Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/32fe555b-eba4-31ee-90fe-936e78fb9300.roa
File:                     32fe555b-eba4-31ee-90fe-936e78fb9300.roa (raw, json)
Hash identifier:          tkYWILMroNB9fqesqGx0MS3DvVO196G82IVxgUW6638=
Subject key identifier:   72:84:FB:CC:B0:03:58:C1:FD:28:62:76:A2:0A:9A:9A:0D:1E:FE:69
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584092007F9AEBAAD6C2953A73C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/32fe555b-eba4-31ee-90fe-936e78fb9300.roa
Signing time:             Fri 13 Jan 2023 12:00:00 +0000
ROA not before:           Fri 13 Jan 2023 12:00:00 +0000
ROA not after:            Sat 18 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        165.129.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:92:00:7f:9a:eb:aa:d6:c2:95:3a:73:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 13 12:00:00 2023 GMT
            Not After : Feb 18 05:00:00 2023 GMT
        Subject: CN=ac95552a-bc52-4767-9706-4b5bb91f4adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:91:16:b4:14:2b:1a:fb:de:f4:15:61:c9:39:
                    b5:30:24:c9:64:3a:04:77:5f:10:c6:18:77:9f:8f:
                    96:18:55:5d:99:d8:66:6d:09:76:aa:99:e3:73:87:
                    72:bb:8d:32:39:e6:92:2e:7c:df:42:ad:c5:2b:12:
                    38:1a:ae:c4:55:4f:25:0c:4d:ff:9c:d6:0d:25:2c:
                    2d:09:cd:fd:c3:9a:99:c8:24:b8:54:06:5a:f9:9e:
                    55:67:81:0c:3e:3d:42:8e:2c:e2:23:bb:bb:5f:dc:
                    cc:09:3e:b2:82:44:13:0d:de:df:60:eb:be:ad:47:
                    18:d8:f6:9e:b5:9d:5b:51:0c:80:de:a1:7b:3d:be:
                    99:af:80:42:ff:e2:73:ef:c2:97:c2:6a:b8:3f:76:
                    b7:78:c7:0f:b6:84:61:b8:1e:20:c9:fd:dd:a8:a0:
                    dd:e1:cf:75:26:51:79:11:7a:2e:00:e8:17:03:da:
                    20:aa:8f:37:a6:82:f7:e3:b7:77:1d:1f:58:be:de:
                    9a:1b:2c:83:09:8b:be:f1:30:2a:a8:93:a9:2c:3f:
                    5f:73:36:88:3e:87:a4:ec:1f:b6:15:48:32:20:6f:
                    c1:68:1b:86:cc:bd:56:1c:1d:f2:1c:b9:40:2d:12:
                    a1:41:75:81:a2:4c:52:b3:91:27:9e:59:b7:1e:35:
                    da:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:84:FB:CC:B0:03:58:C1:FD:28:62:76:A2:0A:9A:9A:0D:1E:FE:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/32fe555b-eba4-31ee-90fe-936e78fb9300.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.129.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:f6:1b:62:c1:b9:a0:c6:6e:7c:ef:b0:ec:5c:20:db:c7:74:
         89:f3:73:bc:f7:49:54:c1:5b:ea:11:0f:af:be:37:a5:6d:c8:
         0e:75:b4:8a:25:f6:bf:70:4a:ed:5a:fc:53:4a:d2:8f:89:87:
         fa:56:81:68:08:d4:6e:39:56:4f:d8:eb:5d:57:24:aa:93:e3:
         d6:58:dd:43:15:6b:ba:2b:8a:17:53:0e:1f:52:6b:de:9b:c5:
         dd:f4:0f:a4:81:ed:18:42:d6:58:02:42:93:a8:fe:ee:64:77:
         01:64:e3:38:b6:00:99:80:65:53:59:16:5c:e2:d5:17:9a:94:
         8a:d5:6a:95:e2:bf:71:06:e0:bb:2e:a9:1f:bf:73:11:e1:62:
         5a:f4:e7:4e:9e:36:73:8f:88:08:03:2a:93:90:89:8e:cc:52:
         8a:a9:76:07:f2:ea:36:82:b8:52:39:75:f5:73:a7:53:28:6f:
         7c:c0:c9:71:b8:ad:03:e5:9f:e3:50:f2:73:e5:13:c0:04:c3:
         74:23:0b:56:8d:4a:84:1a:65:a8:08:8f:6c:65:32:60:3f:1c:
         d4:2d:f6:31:21:12:05:bc:ef:7b:c5:1f:81:b0:6b:cd:e8:06:
         d5:7b:04:b3:3d:4c:63:db:30:e5:65:4b:ed:4e:a9:b9:f2:53:
         de:32:bb:41
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECSAH+a66rWwpU6c8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDExMzEyMDAwMFoXDTIzMDIxODA1MDAwMFowLzEtMCsGA1UEAxMk
YWM5NTU1MmEtYmM1Mi00NzY3LTk3MDYtNGI1YmI5MWY0YWRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpEWtBQrGvve9BVhyTm1MCTJZDoEd18Qxhh3
n4+WGFVdmdhmbQl2qpnjc4dyu40yOeaSLnzfQq3FKxI4Gq7EVU8lDE3/nNYNJSwt
Cc39w5qZyCS4VAZa+Z5VZ4EMPj1CjiziI7u7X9zMCT6ygkQTDd7fYOu+rUcY2Pae
tZ1bUQyA3qF7Pb6Zr4BC/+Jz78KXwmq4P3a3eMcPtoRhuB4gyf3dqKDd4c91JlF5
EXouAOgXA9ogqo83poL347d3HR9Yvt6aGyyDCYu+8TAqqJOpLD9fczaIPoek7B+2
FUgyIG/BaBuGzL1WHB3yHLlALRKhQXWBokxSs5Ennlm3HjXadQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHKE+8ywA1jB/ShidqIKmpoNHv5pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMzJmZTU1NWItZWJhNC0z
MWVlLTkwZmUtOTM2ZTc4ZmI5MzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApYEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAYfYbYsG5oMZufO+w7Fwg28d0ifNzvPdJVMFb6hEPr743pW3IDnW0iiX2
v3BK7Vr8U0rSj4mH+laBaAjUbjlWT9jrXVckqpPj1ljdQxVruiuKF1MOH1Jr3pvF
3fQPpIHtGELWWAJCk6j+7mR3AWTjOLYAmYBlU1kWXOLVF5qUitVqleK/cQbguy6p
H79zEeFiWvTnTp42c4+ICAMqk5CJjsxSiql2B/LqNoK4Ujl19XOnUyhvfMDJcbit
A+Wf41Dyc+UTwATDdCMLVo1KhBplqAiPbGUyYD8c1C32MSESBbzve8UfgbBrzegG
1XsEsz1MY9sw5WVL7U6pufJT3jK7QQ==
-----END CERTIFICATE-----