Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f16f6e61-81c8-32b4-83d6-2f965ad68183.roa
File:                     f16f6e61-81c8-32b4-83d6-2f965ad68183.roa (raw, json)
Hash identifier:          BG97LHyjiqXwNa5KHaLZes6OuDT2TUqf563YhhWfma4=
Subject key identifier:   3A:92:C0:35:1E:B3:79:2C:B6:83:EC:23:83:C1:38:D3:5C:CF:30:76
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840B2A13FDBF810F9468DB8F3E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f16f6e61-81c8-32b4-83d6-2f965ad68183.roa
Signing time:             Wed 25 Jan 2023 12:00:00 +0000
ROA not before:           Wed 25 Jan 2023 12:00:00 +0000
ROA not after:            Thu 02 Mar 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        136.18.18.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b2:a1:3f:db:f8:10:f9:46:8d:b8:f3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 25 12:00:00 2023 GMT
            Not After : Mar  2 05:00:00 2023 GMT
        Subject: CN=b6d5452b-cf16-4804-850b-fbabd12e9b1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a3:77:aa:a3:d7:bb:2c:26:b1:3f:75:71:9a:
                    83:de:7e:34:84:2e:16:fc:a9:45:da:84:b3:0e:fc:
                    a8:ec:e3:6f:10:17:2c:08:e5:bb:6d:d3:10:41:ad:
                    b7:bd:80:d8:da:c0:39:95:9e:39:4f:76:16:f2:1e:
                    b5:53:7c:63:da:8f:32:8b:48:ef:cf:e6:3e:45:d9:
                    3b:55:02:86:a0:81:8f:cf:ff:2e:cb:55:d1:8a:b4:
                    af:30:8f:53:17:36:ac:d5:01:47:e7:74:43:59:55:
                    ba:8f:c7:da:71:19:22:25:a0:74:81:8f:d8:66:7a:
                    9d:0e:93:0d:34:91:3a:ec:ef:4d:80:88:71:55:10:
                    72:8e:d5:30:75:39:fb:52:b1:fc:b4:cf:8a:a2:8e:
                    79:42:68:cd:05:66:29:3d:7b:a2:36:b5:92:40:34:
                    ff:04:cb:80:dc:b3:b6:5d:a0:b4:3b:ac:61:69:3b:
                    f4:35:d2:ae:7b:dc:b1:de:77:10:c6:75:42:a6:64:
                    ee:6f:31:1b:d6:1f:6f:13:1d:5d:8e:5b:c7:0c:e2:
                    a5:71:f6:08:66:38:97:8c:dc:1b:07:ff:70:2e:a5:
                    b2:e6:82:93:b3:a4:49:a9:3f:18:bd:e8:6f:2f:9f:
                    aa:3e:a9:d9:2f:04:6b:a9:3e:24:d6:18:4d:aa:6c:
                    8c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:92:C0:35:1E:B3:79:2C:B6:83:EC:23:83:C1:38:D3:5C:CF:30:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f16f6e61-81c8-32b4-83d6-2f965ad68183.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:d6:be:84:2e:10:a6:a8:53:39:21:dd:f2:1d:55:3b:c3:68:
         ef:c0:de:4e:1b:82:20:3f:7f:be:b4:18:ff:e5:f1:77:97:5c:
         9b:06:de:62:71:bb:b6:f7:b1:f4:6d:49:f2:ab:ff:1a:69:66:
         4b:08:ea:4c:9d:e2:e7:07:63:b7:5b:36:24:de:e3:0e:94:ad:
         1d:ed:e0:e5:8f:bb:ef:a6:44:47:6c:75:80:d0:cb:a1:78:6a:
         c5:90:01:bf:40:05:7e:dd:11:c4:a3:ea:80:6e:be:00:3d:d9:
         cf:85:c4:77:d0:4b:e9:7b:12:95:be:d9:75:9f:f3:fa:9e:ac:
         8f:dd:f7:9e:0c:c4:e9:62:8f:76:da:fe:c3:f1:7a:95:cb:4a:
         35:e3:66:51:16:58:29:28:90:bf:17:77:f5:bc:0a:ef:da:b8:
         d1:0c:a9:3d:88:d6:e3:e2:46:4f:55:02:cc:f9:e3:08:da:cf:
         82:2c:f5:70:e3:95:10:69:ce:58:94:f4:de:eb:e1:1d:cc:58:
         6f:a8:d7:7c:09:07:d3:53:59:17:30:b3:63:24:0f:30:87:7f:
         ec:32:88:00:28:1f:ec:97:aa:c1:0d:d8:30:2f:dc:f7:be:91:
         57:62:99:4c:ae:a9:8f:51:f1:04:1e:b8:16:4d:2e:d0:17:68:
         89:b7:6d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----