Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a1699145-799a-32c1-a573-c7188a58dc91.roa
File:                     a1699145-799a-32c1-a573-c7188a58dc91.roa (raw, json)
Hash identifier:          /hPpP/vhSwoZmaR/TM/4W8fNaLw3QbIGW2rzv2zyuT0=
Subject key identifier:   0E:B7:F3:FB:24:F5:7D:97:5D:E0:88:37:A1:88:48:37:41:2A:15:15
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858449314126EB227F13475E53910
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a1699145-799a-32c1-a573-c7188a58dc91.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     577
IP address blocks:        142.117.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:14:12:6e:b2:27:f1:34:75:e5:39:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=0178c96e-43f3-4fc5-b8ea-c41e23b50f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:9e:27:bd:a6:c3:a2:1d:07:4c:aa:fd:fa:92:
                    56:06:d6:42:6b:74:53:c8:3e:12:80:7a:a2:2e:8a:
                    c1:26:4d:f7:7e:d1:eb:c1:5f:62:eb:74:14:ad:a0:
                    f3:8c:3f:09:d5:13:b9:4f:45:13:49:c6:74:38:44:
                    24:56:79:5b:b5:40:d9:f7:06:ef:b4:f0:9f:db:dd:
                    45:fe:25:b3:45:43:ff:a9:48:06:b0:66:a9:fe:19:
                    42:a6:50:e6:18:59:4c:6f:ac:ad:31:66:62:f2:f8:
                    38:33:2c:7c:a0:99:bf:4c:bd:bd:9c:52:58:31:cd:
                    30:d7:88:39:39:63:84:32:c5:dd:06:e0:a1:66:97:
                    16:e1:54:fb:82:05:3d:61:b2:38:c8:cc:62:50:dd:
                    3d:ce:f8:ef:35:e4:8c:d1:46:b6:36:74:05:cb:67:
                    5a:c8:02:a9:9d:bd:14:6a:0f:ad:19:80:0e:52:29:
                    4e:4f:9d:ca:5c:7a:87:d4:bc:32:74:59:f4:8d:f0:
                    30:f3:92:97:bc:2d:26:ef:62:07:af:18:ab:99:48:
                    9f:0d:d3:5f:31:24:b6:bf:59:e7:97:90:dd:79:95:
                    17:79:9b:56:92:8d:14:87:f7:4e:bc:04:82:29:94:
                    f9:9a:c5:57:9e:07:c3:51:7c:0a:ef:53:2f:65:cf:
                    8e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B7:F3:FB:24:F5:7D:97:5D:E0:88:37:A1:88:48:37:41:2A:15:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a1699145-799a-32c1-a573-c7188a58dc91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.117.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:99:13:67:d1:e2:e8:85:f4:e0:1b:55:33:de:92:b9:89:ac:
         f1:c1:06:a9:c5:a2:c4:4d:d3:fd:08:01:bf:cd:db:09:37:d2:
         48:c8:8b:36:27:b1:14:b5:3e:d9:54:a3:99:a7:94:c0:bf:e7:
         64:57:f9:f1:a8:58:d8:ce:60:49:1f:91:a8:1c:f1:fc:2b:a9:
         2e:0b:c5:b8:54:dd:fb:57:32:61:ed:6c:4c:d9:5b:17:4c:22:
         f6:fb:95:0b:dc:f6:18:fd:d7:ac:5a:c0:cf:58:ef:1b:d0:f5:
         61:16:6a:fb:ea:0a:3d:da:65:f5:0c:d7:eb:55:5b:37:5f:be:
         18:b2:37:b7:53:6d:75:8c:68:dd:c2:be:4d:e9:3f:d0:d0:3b:
         dd:77:e4:34:d3:e2:8f:5e:46:ce:c2:fc:4a:24:0f:3a:82:cc:
         53:c7:5c:1c:a3:be:02:8d:0d:89:89:65:75:2a:2f:a2:3e:0c:
         8d:f4:ec:b7:76:58:c4:9b:31:75:8b:66:8f:d4:eb:11:d1:f2:
         c6:21:a5:de:c6:f1:25:96:52:e7:60:c4:88:5e:43:f3:4f:b7:
         85:4c:6c:97:9a:84:bc:95:e6:f8:66:9f:8a:d0:b6:20:ab:ea:
         c7:06:be:7c:f1:a1:a7:4a:f6:9e:30:6f:9a:4b:d7:87:80:f7:
         6c:c4:77:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----