (raw, json)
Hash identifier:          EZnt7VJpHEItIcnav8OXEuODCQTC8u6oXunA6+ukY9s=
Subject key identifier:   E9:4C:C8:18:FA:45:F9:16:65:7D:48:15:40:4F:2E:D3:61:5A:CD:FE
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EF50E7612136F6D70D55EE0A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ed8e4bf7-527c-3b7f-b298-cf151c46f8fc.roa
Signing time:             Thu 18 Aug 2022 12:00:00 +0000
ROA not before:           Thu 18 Aug 2022 12:00:00 +0000
ROA not after:            Fri 23 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        182.28.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:f5:0e:76:12:13:6f:6d:70:d5:5e:e0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 18 12:00:00 2022 GMT
            Not After : Sep 23 04:00:00 2022 GMT
        Subject: CN=2cf9251b-3223-4ace-8bf5-81184c9eecec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:95:74:29:2a:37:09:ea:f3:22:91:67:2e:a2:
                    fa:a8:2d:dc:c9:13:51:04:9a:1f:16:fb:5a:f1:f9:
                    48:0c:b1:51:26:25:ee:c1:6e:b8:19:a0:03:14:7f:
                    37:ca:2b:a6:7b:b3:a0:cd:56:fb:ac:93:de:63:cb:
                    f4:49:d8:79:45:b1:f3:33:6f:8f:9e:2c:2a:c3:8a:
                    67:ce:e2:b6:8b:96:21:f3:d9:94:c7:28:e5:5a:76:
                    ad:3f:5c:fc:df:83:18:79:59:d5:f0:e2:a7:49:e4:
                    67:b2:42:7e:e6:2c:d5:8e:52:c4:21:31:36:41:a2:
                    02:0a:d6:7d:a1:ef:94:da:e4:9f:52:61:95:50:6e:
                    10:78:fc:79:9f:6d:26:f1:32:0c:aa:6d:ae:cc:72:
                    04:65:03:1e:7d:b3:36:a0:13:c8:64:27:e4:4a:52:
                    1a:06:c8:11:e0:3e:8e:ca:e4:d5:79:a4:05:88:25:
                    d4:0c:7e:c3:db:0c:6d:4e:be:e9:bd:1c:17:db:d8:
                    44:79:29:85:f7:f2:7a:67:7a:65:52:42:e1:e7:c3:
                    ed:11:40:a1:b7:b7:57:ff:65:32:74:76:f1:48:d8:
                    7f:00:76:1c:27:8c:8b:09:2d:cb:12:84:66:7c:2c:
                    79:34:8b:8c:7c:e6:ea:f5:96:b4:c8:9b:f7:b7:55:
                    02:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:4C:C8:18:FA:45:F9:16:65:7D:48:15:40:4F:2E:D3:61:5A:CD:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ed8e4bf7-527c-3b7f-b298-cf151c46f8fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.28.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:07:ff:b4:c8:cc:1a:73:4d:16:d5:5a:e2:18:68:6d:56:2f:
         ee:da:38:67:87:8d:24:5a:a5:ec:b9:47:92:5e:41:69:d8:89:
         94:4e:c2:8d:14:2d:9d:c4:5c:09:57:29:5e:78:f6:f5:06:90:
         9e:de:bd:58:cc:9e:82:90:85:c2:36:8a:fc:13:3b:b2:09:fa:
         89:71:ce:bb:89:95:18:36:6e:d9:5d:38:d8:9d:fc:62:2e:7d:
         0d:d0:53:63:41:a8:e1:09:c4:69:d0:e3:4a:55:c8:f2:6d:59:
         53:3b:04:36:5b:57:88:22:a0:ba:c4:e0:8d:3b:98:8c:83:d5:
         e7:e8:f3:22:e5:91:95:62:19:cc:7d:0d:1c:71:87:75:e0:54:
         8f:d9:c2:03:07:c2:a6:bc:bf:57:83:f4:16:94:a7:d3:97:15:
         9f:9b:ff:1d:9b:c2:d9:d5:5a:4a:b7:e8:96:51:c9:38:38:8b:
         89:09:72:b5:f2:de:a6:68:fd:92:42:64:40:7a:92:9b:92:5e:
         54:d4:3a:ff:f9:5f:9a:63:f4:9f:71:8a:c2:61:bd:7e:af:83:
         b8:d7:d9:cd:52:4f:7e:bd:04:bc:3f:dc:4b:fa:b7:28:ae:1f:
         23:fd:be:49:3a:b6:3a:e5:b9:1b:a6:69:59:03:e4:e9:10:05:
         20:0e:49:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----