Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13b05528-d516-4df9-90c8-05d780d1036f/89012468-bbbc-3287-8e00-ebd2a596c093.roa
File:                     89012468-bbbc-3287-8e00-ebd2a596c093.roa (raw, json)
Hash identifier:          UMcaC7DgEkekI7n1fY3sBMIXZpmVNo8YMFPNh9qWAZ4=
Subject key identifier:   AD:8E:7C:F0:74:54:C9:C4:42:E9:E9:6A:B4:11:00:C9:F2:C4:D0:8A
Certificate issuer:       /CN=13b05528-d516-4df9-90c8-05d780d1036f
Certificate serial:       010D0C9F4328583E3376178178B5CFD463A268E0
Authority key identifier: 17:9D:E0:20:0A:6F:07:76:B7:6A:FE:4F:3C:EE:75:A2:E9:9E:97:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13b05528-d516-4df9-90c8-05d780d1036f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13b05528-d516-4df9-90c8-05d780d1036f/89012468-bbbc-3287-8e00-ebd2a596c093.roa
Signing time:             Mon 13 Dec 2021 16:17:18 +0000
ROA not before:           Mon 13 Dec 2021 16:17:18 +0000
ROA not after:            Fri 13 Sep 2024 04:00:00 +0000
asID:                     16509
IP address blocks:        216.146.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:33:76:17:81:78:b5:cf:d4:63:a2:68:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13b05528-d516-4df9-90c8-05d780d1036f
        Validity
            Not Before: Dec 13 16:17:18 2021 GMT
            Not After : Sep 13 04:00:00 2024 GMT
        Subject: CN=0098c828-a95f-4edb-a0e2-55b3bc3ccf09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:56:38:56:06:90:ba:47:1e:bd:ed:21:7e:b3:
                    31:dc:05:d9:f8:9a:92:35:0c:76:7a:84:ed:26:c9:
                    f6:5c:51:fd:ac:2f:fc:7a:61:26:db:6b:bf:24:3e:
                    2e:99:88:ee:97:51:8a:c6:cf:bf:57:76:c6:37:40:
                    7f:7f:dd:a3:9d:4c:81:df:c0:59:e7:44:32:4d:79:
                    4a:6d:3c:e9:db:8d:24:19:f9:03:ad:f8:e3:cd:94:
                    4c:ef:9d:e5:d2:38:e4:96:84:8d:af:6d:18:d7:22:
                    22:a1:9d:1e:89:31:b2:df:b7:ab:b4:5a:cf:a2:c6:
                    e4:d3:63:0d:1e:a8:8f:c3:d9:62:1e:37:d6:75:01:
                    50:ae:9a:4b:ea:2f:95:a8:41:87:45:cc:f0:45:a4:
                    3e:34:1b:7a:b1:1f:62:d1:99:b7:e5:3e:bd:9e:c8:
                    a5:ca:7f:19:ec:6e:51:83:9e:65:4e:a7:8a:23:c1:
                    b6:2e:60:e0:d0:b9:61:79:66:59:08:1c:f6:30:ec:
                    3e:96:05:74:3e:b4:85:b3:12:34:9d:a7:0a:01:c6:
                    f5:6d:00:68:dc:fc:7c:7e:df:0d:cd:80:35:5b:57:
                    68:ef:57:3d:b0:4a:ac:ea:d6:21:92:db:63:c5:e5:
                    81:67:b7:a4:a3:1e:2a:ad:88:6e:28:f2:22:c0:1d:
                    02:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:8E:7C:F0:74:54:C9:C4:42:E9:E9:6A:B4:11:00:C9:F2:C4:D0:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13b05528-d516-4df9-90c8-05d780d1036f/89012468-bbbc-3287-8e00-ebd2a596c093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13b05528-d516-4df9-90c8-05d780d1036f/13b05528-d516-4df9-90c8-05d780d1036f.crl

            X509v3 Authority Key Identifier:
                keyid:17:9D:E0:20:0A:6F:07:76:B7:6A:FE:4F:3C:EE:75:A2:E9:9E:97:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13b05528-d516-4df9-90c8-05d780d1036f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:01:5a:8f:39:8c:bd:df:b3:f1:fc:3b:d7:f7:cf:47:b8:ed:
         f8:20:59:e3:6a:0d:df:ad:e9:b1:d3:3a:df:a7:7f:b9:c7:3f:
         dc:fe:9b:6e:7e:d9:a7:a7:48:e0:f5:2b:0d:0a:02:49:57:57:
         ba:19:40:bb:77:03:ee:53:6a:b6:71:28:72:a8:f6:89:ab:40:
         59:ff:ec:15:ba:3c:77:b5:0b:ce:f7:a0:46:89:aa:0c:c9:b0:
         77:6c:70:3d:d2:91:52:49:57:d3:ac:86:4b:00:62:c2:e5:9a:
         d3:6e:99:c7:c4:8d:8b:c6:7c:aa:3a:68:ad:0b:c2:36:8a:64:
         65:2c:22:75:a7:d0:14:40:be:76:b7:28:1d:44:09:12:53:cc:
         46:d7:ab:cf:28:22:66:75:c9:13:e5:b2:1f:c8:46:ee:5e:37:
         ed:d7:64:b2:4e:a9:c9:59:b6:92:07:f2:02:53:37:8b:d1:62:
         1c:88:97:ce:a9:3a:04:e2:b1:31:2b:0f:57:5e:1a:a5:a2:3b:
         e8:c1:48:09:ae:91:59:26:bb:d4:49:bb:56:47:c7:0c:f5:fa:
         de:9a:fc:8d:0a:ff:44:58:8d:56:78:ff:2d:96:b2:8f:71:5e:
         5b:8a:c2:ac:bc:82:c9:a4:cd:f1:88:1e:41:76:9e:a0:b6:73:
         54:d1:a7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----