Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2b240e8d-49d0-3a4a-8279-f5ee76f606c1.roa
File:                     2b240e8d-49d0-3a4a-8279-f5ee76f606c1.roa (raw, json)
Hash identifier:          PcsFNvMrJ7zEYHXaJZE30BUJ8TVVrywYqmZxQavXChE=
Subject key identifier:   E1:69:5D:E4:F4:A3:AD:89:3E:E8:DF:E0:D9:07:A1:20:D2:01:3C:7D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840B8A6316D22E28A4C0C8DF600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2b240e8d-49d0-3a4a-8279-f5ee76f606c1.roa
Signing time:             Fri 27 Jan 2023 12:00:00 +0000
ROA not before:           Fri 27 Jan 2023 12:00:00 +0000
ROA not after:            Sat 04 Mar 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        216.39.128.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b8:a6:31:6d:22:e2:8a:4c:0c:8d:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 27 12:00:00 2023 GMT
            Not After : Mar  4 05:00:00 2023 GMT
        Subject: CN=93669355-4af2-4832-b059-ea3bb431ca0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bc:25:62:28:7f:91:0b:9d:69:69:49:49:93:
                    c3:1b:c3:16:90:a7:da:e5:65:3b:c5:3d:ac:f3:0c:
                    a4:f6:63:ee:1c:49:bb:36:b6:9a:a7:59:a2:da:55:
                    c1:f0:32:e6:6b:9a:f8:9d:6c:8a:40:79:6e:bf:26:
                    bf:75:d7:4e:28:3a:19:b8:0b:f1:6b:83:31:5c:4a:
                    1e:d6:10:0c:67:bd:c6:84:89:37:84:f3:ca:28:36:
                    a9:b6:f6:dd:b3:04:5b:60:ee:a4:82:85:8f:21:13:
                    57:fb:1f:5f:4f:63:da:fc:0b:4c:bc:80:61:28:03:
                    d7:bc:c2:89:74:86:25:6a:97:17:f5:71:44:0d:ea:
                    52:b2:70:48:35:d0:03:a9:40:0f:dd:12:6f:ca:e9:
                    68:32:f3:5e:d3:83:3a:82:72:0a:9d:68:d5:43:87:
                    42:0c:7e:c1:8d:e6:20:92:38:7b:2c:4f:94:4e:14:
                    a8:69:7a:71:e9:3d:d0:a0:41:2d:1c:cf:f9:de:3d:
                    60:df:17:71:6a:68:1d:71:2a:4b:34:7a:52:90:2f:
                    5f:73:a0:29:8c:b2:36:71:ff:60:ec:d2:c6:00:51:
                    92:ff:e1:67:3c:92:73:be:42:51:e8:b6:09:b3:d1:
                    12:90:1a:da:1d:54:7b:ec:51:22:1f:ec:d9:44:68:
                    2b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:69:5D:E4:F4:A3:AD:89:3E:E8:DF:E0:D9:07:A1:20:D2:01:3C:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2b240e8d-49d0-3a4a-8279-f5ee76f606c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.39.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:9e:03:6a:22:c1:67:62:ba:79:4f:7e:d0:c5:3e:72:2f:c4:
         53:8a:a0:82:51:ac:be:be:8c:33:19:28:a7:f0:a7:f7:8e:f5:
         21:27:06:5b:4f:67:12:fd:bf:2b:a4:72:5c:b9:f0:aa:2b:26:
         0f:04:fb:5e:06:2c:05:9b:5f:a8:54:a0:2c:7f:43:43:e4:99:
         cf:40:b0:13:91:9a:83:a3:24:b4:c5:ff:d1:10:0a:69:ae:be:
         89:f9:6f:4d:76:9d:94:d5:eb:1a:56:51:18:51:b5:99:73:58:
         b3:99:b1:0c:84:7e:eb:8b:8f:de:9a:f2:3d:65:51:9c:35:f5:
         10:31:c8:83:0c:6b:4b:3d:62:46:2f:09:9e:5f:04:56:ef:31:
         74:ec:42:eb:ce:09:89:23:08:43:3d:f7:21:7d:f0:57:49:45:
         c5:c9:1b:1e:5d:19:c6:e0:bf:8d:02:cf:d9:ec:5c:d9:c0:a8:
         75:a3:b9:6c:e3:dd:a5:f4:d6:3f:47:0c:cb:cb:d7:9c:aa:07:
         9b:46:45:78:fc:fd:0d:ab:78:c5:b3:55:54:5f:51:e9:0a:58:
         d1:cb:3c:12:a0:06:af:fb:de:79:f1:91:41:32:c1:2f:ef:17:
         59:25:fa:96:42:d2:fa:18:a0:fe:7f:c0:9a:b7:6c:a9:4e:6b:
         18:2f:d7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----