Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/254eeadb-69d5-379a-9550-ea4eeacfd046.roa
File:                     254eeadb-69d5-379a-9550-ea4eeacfd046.roa (raw, json)
Hash identifier:          4Dliw/cRekLaPeggnMiNc5ctCXrD2Tp80Gio1D11Cbw=
Subject key identifier:   45:A0:D4:75:33:A1:12:91:18:E8:F0:09:C7:76:CA:76:51:DA:B3:23
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840745A6CCE2CF4A572A25F1D00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/254eeadb-69d5-379a-9550-ea4eeacfd046.roa
Signing time:             Mon 02 Jan 2023 12:00:00 +0000
ROA not before:           Mon 02 Jan 2023 12:00:00 +0000
ROA not after:            Tue 07 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        149.186.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:74:5a:6c:ce:2c:f4:a5:72:a2:5f:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  2 12:00:00 2023 GMT
            Not After : Feb  7 05:00:00 2023 GMT
        Subject: CN=2a8d90bb-322e-4b43-9552-c275a9b22d52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:17:04:05:2c:41:e9:cf:ce:ad:4b:7f:0b:e1:
                    94:79:d9:32:85:65:cd:e7:aa:97:3b:2b:46:29:ec:
                    6a:85:fa:38:9d:9f:8e:e8:06:16:3f:80:64:dc:bc:
                    05:69:f3:c3:aa:ee:dc:7f:13:0b:1b:39:c0:ee:0b:
                    c4:82:c1:8b:c6:db:f9:98:65:d1:6a:e3:9b:9f:95:
                    ea:5a:85:97:ae:0a:39:df:fa:ff:15:4d:11:f2:d0:
                    46:28:a7:c7:9e:d9:30:78:83:84:f6:f1:b5:ec:f1:
                    cc:4f:a5:df:30:64:f4:aa:85:4e:47:c3:3a:0d:ea:
                    03:be:e4:81:9b:e3:d1:5b:f5:fd:14:e7:1b:9a:61:
                    eb:3d:df:85:65:ce:80:dd:b7:60:58:b0:da:f0:48:
                    22:c0:90:47:5c:ab:7a:bf:b2:8e:31:3b:7f:f8:fe:
                    16:45:cc:d3:46:d4:ca:ee:ad:e5:13:e4:38:61:41:
                    87:65:52:54:6a:bd:a0:f0:10:93:c1:55:d8:12:a3:
                    d9:e7:45:82:67:bb:11:fc:70:27:db:12:4e:f9:4c:
                    a1:11:c4:db:86:f7:a4:f6:8c:02:ad:a9:dc:7f:8b:
                    78:2e:0e:f2:f6:4c:df:c1:99:a0:e8:13:0c:a2:27:
                    51:d5:1c:57:8f:21:30:e2:57:cf:87:dd:8c:9c:c0:
                    4b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A0:D4:75:33:A1:12:91:18:E8:F0:09:C7:76:CA:76:51:DA:B3:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/254eeadb-69d5-379a-9550-ea4eeacfd046.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.186.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:ec:41:d2:89:00:be:23:82:fd:51:97:00:d1:c1:19:12:2c:
         31:8f:05:f8:c7:fa:0d:98:d2:ee:64:c9:92:8b:99:90:8b:f3:
         3c:98:84:22:38:da:91:d0:73:a8:84:01:aa:06:57:32:98:e9:
         67:c9:60:5f:a5:c8:ff:03:85:42:3a:4b:91:44:a2:6b:1b:db:
         8a:76:58:d9:f1:79:9e:e0:a2:38:00:5e:a5:7d:ed:6d:c5:24:
         4b:bc:9e:56:95:28:e9:93:87:99:cb:55:ed:30:11:d6:7a:c7:
         c2:f5:37:0c:a5:e0:03:21:a8:48:a8:9e:ff:a5:25:b7:ed:1e:
         6b:7f:c2:2b:d9:df:2f:42:0d:ab:8b:12:b9:0a:a2:30:20:58:
         04:f9:28:35:43:69:78:c2:26:83:a2:c7:a9:9f:3d:7e:e4:6f:
         99:15:8f:d6:36:bc:46:9f:58:8e:83:32:cc:35:46:4d:35:5b:
         05:3f:6c:39:dd:2b:9a:6e:e4:2e:24:94:a3:0a:43:4b:ef:9f:
         01:ac:fa:bb:78:4d:e8:df:38:58:4b:64:eb:43:d2:b9:57:3d:
         72:9e:4a:70:99:88:a8:b1:de:46:3a:6f:f1:1b:be:d4:90:ff:
         31:ec:c1:6e:54:da:4c:14:5d:a7:e6:77:65:eb:ca:e3:76:9a:
         cd:87:ed:02
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEB0WmzOLPSlcqJfHQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEwMjEyMDAwMFoXDTIzMDIwNzA1MDAwMFowLzEtMCsGA1UEAxMk
MmE4ZDkwYmItMzIyZS00YjQzLTk1NTItYzI3NWE5YjIyZDUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBcEBSxB6c/OrUt/C+GUedkyhWXN56qXOytG
Kexqhfo4nZ+O6AYWP4Bk3LwFafPDqu7cfxMLGznA7gvEgsGLxtv5mGXRauObn5Xq
WoWXrgo53/r/FU0R8tBGKKfHntkweIOE9vG17PHMT6XfMGT0qoVOR8M6DeoDvuSB
m+PRW/X9FOcbmmHrPd+FZc6A3bdgWLDa8EgiwJBHXKt6v7KOMTt/+P4WRczTRtTK
7q3lE+Q4YUGHZVJUar2g8BCTwVXYEqPZ50WCZ7sR/HAn2xJO+UyhEcTbhvek9owC
rancf4t4Lg7y9kzfwZmg6BMMoidR1RxXjyEw4lfPh92MnMBLxwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEWg1HUzoRKRGOjwCcd2ynZR2rMjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMjU0ZWVhZGItNjlkNS0z
NzlhLTk1NTAtZWE0ZWVhY2ZkMDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlbowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAPuxB0okAviOC/VGXANHBGRIsMY8F+Mf6DZjS7mTJkouZkIvzPJiEIjja
kdBzqIQBqgZXMpjpZ8lgX6XI/wOFQjpLkUSiaxvbinZY2fF5nuCiOABepX3tbcUk
S7yeVpUo6ZOHmctV7TAR1nrHwvU3DKXgAyGoSKie/6Ult+0ea3/CK9nfL0INq4sS
uQqiMCBYBPkoNUNpeMImg6LHqZ89fuRvmRWP1ja8Rp9YjoMyzDVGTTVbBT9sOd0r
mm7kLiSUowpDS++fAaz6u3hN6N84WEtk60PSuVc9cp5KcJmIqLHeRjpv8Ru+1JD/
MezBblTaTBRdp+Z3ZevK43aazYftAg==
-----END CERTIFICATE-----