Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/11401865-4da8-3b01-9571-a88f867ed3f1.roa
File:                     11401865-4da8-3b01-9571-a88f867ed3f1.roa (raw, json)
Hash identifier:          LgdWTihffLBMB6jak67ktkahIAeIqWQeTJcyzH5uyt8=
Subject key identifier:   3F:BF:E9:98:B0:55:28:A0:82:6F:75:D3:12:89:3E:87:44:9C:72:3E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DA849D75B291E000E77FCA200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/11401865-4da8-3b01-9571-a88f867ed3f1.roa
Signing time:             Thu 21 Apr 2022 12:00:00 +0000
ROA not before:           Thu 21 Apr 2022 12:00:00 +0000
ROA not after:            Fri 27 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        70.131.192.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a8:49:d7:5b:29:1e:00:0e:77:fc:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 21 12:00:00 2022 GMT
            Not After : May 27 04:00:00 2022 GMT
        Subject: CN=51a48a9d-c97d-4bf4-adbf-100d6db349e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:06:f1:c8:e4:8b:3e:9f:24:8c:db:c6:df:2e:
                    d8:de:56:6f:1b:4a:47:76:31:80:39:c9:eb:f6:d5:
                    f1:98:54:e3:40:b4:37:4a:be:ad:12:e2:48:6f:99:
                    9e:25:bb:50:a4:97:6b:41:4c:3c:b3:23:88:32:76:
                    dd:7c:f6:d3:51:8a:1c:98:c7:ea:59:65:da:05:42:
                    56:11:28:aa:be:5d:94:13:f2:f1:58:17:12:dc:7d:
                    08:d3:ba:fd:25:6d:89:d6:ec:5d:5d:94:5e:2a:38:
                    aa:97:d3:3f:0d:80:49:a6:33:79:dc:eb:c5:86:cf:
                    69:f8:eb:c8:8c:45:33:e0:3f:a1:8f:48:53:0e:67:
                    7f:8f:e3:ec:28:bb:3e:e7:2b:0f:c3:f2:60:4d:84:
                    17:a7:b9:30:32:ab:a4:89:34:f4:65:ca:32:c9:11:
                    3a:d8:36:0d:c9:7c:b5:03:d8:ec:93:03:19:72:18:
                    ce:0e:18:47:c3:59:14:38:6a:6b:d8:ec:ec:13:17:
                    d6:97:60:b3:a4:63:97:9e:ed:08:26:02:04:1b:6a:
                    50:45:4e:42:4c:ef:53:a8:12:a7:9c:2e:11:94:2d:
                    c4:98:64:34:e5:50:1b:49:c7:5a:58:34:20:a6:d9:
                    86:85:fe:3b:79:f4:0b:80:2f:44:da:d3:d7:6c:a0:
                    19:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BF:E9:98:B0:55:28:A0:82:6F:75:D3:12:89:3E:87:44:9C:72:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/11401865-4da8-3b01-9571-a88f867ed3f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.131.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:70:44:e8:67:7d:c1:37:8c:7a:e3:df:29:f6:ba:d4:9b:2f:
         ef:7e:ec:50:3c:fb:7c:62:4a:13:1f:33:7c:d4:6b:4c:8b:1d:
         fe:91:ce:ed:7d:8b:74:c2:9f:91:d3:d4:05:3a:0f:87:1c:73:
         07:4d:71:eb:0b:3f:a3:6e:8f:d3:dd:94:4a:22:21:e4:b6:4d:
         b7:5f:71:59:88:38:23:98:fa:5e:3e:4a:dc:7a:d4:66:62:4e:
         05:49:af:62:a1:b7:9e:95:b6:56:d8:db:e1:26:0b:19:06:b5:
         7b:de:09:57:9e:ed:14:85:cb:78:35:bd:85:37:1b:05:34:e5:
         71:53:30:05:ef:69:1c:e2:fc:45:f9:57:2b:60:28:f1:ae:3d:
         21:cd:3b:7e:d7:b1:54:7e:79:03:5a:d4:ba:36:ae:54:2f:f7:
         82:76:46:ee:cb:aa:da:27:bd:7c:d9:5e:ce:7e:1d:fa:5f:49:
         67:88:c6:a3:52:cf:e2:f3:11:70:14:98:f4:e3:4a:b6:52:18:
         84:d7:a2:be:c8:da:9b:76:4d:8f:0b:7b:2b:e9:d7:d5:99:d7:
         ce:2c:5d:3f:48:a7:2f:36:e9:dc:c7:46:51:40:45:7c:51:f4:
         b7:fd:dd:8b:3a:bc:af:53:5c:48:2b:ba:1a:c9:5c:d6:90:76:
         3d:c7:78:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----