Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25e8e914-f733-3cad-b244-1255caf9fea3.roa
File:                     25e8e914-f733-3cad-b244-1255caf9fea3.roa (raw, json)
Hash identifier:          jMmLTLsJngxyuDL6i8LIK327nl+Qs0o89tME/o/uCyk=
Subject key identifier:   A6:11:2F:85:EF:67:64:6E:D9:7F:CC:C7:78:92:0F:FE:11:4B:F8:7F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840B66184FF36E4E7E8E9C5C780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25e8e914-f733-3cad-b244-1255caf9fea3.roa
Signing time:             Thu 26 Jan 2023 15:12:07 +0000
ROA not before:           Thu 26 Jan 2023 15:12:07 +0000
ROA not after:            Fri 03 Mar 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        63.246.112.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b6:61:84:ff:36:e4:e7:e8:e9:c5:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 26 15:12:07 2023 GMT
            Not After : Mar  3 05:00:00 2023 GMT
        Subject: CN=0bdc7720-e6c3-4075-af68-0fa15a204fc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8c:c8:77:c7:8b:45:ec:00:28:94:7e:f8:97:
                    85:0b:c5:79:93:c6:57:50:be:df:2c:5e:df:61:73:
                    6b:9d:b4:48:15:7f:c9:8f:2f:8c:f6:8d:88:3f:bc:
                    79:27:5f:d8:34:47:8e:65:8b:d0:37:3d:ed:f3:e0:
                    db:69:1f:f0:6e:c6:fd:2a:67:0f:7d:c6:fd:a0:42:
                    e9:13:a7:14:a3:14:14:a0:ae:60:ab:f6:ce:af:53:
                    7b:a0:a7:ba:c5:9f:0e:88:17:df:d0:ca:91:c6:f1:
                    c0:8c:23:1f:6f:3b:2d:27:02:0e:38:8a:c9:50:47:
                    10:b1:ea:0d:ec:69:48:03:70:6e:4d:a7:eb:5f:27:
                    73:e0:4a:57:a8:1f:e9:cd:2a:15:7c:04:60:ae:e5:
                    31:20:7d:8b:78:f9:b3:88:8f:fb:6f:6a:ba:6f:77:
                    b1:6b:a0:35:b2:39:34:a6:7c:a8:e0:b6:37:5d:22:
                    c8:b8:9e:19:6e:4c:8f:08:36:32:37:84:cb:a2:1c:
                    4c:07:ff:51:da:2b:29:81:48:47:53:10:80:48:40:
                    b4:5a:86:ac:9c:7b:3c:67:94:ae:5c:44:db:3c:60:
                    ab:ea:fc:1c:6f:68:6c:3d:cf:46:6a:f0:4d:14:3e:
                    2f:8a:62:33:4e:72:a1:59:b5:fd:f4:5e:44:8b:a2:
                    8e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:11:2F:85:EF:67:64:6E:D9:7F:CC:C7:78:92:0F:FE:11:4B:F8:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25e8e914-f733-3cad-b244-1255caf9fea3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.246.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:5a:f1:64:60:28:93:d5:a7:79:fa:10:b4:2e:ad:ec:53:05:
         cf:c4:3a:72:ad:b4:23:1d:1c:b0:3a:5b:18:3a:9b:7f:e0:9d:
         2e:70:e4:df:89:5f:cc:71:4e:17:e7:d8:ae:b8:e4:4e:1f:62:
         3b:c3:82:61:61:9d:4b:21:9f:5e:52:63:b0:54:5e:0f:14:61:
         8c:1a:f3:9d:05:bd:09:7d:15:5c:df:ea:2d:32:be:73:12:4d:
         60:79:cf:07:bf:a3:cd:e0:ac:5c:99:9b:c8:4d:5a:62:80:b2:
         e3:9a:6c:64:2a:6f:63:ea:79:b3:6c:2c:e3:ca:4b:42:40:dc:
         e1:db:5f:8b:86:8e:d6:6c:b7:a7:78:46:79:1c:f8:47:e6:fa:
         f7:ee:59:5c:8f:43:d0:e5:86:a5:ff:43:7d:c5:dc:5d:72:4f:
         6c:17:ab:8b:33:17:4e:ed:48:51:2b:59:78:db:ef:c0:5d:96:
         d2:87:75:37:2a:5b:c5:ec:13:bc:b1:42:8f:ab:25:64:00:f4:
         8f:bd:48:de:5d:27:62:c3:57:5f:a4:34:7a:32:c1:1c:df:ca:
         bb:82:b1:44:ff:b7:c7:c8:04:7c:ba:75:ab:c8:49:6b:ac:77:
         e5:8b:e7:0a:d0:f2:cc:b6:92:34:22:86:c4:c2:fd:34:51:70:
         60:d6:d9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----