Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/146a537d-c642-3fd7-b188-6aefe0bdb21b.roa
File:                     146a537d-c642-3fd7-b188-6aefe0bdb21b.roa (raw, json)
Hash identifier:          RwV0hT483g5DSkmvcHjLn192flStGySspUxr6kgQpA8=
Subject key identifier:   2B:52:00:23:F0:7B:27:EF:51:1C:4F:30:46:80:CE:7F:99:4E:34:C4
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584078D13E68A4187FF34501B820
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/146a537d-c642-3fd7-b188-6aefe0bdb21b.roa
Signing time:             Wed 04 Jan 2023 12:00:00 +0000
ROA not before:           Wed 04 Jan 2023 12:00:00 +0000
ROA not after:            Thu 09 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        15.148.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:78:d1:3e:68:a4:18:7f:f3:45:01:b8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  4 12:00:00 2023 GMT
            Not After : Feb  9 05:00:00 2023 GMT
        Subject: CN=bcbfd766-1a07-4ae1-adde-36afdbbafbd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7a:48:a7:85:b8:dd:7d:4d:32:b7:a7:f4:3c:
                    e1:3b:d8:20:8e:44:82:4e:30:31:b1:48:de:2d:fb:
                    0c:89:06:e2:8a:b3:f1:93:90:64:4b:5f:dd:b9:e2:
                    59:c3:23:36:54:b1:7f:27:97:c4:c9:b0:0c:79:b9:
                    3b:b3:cc:b2:bb:aa:b5:9c:65:68:27:84:fc:ce:77:
                    03:6e:34:e9:53:c9:ad:9a:95:79:64:ea:24:37:e7:
                    b4:a2:6a:f9:04:ad:67:dd:78:1f:f3:ed:20:2b:d7:
                    74:64:92:d2:af:21:6e:25:da:8d:bb:53:9e:31:14:
                    ea:02:6b:df:f5:b6:7d:e6:f4:3f:fd:97:50:6f:25:
                    e5:8c:5a:9a:83:3c:c9:91:fa:a1:4c:9f:9c:fb:64:
                    00:33:34:f8:62:3f:98:a8:a3:d4:ad:b2:b3:25:d6:
                    63:23:07:e1:1f:cf:7d:c7:7f:54:f2:9f:cb:d3:f1:
                    05:c3:74:49:23:bd:0a:33:97:2f:c5:1a:2e:b6:fd:
                    65:8c:f8:40:f4:6e:6d:03:06:26:54:b9:4e:cb:55:
                    a6:73:42:2d:3b:0d:47:b1:1f:eb:f5:e4:72:b7:26:
                    ac:66:ae:e3:d7:7e:ce:ef:8e:63:8c:93:07:0f:ec:
                    b3:44:f4:14:45:15:51:dc:87:9a:3b:fc:65:06:d8:
                    76:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:52:00:23:F0:7B:27:EF:51:1C:4F:30:46:80:CE:7F:99:4E:34:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/146a537d-c642-3fd7-b188-6aefe0bdb21b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.148.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:2b:fc:87:6a:9f:ea:64:63:9a:bc:7f:e9:73:65:44:84:0b:
         e6:37:ef:13:34:1d:86:36:de:8c:8d:12:a1:25:b5:2c:1d:ee:
         74:28:a4:9a:d7:34:9e:20:ca:11:b5:26:a0:60:76:f4:df:99:
         1b:f2:ef:8d:83:de:e0:82:e0:0b:ba:db:f3:1d:cf:22:ef:49:
         8c:d7:75:e7:a9:05:54:c0:48:e2:83:9e:bb:d5:a0:00:83:ac:
         ed:38:8b:45:43:60:2e:f9:eb:f6:c9:60:d9:0e:1e:88:53:86:
         f2:b3:04:92:19:0d:cb:0f:a1:02:6d:59:d3:66:62:c5:bf:55:
         fb:6b:07:c1:74:ba:47:e4:a3:76:ef:ad:46:83:ef:e5:61:d9:
         72:99:ea:94:0f:ce:1c:c2:28:48:10:2f:e1:f6:f8:35:58:43:
         68:99:93:12:47:c2:9b:31:ba:00:d8:10:22:b8:0a:26:af:ab:
         18:39:cf:5b:71:3a:8b:76:7f:f3:45:d3:4e:8a:29:d6:3c:65:
         2e:0b:35:90:bb:be:29:a7:f2:d9:92:97:c0:42:91:7b:51:d7:
         8a:43:4b:09:4d:31:98:d5:46:4b:48:3d:ec:64:77:72:d3:14:
         e2:45:71:4b:b3:6b:56:9d:ca:cd:1f:a7:40:fd:ca:ff:51:2b:
         42:e9:db:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----