Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1b3d0427-7c7c-3748-abe4-f5dcae2a7640.roa
File:                     1b3d0427-7c7c-3748-abe4-f5dcae2a7640.roa (raw, json)
Hash identifier:          gOR8BLrKghlleukmsCj9VW3ia/PRLeqZup+9hcG6CEk=
Subject key identifier:   23:38:27:17:C4:FD:0A:E0:31:F5:2B:BF:42:F6:6A:D9:DA:3E:8C:F4
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840B8974E623810AE4817A9FC80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1b3d0427-7c7c-3748-abe4-f5dcae2a7640.roa
Signing time:             Fri 27 Jan 2023 12:00:00 +0000
ROA not before:           Fri 27 Jan 2023 12:00:00 +0000
ROA not after:            Sat 04 Mar 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        184.72.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b8:97:4e:62:38:10:ae:48:17:a9:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 27 12:00:00 2023 GMT
            Not After : Mar  4 05:00:00 2023 GMT
        Subject: CN=dc5b3152-8d9e-42cc-a11d-81e3a3eba0a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8d:43:1c:f6:48:bd:33:ea:59:a6:68:6a:34:
                    9b:16:f5:b9:fa:d8:fb:03:15:35:84:11:69:f7:1a:
                    a8:75:92:f8:c5:c1:b2:79:49:ca:d1:b7:43:16:6a:
                    ab:17:67:5e:7d:d0:db:e0:29:4a:97:c1:8c:73:11:
                    17:e2:9b:e2:38:7d:38:6b:ef:a7:b6:db:d4:50:8a:
                    ce:85:f3:f4:f2:c7:76:c8:7c:5f:dc:e8:d6:3a:94:
                    ff:f7:31:08:86:1e:87:8d:14:49:90:c8:c7:6d:3f:
                    28:9b:86:4b:43:80:da:8d:09:5e:71:d4:d1:f9:96:
                    4f:4d:2e:a2:d1:29:36:63:fe:cb:91:b1:cd:f5:23:
                    ed:ea:2c:31:15:29:55:84:b8:ea:7e:52:ed:c3:47:
                    43:a2:48:c2:5c:ee:58:66:94:d1:f0:5f:7c:e6:e3:
                    2b:46:54:3d:37:e7:8b:fc:03:b6:1e:cc:78:d7:24:
                    24:05:b2:3b:ee:40:b4:ba:4b:fa:36:cf:e0:8c:98:
                    3e:8f:09:d8:6b:1a:f9:22:f0:00:09:fc:24:70:86:
                    43:dc:5c:fc:01:c3:b7:4c:90:96:3c:60:ee:c3:be:
                    3c:88:7e:a9:dd:4f:71:37:b3:22:e0:60:5d:e7:37:
                    43:f5:73:d6:4a:27:ba:2b:b6:89:62:25:d6:21:ec:
                    29:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:38:27:17:C4:FD:0A:E0:31:F5:2B:BF:42:F6:6A:D9:DA:3E:8C:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1b3d0427-7c7c-3748-abe4-f5dcae2a7640.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.72.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:97:16:6e:80:14:4a:38:7a:a5:b0:ee:a3:c5:ca:2c:6c:bd:
         04:59:e8:45:bc:df:6e:32:8f:13:95:04:fa:b2:94:20:99:9a:
         a6:31:5b:93:be:1a:ca:b8:19:bc:1b:bf:6a:d9:53:de:76:61:
         a9:8f:f4:30:6c:3e:8e:93:73:92:af:19:0b:73:ca:2b:15:2f:
         4c:e6:f6:5f:a1:49:3e:da:a8:9e:db:f1:d9:6a:a7:c4:6b:fc:
         6a:5f:b0:f1:1e:28:e3:f6:29:a3:92:3b:8b:cc:e3:19:d9:f7:
         b9:3e:42:f7:62:f3:d8:1d:47:f5:3d:d1:bc:c0:0e:61:3e:af:
         2e:a0:cc:a5:c9:09:94:cf:3e:72:48:a6:94:9c:6c:51:e1:ce:
         cb:8c:45:ab:11:63:08:e2:c7:63:4a:4a:9d:3e:3b:0d:82:ed:
         cf:c2:e5:b2:05:6d:ed:76:b3:d7:e1:4e:5f:19:6d:18:e0:c7:
         17:de:34:4c:6d:a3:a6:9a:ba:23:0a:71:cf:b8:c6:c7:b9:33:
         5d:64:43:28:de:3f:5e:a2:45:cd:ce:0c:ed:2a:99:68:22:54:
         9b:7b:36:97:0b:e7:04:f6:29:6a:d1:f8:e2:15:06:c0:06:cd:
         c6:47:e7:c7:1c:c6:98:3d:d4:a7:c5:98:66:5b:ef:81:eb:c0:
         3d:93:7d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----