Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ffd086a9-32fd-38f6-8460-67b4ac07ec82.roa
File:                     ffd086a9-32fd-38f6-8460-67b4ac07ec82.roa (raw, json)
Hash identifier:          TxKAL3susqjmceQQzZdphk0/BHveLBu7L7/zd61zW+Y=
Subject key identifier:   9C:19:17:9E:7F:E2:7A:16:30:55:FF:12:B2:7F:F5:79:BD:41:A9:4C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840B6ABD6D646D9AE23C808F550
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ffd086a9-32fd-38f6-8460-67b4ac07ec82.roa
Signing time:             Thu 26 Jan 2023 15:12:07 +0000
ROA not before:           Thu 26 Jan 2023 15:12:07 +0000
ROA not after:            Fri 03 Mar 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        16.170.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b6:ab:d6:d6:46:d9:ae:23:c8:08:f5:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 26 15:12:07 2023 GMT
            Not After : Mar  3 05:00:00 2023 GMT
        Subject: CN=b2368c3f-dde7-4f02-98cc-8b1ee9003e0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f3:05:b6:d3:d2:ab:a4:02:d3:15:b8:4d:d6:
                    86:5f:bd:48:28:83:de:09:0e:83:89:0f:46:df:55:
                    ab:0c:9f:9a:9e:87:7f:e3:fb:36:90:d3:6a:96:01:
                    89:32:76:43:18:30:de:42:7b:2b:6e:70:b5:bb:f7:
                    7a:cd:f5:43:fc:5d:9c:71:71:39:8a:9e:2b:ea:05:
                    b1:cf:ed:43:80:5d:e5:1f:2d:9b:2d:da:89:62:29:
                    6e:e3:0e:6c:b2:61:77:de:5c:20:8f:d3:1e:4f:d7:
                    c1:93:ce:ee:3b:42:86:48:dd:05:5e:9b:c7:10:59:
                    1e:2e:a2:42:7c:25:6f:fa:e0:23:35:2b:10:d1:fe:
                    ae:85:35:d3:a2:24:e6:ee:67:4c:2a:4b:07:5a:44:
                    c6:9c:77:c1:a0:c6:76:19:8e:eb:b1:ec:09:85:5d:
                    78:60:12:00:07:04:90:04:f9:a1:13:86:38:af:03:
                    0d:93:39:8d:18:d2:bc:37:6c:48:92:1c:da:0a:0b:
                    52:4f:41:7d:f9:32:2c:bf:ea:20:ab:d1:5b:7e:b0:
                    89:db:58:fb:b1:d4:3d:eb:ce:7a:ff:1d:02:0b:c5:
                    46:6f:ca:d5:25:b4:bf:12:3a:fc:0d:15:8f:e8:fd:
                    40:d3:fa:50:5a:51:55:68:cc:83:50:be:a2:bb:f2:
                    bc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:19:17:9E:7F:E2:7A:16:30:55:FF:12:B2:7F:F5:79:BD:41:A9:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ffd086a9-32fd-38f6-8460-67b4ac07ec82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.170.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:ed:16:5a:97:8b:0b:38:96:ef:72:72:6b:66:cf:51:e8:34:
         e2:16:5b:4f:92:44:60:ef:a7:1c:37:28:e7:10:d1:37:97:ce:
         2b:3e:4a:1a:6b:6a:5f:fb:bc:c2:4c:8d:d7:36:3c:ce:e7:2a:
         a4:9c:ac:83:5b:29:5c:fb:9c:91:ac:5f:16:aa:27:b1:1e:95:
         b6:7d:5f:b3:77:40:5d:25:34:49:56:06:05:8d:6c:21:7e:52:
         d2:6e:13:36:f6:3e:42:62:b6:fa:43:10:5d:3b:52:8c:d9:90:
         2f:00:7d:07:2e:f4:2a:ff:41:b9:74:b7:37:cf:d0:f8:a9:f9:
         2c:93:94:07:54:29:02:81:fa:73:2c:c7:e0:17:b5:b9:3e:96:
         75:63:2a:c0:9b:0d:cd:90:71:ed:81:95:c1:a7:81:5e:53:35:
         bd:6d:47:44:57:15:3e:58:af:4f:8a:01:45:0e:1b:dc:44:a7:
         96:79:25:63:58:31:bb:7b:52:4a:a1:34:97:b3:e9:24:d0:3f:
         2a:1a:83:a2:b4:d1:a0:26:77:10:13:ac:c0:d9:fc:b6:77:4e:
         03:0f:9b:82:ce:d0:5d:d4:40:11:e8:90:af:ff:27:d6:30:4d:
         fd:74:1e:55:40:12:2b:20:c4:29:83:42:a8:90:71:78:68:07:
         24:4d:35:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----