Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13b05528-d516-4df9-90c8-05d780d1036f/33b79bba-82e7-3944-961c-77b07bde52a9.roa
File:                     33b79bba-82e7-3944-961c-77b07bde52a9.roa (raw, json)
Hash identifier:          JPBTHKCxKuwab80XRerlJPkXEVREKW2yBYdFA5+Q2bI=
Subject key identifier:   D4:78:2F:0E:E1:54:2F:50:66:E2:C3:09:17:02:96:13:D3:AF:96:F3
Certificate issuer:       /CN=13b05528-d516-4df9-90c8-05d780d1036f
Certificate serial:       010D0C9F4328583DDB7F9DFCCDAF0D16BA592C40
Authority key identifier: 17:9D:E0:20:0A:6F:07:76:B7:6A:FE:4F:3C:EE:75:A2:E9:9E:97:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13b05528-d516-4df9-90c8-05d780d1036f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13b05528-d516-4df9-90c8-05d780d1036f/33b79bba-82e7-3944-961c-77b07bde52a9.roa
Signing time:             Mon 13 Dec 2021 16:17:18 +0000
ROA not before:           Mon 13 Dec 2021 16:17:18 +0000
ROA not after:            Mon 12 Aug 2024 04:00:00 +0000
asID:                     206493
IP address blocks:        216.146.30.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:db:7f:9d:fc:cd:af:0d:16:ba:59:2c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13b05528-d516-4df9-90c8-05d780d1036f
        Validity
            Not Before: Dec 13 16:17:18 2021 GMT
            Not After : Aug 12 04:00:00 2024 GMT
        Subject: CN=cc5bace2-bd2e-4f40-badd-294df651e855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a3:48:86:5a:23:93:3f:82:d1:6f:29:10:f9:
                    63:0c:a0:04:5c:a3:a9:1d:52:58:63:8a:be:7f:c9:
                    fe:4b:5e:c2:a4:e0:60:b6:8a:29:c0:b3:3b:60:c2:
                    60:be:cf:4a:4b:27:bb:3c:ba:6e:c1:cb:87:38:22:
                    df:ad:b1:03:e1:e4:c2:31:a0:2f:dd:88:55:33:c5:
                    1c:c0:55:b5:56:2f:d3:a8:8d:d7:21:b7:8b:a7:81:
                    8c:97:d4:23:d2:b8:42:a5:8c:24:5d:b5:53:dc:bc:
                    ae:ff:fd:9f:31:2f:ba:63:95:1b:d4:15:c1:86:72:
                    04:f3:2d:a8:f8:73:93:ce:79:7b:f5:54:1f:56:c1:
                    fd:b0:38:28:5f:06:d5:7a:65:ec:71:34:2d:30:b8:
                    4e:70:72:3c:a1:f7:b5:85:3f:eb:2d:92:b8:0a:6d:
                    5f:af:56:b5:9c:0f:1b:e1:1e:b3:6f:71:2a:b9:70:
                    92:5a:54:77:7d:e0:77:4e:ee:b3:9c:47:67:a1:61:
                    eb:4f:0f:f2:09:63:6e:52:8c:bf:c0:52:d0:33:aa:
                    32:07:86:41:b0:62:66:6a:73:7e:e0:80:e7:ea:ab:
                    80:9d:06:55:1a:b5:b7:c8:d0:95:1f:6a:93:54:69:
                    ba:da:78:5b:7c:3c:c9:52:78:dd:23:6f:5d:3c:84:
                    cc:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:78:2F:0E:E1:54:2F:50:66:E2:C3:09:17:02:96:13:D3:AF:96:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13b05528-d516-4df9-90c8-05d780d1036f/33b79bba-82e7-3944-961c-77b07bde52a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13b05528-d516-4df9-90c8-05d780d1036f/13b05528-d516-4df9-90c8-05d780d1036f.crl

            X509v3 Authority Key Identifier:
                keyid:17:9D:E0:20:0A:6F:07:76:B7:6A:FE:4F:3C:EE:75:A2:E9:9E:97:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13b05528-d516-4df9-90c8-05d780d1036f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:f3:78:2f:9f:c8:78:82:07:60:c5:ad:12:09:f3:bb:ad:c5:
         29:17:41:ab:87:e3:9d:5c:f8:6e:a2:60:3b:53:c1:23:b6:63:
         20:47:88:ce:98:41:8c:cf:c3:b3:8c:4a:43:40:c4:d1:d0:f0:
         04:79:ba:3e:2b:ea:aa:94:5c:cc:e3:76:94:e8:95:8f:5a:6f:
         b1:e2:44:66:58:05:53:7e:f1:e4:7a:4a:7c:1a:9b:cf:fe:fd:
         d0:0f:b6:78:79:9f:f9:cf:62:17:81:6a:8f:11:84:52:d4:85:
         94:08:d1:f7:11:f7:28:57:c6:b8:a3:cd:4c:2f:6a:82:92:66:
         86:65:d3:ae:ef:6a:fa:1c:90:5a:5e:ea:d7:ff:c8:2c:3b:8b:
         27:8b:b0:8d:f4:ed:a2:bf:38:89:6f:bb:45:7e:9f:b1:5c:83:
         61:42:c5:1b:75:69:ce:61:18:69:d3:27:92:81:dc:e0:98:b6:
         16:a5:91:04:c8:64:35:0e:9f:da:6c:2e:fd:fe:52:85:06:eb:
         e9:a2:ed:c7:58:ab:8b:45:09:ac:ac:e6:2c:33:94:bb:5b:6e:
         c1:84:b7:7d:6e:7c:89:37:c9:0e:05:4a:4d:05:01:e0:84:55:
         10:9e:0d:08:b9:67:f9:57:f3:68:a6:72:8c:48:40:22:70:01:
         d6:63:4f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----