Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/37d6d5f9-3a72-3d7e-82ce-af2b3e022234.roa
File:                     37d6d5f9-3a72-3d7e-82ce-af2b3e022234.roa (raw, json)
Hash identifier:          g8gy9G7GRmiNrexKQY2XvmxMMplLgGp/svfDZsXpGuE=
Subject key identifier:   41:8B:68:77:71:8D:18:DA:FE:44:E3:FC:CC:18:38:6A:5F:8A:D9:ED
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840D1922FDB7E3A7F4827C2F700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/37d6d5f9-3a72-3d7e-82ce-af2b3e022234.roa
Signing time:             Sun 05 Feb 2023 12:00:00 +0000
ROA not before:           Sun 05 Feb 2023 12:00:00 +0000
ROA not after:            Mon 13 Mar 2023 04:00:00 +0000
asID:                     8987
IP address blocks:        63.134.0.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:d1:92:2f:db:7e:3a:7f:48:27:c2:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  5 12:00:00 2023 GMT
            Not After : Mar 13 04:00:00 2023 GMT
        Subject: CN=a4ccafb7-21e6-4be4-a484-15cce07735e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8b:2d:59:6e:ba:c1:f5:49:27:57:99:ec:cf:
                    ed:f0:b2:74:71:83:ff:69:84:e2:53:b7:3e:40:91:
                    62:44:93:84:34:82:a2:0c:c9:7a:03:5d:45:5d:af:
                    97:9d:03:72:78:88:c0:5e:7b:41:5f:a5:9c:26:49:
                    85:db:ab:e4:a3:fb:8b:3d:5f:70:be:64:44:99:89:
                    d7:43:c5:f0:7c:94:35:67:18:ee:99:7c:e5:7b:56:
                    14:e6:72:2a:8f:3c:6c:36:24:e9:ce:7c:f2:20:b3:
                    fb:78:ee:ed:de:62:d9:73:ad:0d:36:2f:45:19:92:
                    4e:f2:9a:b3:a6:00:67:6f:45:bd:a3:a2:22:65:0d:
                    77:58:bb:34:ea:e0:4c:c0:cf:71:48:82:3f:24:49:
                    4a:35:7b:c7:76:ff:8b:a2:6e:57:9d:a7:b7:35:1e:
                    7a:c3:c2:2d:db:0a:88:9d:97:52:99:47:14:d9:e4:
                    e4:ae:52:3c:2a:87:d8:48:f7:b0:32:c6:b3:d8:1d:
                    c0:73:80:70:08:a8:f2:98:2e:86:21:c9:16:52:65:
                    f7:24:73:f5:6f:b8:25:46:1e:29:91:39:cf:a7:37:
                    f9:19:55:11:de:95:5d:4b:12:45:b6:d4:67:ef:30:
                    65:c9:4c:35:43:07:15:44:41:c5:98:21:6c:1c:0f:
                    c7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:8B:68:77:71:8D:18:DA:FE:44:E3:FC:CC:18:38:6A:5F:8A:D9:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/37d6d5f9-3a72-3d7e-82ce-af2b3e022234.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.134.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:88:80:a5:61:c0:3f:22:49:82:59:d4:4c:8c:45:b6:76:44:
         6b:d2:51:85:fa:b2:e4:b3:76:a0:6a:06:43:d8:c5:f4:03:95:
         26:da:09:80:7b:eb:e1:7d:89:ba:8f:3b:c8:39:a3:ae:44:ae:
         72:5f:f4:55:42:89:b5:53:29:3e:00:77:17:56:e3:d3:ac:c5:
         34:d4:b7:d4:49:f0:da:d0:9c:9e:96:dd:22:9d:cc:64:b2:f3:
         e6:5a:d1:2e:f3:84:8f:50:4d:1a:8d:be:32:11:7c:c0:09:bb:
         44:56:95:23:db:bf:0e:07:f1:17:63:19:da:09:03:b3:a8:cb:
         0e:6b:26:47:b5:2d:e5:46:cc:1b:12:60:2e:93:cd:05:80:88:
         36:bb:9d:1f:b1:26:9e:c2:31:2b:9f:6e:bb:8c:70:f1:e1:11:
         26:b2:d4:50:8e:c9:8b:59:a9:ae:c8:69:33:2b:fe:e6:eb:11:
         33:1b:98:9f:b8:84:91:2d:1e:03:72:f0:f6:d3:87:14:fd:c9:
         17:1d:62:d5:33:50:64:db:51:a1:61:8f:30:54:71:15:12:ef:
         dd:21:bc:f9:40:9e:a7:f7:14:7d:f3:45:89:ac:22:42:f2:1f:
         53:1a:4d:11:0d:f9:06:98:16:ba:3c:97:e1:e8:23:0f:dd:30:
         fa:51:e0:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEDRki/bfjp/SCfC9wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDIwNTEyMDAwMFoXDTIzMDMxMzA0MDAwMFowLzEtMCsGA1UEAxMk
YTRjY2FmYjctMjFlNi00YmU0LWE0ODQtMTVjY2UwNzczNWU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4stWW66wfVJJ1eZ7M/t8LJ0cYP/aYTiU7c+
QJFiRJOENIKiDMl6A11FXa+XnQNyeIjAXntBX6WcJkmF26vko/uLPV9wvmREmYnX
Q8XwfJQ1ZxjumXzle1YU5nIqjzxsNiTpznzyILP7eO7t3mLZc60NNi9FGZJO8pqz
pgBnb0W9o6IiZQ13WLs06uBMwM9xSII/JElKNXvHdv+Lom5Xnae3NR56w8It2wqI
nZdSmUcU2eTkrlI8KofYSPewMsaz2B3Ac4BwCKjymC6GIckWUmX3JHP1b7glRh4p
kTnPpzf5GVUR3pVdSxJFttRn7zBlyUw1QwcVREHFmCFsHA/HeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEGLaHdxjRja/kTj/MwYOGpfitntMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMzdkNmQ1ZjktM2E3Mi0z
ZDdlLTgyY2UtYWYyYjNlMDIyMjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHP4YAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAqIgKVhwD8iSYJZ1EyMRbZ2RGvSUYX6suSzdqBqBkPYxfQDlSbaCYB7
6+F9ibqPO8g5o65ErnJf9FVCibVTKT4AdxdW49OsxTTUt9RJ8NrQnJ6W3SKdzGSy
8+Za0S7zhI9QTRqNvjIRfMAJu0RWlSPbvw4H8RdjGdoJA7Ooyw5rJke1LeVGzBsS
YC6TzQWAiDa7nR+xJp7CMSufbruMcPHhESay1FCOyYtZqa7IaTMr/ubrETMbmJ+4
hJEtHgNy8PbThxT9yRcdYtUzUGTbUaFhjzBUcRUS790hvPlAnqf3FH3zRYmsIkLy
H1MaTREN+QaYFro8l+HoIw/dMPpR4Co=
-----END CERTIFICATE-----