Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/23eded35-3f52-346c-bbd6-e0731669347d.roa
File:                     23eded35-3f52-346c-bbd6-e0731669347d.roa (raw, json)
Hash identifier:          mIJQxjCK4ovXSmWq4N4enDcdtp4SqOj8hTvyQvZMU/Q=
Subject key identifier:   CD:EB:D6:B1:ED:50:4C:8D:B4:C7:53:F9:0E:12:D1:CD:AC:34:06:78
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840912FEA352D0FA8C227D2EA80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/23eded35-3f52-346c-bbd6-e0731669347d.roa
Signing time:             Fri 13 Jan 2023 12:00:00 +0000
ROA not before:           Fri 13 Jan 2023 12:00:00 +0000
ROA not after:            Sat 18 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        64.187.128.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:91:2f:ea:35:2d:0f:a8:c2:27:d2:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 13 12:00:00 2023 GMT
            Not After : Feb 18 05:00:00 2023 GMT
        Subject: CN=9e0b700a-569b-4e95-9a97-14ec808bffb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6b:1e:66:f7:c0:89:46:3f:3f:2c:66:4b:86:
                    6a:df:e7:c4:db:2c:06:0b:71:9a:e6:42:92:6d:b6:
                    9f:85:2c:11:27:0e:fb:be:f6:01:1e:5a:4b:e7:f5:
                    b4:a0:93:41:af:01:6a:cc:34:8a:e5:51:b5:4e:a2:
                    cc:55:58:04:77:70:ed:4a:44:fa:67:ba:ab:ae:b4:
                    8e:ce:6b:6a:d3:57:23:66:7f:83:cb:ca:83:d1:ba:
                    60:d7:6a:62:c6:38:f6:7b:a9:e1:63:20:39:f6:7b:
                    8b:47:33:9a:20:d8:39:82:27:4c:32:1b:db:8b:41:
                    95:da:63:65:9d:29:53:03:eb:5b:63:ae:5d:b4:98:
                    c0:bc:33:78:c8:bc:84:bf:ad:33:07:bb:af:b9:74:
                    a3:1e:7d:13:c6:cd:46:36:3e:5e:6b:1b:17:56:68:
                    eb:1f:c3:c2:ef:88:8e:b4:b5:26:fa:b5:3b:22:92:
                    38:4e:a3:33:be:90:18:19:f6:51:46:65:e7:e7:eb:
                    58:57:67:a9:2c:dc:f9:dc:48:d0:22:78:d9:7b:eb:
                    5a:70:d0:19:86:2c:4d:b9:ba:86:1b:62:8a:ba:ba:
                    c1:20:05:a6:99:0e:a7:db:76:5e:96:49:97:30:c7:
                    7f:ed:46:68:80:e3:ea:46:1c:cc:93:12:e4:7c:ae:
                    23:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:EB:D6:B1:ED:50:4C:8D:B4:C7:53:F9:0E:12:D1:CD:AC:34:06:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/23eded35-3f52-346c-bbd6-e0731669347d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.187.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:51:87:74:35:a2:44:01:98:9b:18:d3:59:58:e9:68:ef:fe:
         c9:30:69:ef:11:b5:af:a3:9f:91:b7:4f:29:1b:39:e4:24:b0:
         df:3c:58:04:fb:e2:cb:b3:9e:9f:df:a0:06:6b:c9:05:f4:58:
         a9:51:9a:e1:74:21:ba:40:ff:bc:a1:85:24:85:a7:7f:0e:8e:
         61:52:16:25:ca:30:bb:e5:e1:d8:85:86:08:89:35:fb:74:ce:
         9b:97:25:35:1c:15:62:b9:46:d9:99:90:e6:1b:fb:cc:1a:27:
         e4:f1:98:10:dd:25:02:ac:7a:bd:f3:3f:68:2d:02:e4:0c:02:
         ef:a9:e4:36:1c:f1:d1:94:ac:0d:be:cc:30:a6:62:14:85:d9:
         6f:ee:d4:ce:ad:10:43:cb:e6:cb:39:0c:d9:52:f5:c2:2c:75:
         d4:b1:d4:71:a2:64:23:ee:b6:33:2d:d3:fa:6a:bc:3d:fb:c2:
         e6:ca:93:ca:06:e0:d6:7d:ed:b2:38:5c:f6:76:2d:23:d9:f2:
         e5:24:e5:e6:26:06:a9:16:22:90:94:61:b9:41:54:ee:ad:e9:
         66:33:57:ae:45:0f:86:3d:52:e9:cd:3c:d1:0f:18:3d:38:d3:
         e1:88:36:f3:ad:98:96:a6:42:3e:68:26:51:38:5d:0d:f1:b8:
         1d:e2:51:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----