Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/23deb326-d516-3e3c-a689-a60d15be722e.roa
File:                     23deb326-d516-3e3c-a689-a60d15be722e.roa (raw, json)
Hash identifier:          I+aq1IZ8ew56XToOJpZfmEzBtqZD1a6FTuyV7SUhBmg=
Subject key identifier:   1B:F8:44:58:05:BA:01:00:7B:FA:37:06:8D:1B:BA:62:95:12:00:56
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858407462A65D344B96B7D0236CD8
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/23deb326-d516-3e3c-a689-a60d15be722e.roa
Signing time:             Mon 02 Jan 2023 12:00:00 +0000
ROA not before:           Mon 02 Jan 2023 12:00:00 +0000
ROA not after:            Tue 07 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        149.181.0.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:74:62:a6:5d:34:4b:96:b7:d0:23:6c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  2 12:00:00 2023 GMT
            Not After : Feb  7 05:00:00 2023 GMT
        Subject: CN=d2ee0360-4de0-4451-a550-6596c2e17b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0d:98:6c:b3:c1:d7:5b:ee:34:3c:32:01:ab:
                    3b:5c:35:e4:ec:c9:52:b9:eb:29:df:0c:c4:bf:f5:
                    a1:1f:b4:a3:66:d2:04:2d:63:21:d7:bf:43:36:13:
                    35:0a:92:09:f6:ab:e7:37:de:91:87:41:51:2c:b9:
                    d6:dc:b1:c5:64:fc:8d:84:9f:00:c9:d7:a0:70:d6:
                    e6:82:ef:64:d6:e8:4f:d5:29:b8:ff:71:fd:79:d6:
                    cc:f0:eb:de:b5:24:ba:8d:dc:f6:57:1d:a4:e4:b1:
                    73:f0:03:00:0f:ad:6a:4e:29:d3:13:7d:5f:a4:44:
                    74:91:88:86:fe:4a:9d:75:3f:18:b6:62:14:07:cc:
                    f3:e9:c6:51:18:e3:16:af:3c:43:4e:3a:02:83:bc:
                    ba:e3:6f:56:55:ae:85:3b:6e:3a:7d:80:af:1e:f8:
                    3a:d6:9b:99:6d:d0:76:3c:ad:39:aa:0a:64:6b:41:
                    fd:ec:68:00:4e:93:0a:4e:e6:04:9b:b9:3f:2f:7f:
                    a8:74:f5:af:58:1b:57:82:ad:a0:86:84:e3:5e:94:
                    c0:32:87:3d:9a:b2:28:93:10:6d:7e:70:54:0e:cb:
                    53:02:57:09:fc:20:ce:39:15:3b:5d:0d:48:9a:49:
                    49:a2:f2:a0:49:13:9a:d7:f3:08:d7:74:fe:d9:be:
                    cf:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F8:44:58:05:BA:01:00:7B:FA:37:06:8D:1B:BA:62:95:12:00:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/23deb326-d516-3e3c-a689-a60d15be722e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.181.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:c3:51:3f:5d:4d:12:2f:dd:4b:c3:e5:da:28:cd:2e:17:c3:
         b4:a1:98:26:9b:e2:92:46:79:e9:b4:a8:3b:9e:6f:30:6d:b8:
         37:ea:8e:65:a4:a7:58:fc:a0:04:ed:c1:b9:be:2f:da:f0:a4:
         71:d4:a3:ce:bb:8f:2b:31:58:12:b1:a2:18:3a:98:85:35:e0:
         2e:d3:04:ed:b9:4c:32:25:dd:dc:56:3f:11:30:6d:e0:43:3f:
         90:d5:74:fc:11:40:ce:2f:d1:3a:e0:5c:a6:8d:6b:04:f4:40:
         36:d1:f4:ce:09:cd:40:d9:a9:35:49:bc:77:0f:1e:d7:c5:cb:
         95:46:a1:0e:8d:16:af:56:9d:e8:ff:a7:ad:91:7b:60:fc:3d:
         ea:c5:63:a7:d1:61:ed:5f:98:7c:ed:55:a7:7a:f6:54:72:38:
         a7:9b:a5:c1:0a:da:7c:e1:1f:11:d4:01:96:2c:9f:e9:92:f2:
         04:51:22:28:00:fe:cd:12:1f:b7:6f:ca:83:5b:75:9e:44:90:
         64:f3:7b:6e:69:8c:fc:e6:b5:87:60:37:f3:35:79:ab:be:8c:
         e9:a7:ac:3d:9a:b2:40:31:b5:f6:cd:f1:8a:c3:6b:96:ae:d4:
         ed:99:02:b0:0a:02:2d:55:58:c2:e3:41:6e:a7:56:37:77:15:
         5e:c3:0e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----