Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fe190429-5eb8-3fee-a176-6eaed1c67c83.roa
File:                     fe190429-5eb8-3fee-a176-6eaed1c67c83.roa (raw, json)
Hash identifier:          PGQZ56sACp4zGiYXCUZ54UgN/qD9la1F9K/i4m+D7jQ=
Subject key identifier:   A3:4F:1B:81:9A:37:98:45:AC:C9:3F:0E:5B:97:50:B0:0C:C1:84:39
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840352CDCD18060C005C2356220
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fe190429-5eb8-3fee-a176-6eaed1c67c83.roa
Signing time:             Sun 11 Dec 2022 12:00:00 +0000
ROA not before:           Sun 11 Dec 2022 12:00:00 +0000
ROA not after:            Mon 16 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        192.157.36.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:35:2c:dc:d1:80:60:c0:05:c2:35:62:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 11 12:00:00 2022 GMT
            Not After : Jan 16 05:00:00 2023 GMT
        Subject: CN=74488e64-a4db-46ff-a389-5a364824ca52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:51:e0:84:10:e0:69:ea:aa:fb:c2:07:32:3e:
                    44:2b:20:23:35:97:5a:29:53:3c:88:0b:09:54:b1:
                    57:0d:ec:98:ff:40:ee:4f:25:15:43:e2:d4:87:c5:
                    76:fa:47:23:c1:cf:3b:f8:c6:c9:18:b6:d4:f8:7a:
                    21:bd:50:88:a1:67:91:78:29:a0:28:d9:f6:3f:b4:
                    e4:4a:70:95:95:9e:19:c1:db:1e:52:54:ea:e0:aa:
                    cd:43:92:3d:e8:5b:53:d9:f5:d3:80:2b:2d:ba:05:
                    73:98:3c:e5:f5:94:e7:69:ee:1c:3a:db:1c:fb:a2:
                    a4:75:a7:29:21:6c:33:84:ab:5d:cb:24:6f:59:fd:
                    f2:b5:b5:f4:12:5f:54:8a:a9:13:8a:16:2f:f7:55:
                    98:61:f3:a3:44:99:ca:5d:8a:ed:40:e7:06:9d:65:
                    b6:b6:79:88:6a:8f:03:85:91:82:27:a8:3e:67:3e:
                    af:5d:00:3b:12:4e:71:c9:cf:f8:34:13:f0:c6:93:
                    d8:22:1c:4b:24:f8:08:2f:26:dd:9e:ef:c2:82:5e:
                    67:64:de:ff:c9:6b:65:7f:cd:63:06:49:af:66:17:
                    2b:1c:6c:31:c7:2d:bc:00:36:31:29:52:04:2f:cc:
                    f5:8d:2a:1f:25:38:ce:94:22:f5:d7:c7:6d:82:fb:
                    68:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:4F:1B:81:9A:37:98:45:AC:C9:3F:0E:5B:97:50:B0:0C:C1:84:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fe190429-5eb8-3fee-a176-6eaed1c67c83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:54:5e:04:2f:99:fe:68:f7:b3:6d:14:76:e5:06:2d:a2:f9:
         b9:7f:a1:00:56:68:ed:a3:ea:d4:b9:b2:0f:71:60:df:23:51:
         78:d7:be:93:32:b9:16:e2:b7:32:c5:95:d6:51:e8:69:98:d4:
         7a:94:27:86:a1:a4:eb:10:c2:1b:e8:47:0f:a6:9d:24:15:64:
         a5:ba:18:70:3b:68:9f:75:77:f9:81:0d:21:a9:04:33:ea:1f:
         f1:ff:07:9c:b8:3f:08:da:12:c2:53:de:06:0c:fc:be:92:1d:
         6f:ce:6f:cd:05:03:25:2f:8e:78:e6:93:4a:df:30:9d:e2:46:
         da:18:e1:a6:c3:e1:ca:c8:5b:df:7e:bf:7f:02:50:1f:07:10:
         d2:6e:f6:de:8a:8e:ef:9b:7d:a2:4d:a9:7d:3f:3a:93:c5:23:
         9f:a1:86:9f:67:72:88:86:e2:c4:bf:a3:f8:4c:e0:24:d1:60:
         04:31:dc:80:e0:ce:61:16:8b:a4:fa:70:4a:c4:6e:46:61:a7:
         4e:4d:c4:4a:b1:c8:54:3a:a7:e6:2d:f3:87:9e:b7:77:73:f6:
         0b:52:7f:8b:32:9c:9b:72:23:ae:b6:c7:93:21:28:e2:30:03:
         42:a2:ba:35:4c:ce:f5:3a:a9:34:ee:bc:22:24:62:8a:92:40:
         2b:78:22:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----