Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/834a133c-cb8e-4375-b34d-1e934ae9212c/c13de00c-5e05-3864-805b-9bf06da3006f.roa
File:                     c13de00c-5e05-3864-805b-9bf06da3006f.roa (raw, json)
Hash identifier:          POGgax5tUeUPi4+wHuiHOpWw3xdan5CW5WwZk/WqAu4=
Subject key identifier:   E5:9E:63:63:AD:90:B6:8C:2E:F3:05:EF:AB:40:42:3F:47:A5:C8:4F
Certificate issuer:       /CN=834a133c-cb8e-4375-b34d-1e934ae9212c
Certificate serial:       010D0C9F4328583EA42AF86F9A2EF30930E5B080
Authority key identifier: 1E:C5:CA:1D:AE:D3:A3:88:FD:59:1C:CA:FF:C7:22:EF:E7:E0:79:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/834a133c-cb8e-4375-b34d-1e934ae9212c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/834a133c-cb8e-4375-b34d-1e934ae9212c/c13de00c-5e05-3864-805b-9bf06da3006f.roa
Signing time:             Wed 20 Jul 2022 11:07:06 +0000
ROA not before:           Wed 20 Jul 2022 11:07:06 +0000
ROA not after:            Tue 22 Oct 2024 04:00:00 +0000
asID:                     61317
IP address blocks:        144.162.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:a4:2a:f8:6f:9a:2e:f3:09:30:e5:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=834a133c-cb8e-4375-b34d-1e934ae9212c
        Validity
            Not Before: Jul 20 11:07:06 2022 GMT
            Not After : Oct 22 04:00:00 2024 GMT
        Subject: CN=cb1bf775-7d12-4a3d-bf55-562f27547900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:02:c2:c2:cf:b4:3f:67:9f:97:c1:f1:d7:fe:
                    85:f7:a7:a4:67:ff:54:85:ab:81:05:04:23:c9:6a:
                    89:59:7d:f2:db:5d:39:e2:52:cb:1b:c0:4f:23:f1:
                    c6:c9:e4:f9:a0:c7:10:4a:8f:dc:b1:b2:43:38:6d:
                    8b:19:0d:1a:49:8c:6d:c8:8d:6b:51:33:1d:87:4b:
                    af:85:c7:22:51:df:af:61:1b:20:43:94:2f:48:2d:
                    93:99:cc:92:87:b8:ff:5f:39:a0:6d:c9:1d:00:47:
                    aa:90:1c:41:ab:9d:b0:a1:b4:3b:f2:c4:d1:da:ca:
                    d6:ee:dc:7b:d1:e8:cb:27:b6:99:97:26:37:d5:6e:
                    8f:98:5d:19:b7:d4:78:f0:12:6f:fc:be:22:0a:a5:
                    1b:a1:5b:59:a2:51:e5:e1:9f:de:58:62:26:1b:06:
                    81:d9:f6:da:e8:bd:77:ef:73:9c:4e:1c:8c:e3:0c:
                    56:b8:6a:bc:98:a2:df:9d:6b:56:d7:8c:a8:2b:77:
                    6b:96:12:84:77:10:cc:ba:a0:0f:f6:2a:f2:9e:0a:
                    5a:64:c6:2a:8f:8b:53:85:40:7b:4c:ea:0d:3a:a3:
                    6d:ef:39:1e:12:8b:53:43:07:13:d0:14:32:6b:71:
                    31:41:46:ac:ed:42:2a:ab:ca:4f:11:40:dd:14:f2:
                    e0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:9E:63:63:AD:90:B6:8C:2E:F3:05:EF:AB:40:42:3F:47:A5:C8:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/834a133c-cb8e-4375-b34d-1e934ae9212c/c13de00c-5e05-3864-805b-9bf06da3006f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/834a133c-cb8e-4375-b34d-1e934ae9212c/834a133c-cb8e-4375-b34d-1e934ae9212c.crl

            X509v3 Authority Key Identifier:
                keyid:1E:C5:CA:1D:AE:D3:A3:88:FD:59:1C:CA:FF:C7:22:EF:E7:E0:79:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/834a133c-cb8e-4375-b34d-1e934ae9212c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.162.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:da:8d:b0:de:6c:be:d8:da:4c:3c:9c:42:a2:57:67:47:19:
         69:13:4b:51:6b:1b:45:86:9b:fa:8a:e2:55:19:2b:36:bd:e0:
         cb:77:f5:52:1e:38:a5:22:e6:3b:2b:6d:45:d8:f0:6b:29:bd:
         44:dd:51:87:1c:43:52:d3:b8:09:7b:bf:b7:2c:8e:4b:cb:39:
         2d:42:b6:82:7f:c9:d6:2b:e7:01:51:0a:78:fa:de:c4:e3:33:
         93:97:d2:78:f9:94:fe:b5:f0:b1:dc:97:ef:ae:f3:dc:9b:a1:
         01:e6:49:9a:48:aa:3e:ec:92:7d:3a:60:e5:19:8e:94:a9:ab:
         f5:d4:fa:f5:22:3c:79:ef:e5:7a:ec:ad:dc:60:0a:e4:69:d2:
         87:a6:72:4e:70:86:86:f4:47:d2:ee:0c:b5:f9:cf:95:0f:57:
         f0:8e:1b:5e:fd:05:73:3f:8a:5a:5f:c8:d4:11:a8:5f:71:06:
         82:53:3a:1c:fa:3c:4f:b1:88:ab:42:ff:4c:79:35:69:73:ff:
         96:3e:93:0d:55:af:29:d1:72:21:60:03:a3:29:d0:43:7f:24:
         c3:d2:fe:e8:7f:e4:81:df:f1:89:cd:be:30:78:4e:d2:28:fd:
         2f:95:76:3d:6f:bf:0b:c0:49:e1:d1:ee:ce:18:3f:6f:38:9c:
         84:09:d3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----