Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/29e80af0-0415-3a6c-827c-012c76b18055.roa
File:                     29e80af0-0415-3a6c-827c-012c76b18055.roa (raw, json)
Hash identifier:          0oaLoIyAfc94IFtm+yNxXAOxRSB44Rk6Te4FKa5KO3A=
Subject key identifier:   20:E3:94:3B:FC:14:4E:35:C6:FF:28:D7:A8:66:84:5E:F6:9A:25:D8
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840C1B17DF7399BBC4AB89AB500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/29e80af0-0415-3a6c-827c-012c76b18055.roa
Signing time:             Mon 30 Jan 2023 22:42:07 +0000
ROA not before:           Mon 30 Jan 2023 22:42:07 +0000
ROA not after:            Tue 07 Mar 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        149.180.0.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c1:b1:7d:f7:39:9b:bc:4a:b8:9a:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 30 22:42:07 2023 GMT
            Not After : Mar  7 05:00:00 2023 GMT
        Subject: CN=6827915e-b352-4f18-9486-4aa7cf3dd076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9a:9e:cc:4e:aa:de:3b:5e:14:89:a0:64:2d:
                    e3:45:2f:5b:59:49:82:38:e7:19:c9:f0:6a:6b:29:
                    42:f1:b7:1b:b8:26:da:f9:5d:48:24:1b:05:de:12:
                    8b:f8:e7:b8:38:9a:47:ca:9f:2b:3b:78:ff:bb:bd:
                    2e:4c:8a:c6:fc:bd:52:ad:4b:a1:1b:2a:9e:aa:8c:
                    fc:5e:2f:f8:f8:5a:03:94:3e:1e:54:92:c9:75:48:
                    80:2d:de:37:a0:46:5f:cd:66:7e:a0:10:f6:83:5c:
                    1d:1b:7e:50:86:38:35:c9:17:5b:46:f4:cb:39:e8:
                    a5:1e:16:02:fd:70:ef:51:d6:1e:4b:09:44:b1:39:
                    9c:df:99:b5:26:d9:c7:54:83:13:01:22:40:b1:02:
                    31:bc:71:a2:59:fb:ab:43:8d:d8:63:87:cd:cb:49:
                    1b:ac:11:18:9a:12:b7:d7:44:ba:85:f8:57:c8:b5:
                    51:ac:97:54:2a:64:a6:82:66:7a:1a:4c:c4:fc:22:
                    c5:89:15:5d:23:80:54:b2:97:f9:11:ff:cc:18:77:
                    c0:46:06:0a:de:ea:2f:b6:a5:1e:4f:f0:15:f6:33:
                    83:0d:2a:bf:5e:0e:ee:fa:72:56:04:56:71:17:9a:
                    88:ad:55:61:44:2f:4a:8b:51:ba:1b:51:73:18:3c:
                    f2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E3:94:3B:FC:14:4E:35:C6:FF:28:D7:A8:66:84:5E:F6:9A:25:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/29e80af0-0415-3a6c-827c-012c76b18055.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.180.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:c7:bb:bd:98:9c:28:11:68:dd:63:3c:64:a8:4c:a3:2b:18:
         84:d1:13:0e:30:05:9a:3e:13:e5:b9:d6:48:2e:6d:a9:10:48:
         a1:54:d6:59:54:4b:f3:3d:d7:5c:65:b6:67:b9:b3:eb:51:c4:
         54:c7:35:b3:b3:85:71:3c:1d:b9:22:3b:c8:0b:c2:f5:9b:f0:
         c9:e2:fb:29:bd:79:cd:60:ec:a6:41:7c:4d:3c:2c:a6:53:34:
         1b:8d:0f:db:bc:d0:55:59:ea:d4:1d:8f:6c:d7:ec:24:41:84:
         f0:79:fd:08:33:8e:53:cd:c9:03:8d:97:b9:83:2c:80:47:66:
         0f:bb:46:ed:ef:7d:e7:ae:56:4a:a1:1c:01:95:fd:a9:b1:1c:
         2a:64:70:e3:b5:0a:81:7b:d8:92:eb:93:36:0c:24:ca:c0:9c:
         8b:a2:a9:d6:5f:c9:d6:46:27:ee:e5:8e:ef:f0:09:8a:02:6b:
         04:9d:52:ff:a8:8f:76:9f:43:d7:c0:cb:30:ef:44:19:f5:51:
         de:4b:e1:a6:28:5a:b2:dd:f5:d2:2f:60:e9:3f:dd:83:5e:a6:
         76:01:5c:07:95:4a:7d:6e:b8:b2:9e:f5:26:45:c8:8e:fd:7c:
         0c:bb:09:1a:51:ec:8d:b7:8e:f5:89:8c:02:0a:02:87:6b:c8:
         eb:52:33:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----