Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/214f3fba-41cf-3e44-aea1-339b8d1bd879.roa
File:                     214f3fba-41cf-3e44-aea1-339b8d1bd879.roa (raw, json)
Hash identifier:          GVmw6T2wcgsTJ26eBE9jXQvlqTcr9Kmuc1pMegXEg+M=
Subject key identifier:   D9:C3:E4:29:9D:5F:D6:12:67:BD:1B:2B:1E:E7:2C:6E:BE:68:10:E4
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840A23A62CF2BC5D41803CB2800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/214f3fba-41cf-3e44-aea1-339b8d1bd879.roa
Signing time:             Thu 19 Jan 2023 12:00:00 +0000
ROA not before:           Thu 19 Jan 2023 12:00:00 +0000
ROA not after:            Fri 24 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        160.223.224.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:a2:3a:62:cf:2b:c5:d4:18:03:cb:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 19 12:00:00 2023 GMT
            Not After : Feb 24 05:00:00 2023 GMT
        Subject: CN=05a191ae-cabd-4791-805c-aef2e9478e79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:69:9e:c8:ff:c5:d6:5e:8d:ba:bd:0b:79:2a:
                    b9:af:88:ea:46:1b:cd:7a:c6:99:46:8c:cd:9b:66:
                    ad:2b:9a:a1:c7:ac:5a:b7:9b:3c:68:89:19:d9:4e:
                    32:b0:1d:52:ed:03:11:5c:36:26:2b:75:3b:64:bd:
                    08:23:2b:aa:07:97:5d:a4:13:6f:4e:3f:3c:0a:75:
                    6e:18:0d:f0:d4:95:79:a8:52:2b:28:85:f7:7f:6b:
                    49:51:3a:5f:a7:52:62:91:7e:4a:3d:f1:36:c2:49:
                    07:b8:96:6b:fd:7c:5c:c5:cc:9f:cf:ff:80:b4:a6:
                    b4:e2:3a:ac:76:d0:f8:7b:a1:db:9f:01:5b:26:ca:
                    24:03:99:93:eb:d4:92:7a:b2:8c:ed:58:dd:2a:e9:
                    c2:57:0d:25:d0:d8:c4:f4:8d:56:bd:35:00:31:62:
                    61:d2:96:74:ee:47:89:d1:ce:26:a3:87:17:e7:64:
                    ab:89:19:56:52:c2:ba:2e:3f:a6:7d:ff:2d:17:3c:
                    ac:f8:d3:2b:4b:d8:66:67:ed:a5:0e:e2:d2:79:6a:
                    c6:46:ac:8c:0b:47:65:87:5a:7a:77:f4:ed:63:48:
                    41:33:08:25:9e:c1:c7:25:bf:65:55:57:91:85:a9:
                    a9:d1:a2:1e:35:eb:0f:66:3d:a8:d6:fb:90:2b:bb:
                    db:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C3:E4:29:9D:5F:D6:12:67:BD:1B:2B:1E:E7:2C:6E:BE:68:10:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/214f3fba-41cf-3e44-aea1-339b8d1bd879.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.223.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:92:ba:c7:e3:65:2a:2a:c4:ee:2e:42:08:a3:61:66:b6:e9:
         ed:02:14:63:fd:61:c5:82:bc:f2:62:29:2c:b3:6c:cc:9a:ee:
         f3:82:14:ba:2b:56:ce:46:61:6f:e3:c9:00:1c:8d:fb:e3:6c:
         eb:0f:72:e1:36:3b:fd:0d:dc:fd:47:40:64:4b:cb:b3:d1:6f:
         2d:54:e7:f6:83:ed:68:0a:7d:2a:a0:77:8f:13:c4:37:e9:02:
         ad:83:ca:19:ae:c6:ac:6e:2d:e5:f7:cb:fc:da:03:4b:01:15:
         ad:66:6e:4e:cb:5a:55:04:a5:ac:27:b3:57:80:2b:bc:b1:40:
         ea:19:f4:23:3b:b5:85:c7:92:e8:2f:10:12:63:ce:93:60:e7:
         ec:4e:ee:c8:69:73:f4:4b:a9:ca:74:d5:e1:02:6e:4e:46:e2:
         69:02:36:c8:89:eb:48:9e:26:47:c3:46:fa:b9:1b:b8:cb:1f:
         29:39:7a:c0:fc:91:b6:5c:e1:c0:8c:78:28:0f:85:6d:3c:1b:
         43:18:a3:15:a4:f9:cc:03:8c:fa:1f:1b:2d:33:a5:d5:60:83:
         a0:04:ac:ba:b4:c6:75:f3:4b:f1:fe:46:67:b9:df:55:e5:64:
         fc:37:ed:d5:91:a7:a1:a7:dd:e0:8c:f3:70:d4:c1:81:7a:24:
         2f:f5:d4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----