Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1b435c42-126a-3aa2-bcbc-0079d5d50275.roa
File:                     1b435c42-126a-3aa2-bcbc-0079d5d50275.roa (raw, json)
Hash identifier:          ID6iVSx5Ogd9L8Y9YJpwcAAZojGvjIg7FBWc8MWd6bQ=
Subject key identifier:   B0:E4:27:9E:B6:97:D0:29:8B:7C:97:07:1C:0C:8A:A7:2D:0E:25:B7
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840923473F538D172073475ED80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1b435c42-126a-3aa2-bcbc-0079d5d50275.roa
Signing time:             Fri 13 Jan 2023 12:00:00 +0000
ROA not before:           Fri 13 Jan 2023 12:00:00 +0000
ROA not after:            Sat 18 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        72.44.32.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:92:34:73:f5:38:d1:72:07:34:75:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 13 12:00:00 2023 GMT
            Not After : Feb 18 05:00:00 2023 GMT
        Subject: CN=56593fed-0b63-4cae-b1d2-776dd53a1f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3d:b4:9d:2b:59:39:58:e9:46:11:88:4b:5e:
                    02:f4:30:b1:03:22:47:f5:9c:08:0f:a9:66:86:5a:
                    6b:df:68:d7:d0:bf:87:1c:cf:bf:c6:cc:cf:7a:58:
                    6e:da:70:59:c6:29:b1:31:ef:6c:e4:50:3a:71:d8:
                    8d:9c:53:44:54:5c:18:9f:3e:58:53:85:c0:77:c9:
                    da:98:2e:c7:bb:a3:2f:ff:40:8d:f2:dd:d6:0d:8a:
                    c6:b4:66:dd:1f:d7:f5:33:d4:10:9b:26:3c:31:af:
                    4e:da:05:04:c4:58:e8:b0:c4:d2:b7:e8:c0:27:b8:
                    bb:76:40:aa:5d:7e:c3:c6:a2:fe:33:ee:49:a4:5f:
                    f3:07:f6:f5:6c:5d:8d:55:16:c3:d8:47:cb:26:61:
                    77:12:71:13:6d:0f:a5:bd:1a:85:92:48:7b:21:ed:
                    b1:d5:99:f4:cb:be:34:65:f3:76:1a:ce:53:7c:16:
                    12:76:d9:77:39:d3:1d:cd:b8:98:27:b9:5b:05:dc:
                    97:e1:66:74:81:ce:7e:4e:60:78:da:ae:34:89:38:
                    bf:93:ac:d0:da:bf:9d:9a:4a:da:ed:ce:e9:fa:af:
                    ce:cc:d7:b2:44:51:56:8e:43:a7:79:7e:2a:a9:f7:
                    e5:2b:27:4b:e9:cd:af:0d:14:9f:eb:44:4e:b4:7f:
                    c7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E4:27:9E:B6:97:D0:29:8B:7C:97:07:1C:0C:8A:A7:2D:0E:25:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1b435c42-126a-3aa2-bcbc-0079d5d50275.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.44.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:bd:02:a3:f9:e9:2f:78:43:ac:3d:24:90:8e:31:94:85:fd:
         8a:6c:ca:db:98:09:72:9b:a3:a9:af:26:b2:5a:36:97:4d:99:
         93:92:28:fb:24:78:f4:cb:db:c9:83:aa:c0:6e:50:d4:5a:97:
         26:4a:c4:aa:67:53:08:26:d6:14:8a:4c:86:fc:2d:01:98:77:
         7c:db:09:65:6b:9c:d3:94:ae:59:30:11:cd:46:2e:9f:6f:76:
         ac:ba:c1:7c:8b:9f:e5:56:ed:95:c2:19:53:7a:5a:3c:73:91:
         d8:2b:e1:7b:49:78:c0:0e:40:b8:76:fd:6d:e8:d7:d5:ee:7f:
         3e:69:d9:49:27:5a:6d:35:39:94:57:ae:31:d5:da:72:83:5f:
         33:03:1d:50:9d:95:b0:70:87:b5:51:e1:4a:d8:c7:2a:85:5f:
         64:3e:23:90:e4:1e:17:3b:d4:8f:0e:f0:4d:3e:7c:ae:49:b7:
         28:bc:88:0a:44:6d:59:2d:84:95:55:2f:ff:5b:ec:74:1d:90:
         3d:01:ac:d2:f9:8e:e8:c5:3d:86:dd:71:49:a1:10:c9:30:30:
         ef:53:76:cd:02:93:d5:13:85:b8:51:76:31:1c:58:3c:57:c3:
         3b:42:59:89:6d:56:6f:af:a3:c9:81:bb:8d:18:08:1f:14:70:
         94:98:4b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----