Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2ffb5470-d612-30c0-90bb-13c27047392e.roa
File:                     2ffb5470-d612-30c0-90bb-13c27047392e.roa (raw, json)
Hash identifier:          H5dXB+Z6yNh2qQApxzDATm+u6dyAPyFdEVHi9J6nivQ=
Subject key identifier:   26:AF:80:16:AB:3F:47:60:7C:DC:DD:F1:98:83:51:99:3F:36:83:FF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584086390A693659D0FC2CEEE500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2ffb5470-d612-30c0-90bb-13c27047392e.roa
Signing time:             Mon 09 Jan 2023 12:00:00 +0000
ROA not before:           Mon 09 Jan 2023 12:00:00 +0000
ROA not after:            Tue 14 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        54.25.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:86:39:0a:69:36:59:d0:fc:2c:ee:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  9 12:00:00 2023 GMT
            Not After : Feb 14 05:00:00 2023 GMT
        Subject: CN=89802882-afac-4f24-b757-1f8c999c37de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0b:01:0f:d5:73:b1:02:0b:a8:a6:ba:67:79:
                    e9:e8:53:21:25:95:0b:d1:90:5e:48:9c:a1:31:66:
                    7f:87:cf:5f:fe:30:90:9a:e1:f0:79:b4:cd:b3:0e:
                    cc:82:a8:02:b7:4c:5a:1e:49:d6:2c:8e:29:51:39:
                    74:ef:c6:a2:2a:b4:86:11:7f:75:e9:db:75:68:06:
                    90:3e:1f:50:6f:87:6e:ac:b3:ff:2b:b2:24:35:47:
                    c7:6b:10:6e:4c:e5:24:6b:fd:0a:5a:d6:c2:64:7c:
                    42:29:5a:25:cd:02:94:b5:75:40:d2:37:b1:39:85:
                    e1:b3:dc:64:1f:7f:1c:37:a7:45:f7:ec:dd:35:cd:
                    69:56:c7:fb:72:e9:35:60:9d:42:86:db:21:75:61:
                    5d:2c:be:1d:5c:b6:b2:77:a1:54:de:35:70:7e:e0:
                    e6:8d:45:89:a2:51:bb:dc:76:53:47:fb:30:fc:9a:
                    56:e7:1a:6a:7b:fa:9e:d3:6c:b1:0d:da:f8:49:81:
                    49:49:df:b7:50:29:09:01:0c:15:26:e1:af:9c:db:
                    fe:75:25:96:90:dc:c9:4c:b3:c6:31:8d:1e:27:8f:
                    66:08:f7:80:52:f5:53:0e:0c:80:1c:54:3d:60:47:
                    b9:61:ab:c9:c2:02:bf:d8:df:1f:c8:2f:b1:d2:d9:
                    0b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:AF:80:16:AB:3F:47:60:7C:DC:DD:F1:98:83:51:99:3F:36:83:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2ffb5470-d612-30c0-90bb-13c27047392e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.25.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:d7:97:75:16:03:d5:ad:70:bf:95:f8:d5:2d:e1:b9:d8:14:
         f4:09:c1:3c:a5:e1:46:19:e8:8b:8b:5a:8d:28:90:d6:da:0a:
         25:37:c5:57:03:a0:68:9f:52:01:43:f7:59:f0:b9:ef:a8:d2:
         81:b9:75:c5:be:c0:fc:a1:b7:af:fd:b5:23:a0:01:1a:0b:c1:
         82:3d:c8:28:5f:d0:ae:dd:fe:cd:f1:29:20:00:fa:c7:01:76:
         3d:c6:bc:fd:38:33:f2:af:d4:49:6b:0b:57:32:9c:5e:f7:84:
         e5:97:68:49:d4:ac:f0:6a:69:1b:e9:b8:c2:af:71:82:85:f9:
         3a:71:35:3a:fc:e8:d2:5e:75:cf:af:ee:fc:a0:45:c5:6b:96:
         05:22:cc:e1:1e:e9:d2:d7:3c:f1:95:9e:23:78:10:29:34:e2:
         bc:0e:ee:d8:0b:94:b7:c5:a3:95:61:56:d2:df:08:99:7e:b8:
         d4:4c:97:69:5c:bd:db:b2:ba:ee:36:e1:cb:5f:14:a5:f0:6a:
         03:e3:7b:ac:e6:ea:04:9d:81:fb:c1:23:18:6f:86:fa:22:57:
         60:8b:b0:c8:cb:29:be:07:f8:9f:48:c2:55:63:a8:e1:60:39:
         bc:4b:8e:70:d5:87:08:03:7a:c9:e3:cc:e8:d2:db:e8:d3:df:
         8b:b1:54:e9
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECGOQppNlnQ/Czu5QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEwOTEyMDAwMFoXDTIzMDIxNDA1MDAwMFowLzEtMCsGA1UEAxMk
ODk4MDI4ODItYWZhYy00ZjI0LWI3NTctMWY4Yzk5OWMzN2RlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAsBD9VzsQILqKa6Z3np6FMhJZUL0ZBeSJyh
MWZ/h89f/jCQmuHwebTNsw7MgqgCt0xaHknWLI4pUTl078aiKrSGEX916dt1aAaQ
Ph9Qb4durLP/K7IkNUfHaxBuTOUka/0KWtbCZHxCKVolzQKUtXVA0jexOYXhs9xk
H38cN6dF9+zdNc1pVsf7cuk1YJ1ChtshdWFdLL4dXLayd6FU3jVwfuDmjUWJolG7
3HZTR/sw/JpW5xpqe/qe02yxDdr4SYFJSd+3UCkJAQwVJuGvnNv+dSWWkNzJTLPG
MY0eJ49mCPeAUvVTDgyAHFQ9YEe5YavJwgK/2N8fyC+x0tkLDwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCavgBarP0dgfNzd8ZiDUZk/NoP/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMmZmYjU0NzAtZDYxMi0z
MGMwLTkwYmItMTNjMjcwNDczOTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMANhkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAfteXdRYD1a1wv5X41S3hudgU9AnBPKXhRhnoi4tajSiQ1toKJTfFVwOg
aJ9SAUP3WfC576jSgbl1xb7A/KG3r/21I6ABGgvBgj3IKF/Qrt3+zfEpIAD6xwF2
Pca8/Tgz8q/USWsLVzKcXveE5ZdoSdSs8GppG+m4wq9xgoX5OnE1Ovzo0l51z6/u
/KBFxWuWBSLM4R7p0tc88ZWeI3gQKTTivA7u2AuUt8WjlWFW0t8ImX641EyXaVy9
27K67jbhy18UpfBqA+N7rObqBJ2B+8EjGG+G+iJXYIuwyMspvgf4n0jCVWOo4WA5
vEuOcNWHCAN6yePM6NLb6NPfi7FU6Q==
-----END CERTIFICATE-----