Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/16f20dcd-2f32-3ee3-bf96-17e99c014b8f.roa
File:                     16f20dcd-2f32-3ee3-bf96-17e99c014b8f.roa (raw, json)
Hash identifier:          U/vta9uC7DqqwmfDleY+uZelNEQw2Cu8LawxTmQLJ6k=
Subject key identifier:   32:02:3E:E3:0B:78:E5:06:B4:77:D9:A1:DB:2E:A3:10:3C:71:40:4D
Certificate issuer:       /CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
Certificate serial:       010D0C9F4328583DA82498AD415D7D2AC8012800
Authority key identifier: 6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/16f20dcd-2f32-3ee3-bf96-17e99c014b8f.roa
Signing time:             Thu 21 Apr 2022 12:00:00 +0000
ROA not before:           Thu 21 Apr 2022 12:00:00 +0000
ROA not after:            Fri 27 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        50.112.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a8:24:98:ad:41:5d:7d:2a:c8:01:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
        Validity
            Not Before: Apr 21 12:00:00 2022 GMT
            Not After : May 27 04:00:00 2022 GMT
        Subject: CN=b323b110-3b5e-4808-958b-a43d3780c548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7d:82:f4:29:c4:60:1a:65:f6:63:22:b0:d2:
                    51:e6:0a:49:41:41:2e:1f:5e:7f:c1:52:49:e7:67:
                    95:02:f8:5c:ce:3c:e4:2d:c9:bd:be:d4:56:8e:9d:
                    02:fb:39:cb:50:69:4b:7c:fe:0f:34:d0:08:8f:74:
                    5f:aa:be:c1:56:96:50:75:1f:a3:55:f2:76:ea:fe:
                    3f:7f:7e:45:a2:13:42:df:f7:54:58:78:e7:b3:98:
                    c8:16:55:d1:30:65:1b:89:ad:98:36:bd:fa:71:36:
                    16:ba:2f:bf:19:97:38:d8:a6:f3:71:67:c5:2c:41:
                    ec:71:9b:53:0d:79:c3:78:35:56:87:a0:20:f1:7a:
                    dd:2a:78:15:cf:d1:b6:04:5f:e9:3e:8f:46:f9:be:
                    2c:3e:42:22:7d:93:73:7c:9a:7a:06:1e:a0:8f:03:
                    35:d0:79:5b:ae:ab:5d:ed:34:8a:dc:c7:15:74:c6:
                    41:e8:f9:cb:b7:a9:4f:97:86:68:0a:e7:83:27:a0:
                    ac:0a:7e:73:ce:47:d8:e0:7f:5b:27:81:c9:43:df:
                    8d:88:23:22:bb:5a:3e:14:54:bf:fd:c2:d8:53:76:
                    7d:01:58:4a:cf:aa:4a:b2:b4:0a:b7:eb:f8:c3:a3:
                    16:2a:2b:b8:cf:22:bf:3c:ea:36:3f:72:68:e4:fe:
                    ac:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:02:3E:E3:0B:78:E5:06:B4:77:D9:A1:DB:2E:A3:10:3C:71:40:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/16f20dcd-2f32-3ee3-bf96-17e99c014b8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.crl

            X509v3 Authority Key Identifier:
                keyid:6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:d9:a1:7b:b5:84:15:c0:5c:e5:c1:90:6c:61:6e:cf:27:b9:
         10:b4:e5:40:c8:e0:d0:cd:4e:00:d6:72:52:eb:70:3d:e3:e3:
         59:c8:dc:30:f5:a1:53:21:49:30:48:71:7d:ca:1b:49:d0:72:
         dc:75:c8:b2:3f:31:2c:20:5c:f1:18:32:14:9d:cb:f6:35:82:
         17:c6:6c:e5:be:f8:81:1f:b6:36:fe:b0:e6:81:67:1a:c0:7f:
         2a:57:bf:30:49:0e:85:50:76:cb:44:97:b7:09:54:65:21:fe:
         d9:6c:d8:ff:4b:e5:22:03:15:0a:a2:24:03:3d:95:b7:ac:e0:
         ac:7f:0a:eb:6e:af:fb:56:8e:fa:12:05:19:d1:de:c4:96:2d:
         dc:c8:8f:b7:d6:52:cc:ca:1e:d3:75:a4:df:9c:c3:1c:32:b6:
         eb:d6:ec:48:c3:04:f9:d1:4c:40:96:2b:17:1c:59:ac:10:43:
         94:51:3f:9e:e6:24:58:11:46:7c:98:5b:cc:63:a1:56:be:cf:
         3a:35:d6:41:ad:ff:15:00:b6:c2:26:d9:e2:09:a0:17:9c:84:
         77:71:84:e5:75:48:cb:24:3a:48:74:ec:63:0f:52:46:cf:09:
         8c:4b:3a:4c:74:fa:c9:e6:31:5e:fb:63:16:3b:94:4b:55:0c:
         dc:0f:39:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----