Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/41414baa-8e59-376c-91a0-4739788a94e9.roa
File:                     41414baa-8e59-376c-91a0-4739788a94e9.roa (raw, json)
Hash identifier:          6/mQm/bQuMsJCRKX/1d/iziWQ42vG+cozKppHsd/N50=
Subject key identifier:   D1:D2:3C:0C:09:52:06:6E:7A:D6:0D:4C:6A:74:BA:2C:75:45:1C:B4
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840D45CF3F841E99227EDDA96C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/41414baa-8e59-376c-91a0-4739788a94e9.roa
Signing time:             Mon 06 Feb 2023 12:00:00 +0000
ROA not before:           Mon 06 Feb 2023 12:00:00 +0000
ROA not after:            Tue 14 Mar 2023 04:00:00 +0000
asID:                     14618
IP address blocks:        130.186.32.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:d4:5c:f3:f8:41:e9:92:27:ed:da:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  6 12:00:00 2023 GMT
            Not After : Mar 14 04:00:00 2023 GMT
        Subject: CN=5d7a2e10-9fb6-4e06-8e36-860856f8d813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8e:f8:d8:13:c0:92:38:f0:a7:e6:29:fa:c5:
                    61:fe:09:ec:8d:2a:b1:cf:5a:3e:72:2a:6a:04:74:
                    1e:d2:81:86:48:b7:09:c4:d3:8c:9b:cf:2d:5b:17:
                    85:b1:66:29:f4:00:5c:6a:71:04:6f:84:ba:2c:8b:
                    2a:68:e6:a2:e6:ed:e3:8d:27:18:6c:53:86:c1:a5:
                    e0:ac:67:2c:1d:43:81:aa:e2:ff:a9:07:f1:7d:fe:
                    65:86:e5:cc:c5:71:67:39:24:35:2d:4e:4f:e5:b6:
                    e5:26:15:14:e1:fe:41:3a:7e:9e:ca:1f:28:26:b0:
                    76:0f:b5:a4:ff:3c:a4:6c:67:d1:29:39:2c:1d:f3:
                    9a:4d:85:f7:99:11:f7:eb:41:c4:d1:38:31:1e:91:
                    0c:d7:18:35:dd:e1:f9:cf:9e:e6:50:f1:bb:fa:fe:
                    d3:a8:82:df:49:0d:17:d0:53:a1:0c:cf:0a:d9:74:
                    71:92:5a:18:b7:db:33:6b:50:46:e4:3a:10:40:cf:
                    06:0a:d1:eb:d1:75:e3:44:62:22:eb:de:cc:a6:f8:
                    77:8e:e2:d1:e8:9f:48:e6:37:d4:51:be:ae:e7:de:
                    ad:2d:bf:81:92:2a:95:b4:e1:25:5d:d7:4f:40:c3:
                    33:60:f3:40:84:29:4c:4e:c4:23:06:93:d5:82:de:
                    51:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D2:3C:0C:09:52:06:6E:7A:D6:0D:4C:6A:74:BA:2C:75:45:1C:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/41414baa-8e59-376c-91a0-4739788a94e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.186.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:47:39:78:42:81:79:be:7a:95:fd:56:fc:fd:07:10:c0:e0:
         49:8d:af:68:b5:ae:33:44:8b:e7:96:95:df:6d:e4:20:3e:17:
         79:ac:c8:a2:9c:1a:d3:d0:6b:60:de:21:9d:ca:c4:a7:e1:76:
         12:5e:14:85:03:63:38:bb:19:ef:82:01:32:7c:3a:c6:64:e6:
         13:cd:c4:b4:c0:9f:dc:5c:48:be:ec:73:91:e9:fc:5c:61:7c:
         72:62:a9:90:a8:90:94:5b:3f:4c:1e:36:11:13:c2:23:f9:86:
         33:00:da:e9:6c:52:b7:9e:db:a2:c4:7b:d6:b3:74:64:a6:65:
         71:19:7b:e1:38:3a:4b:82:97:5e:e6:d9:46:ea:3c:77:77:b3:
         c2:fd:af:79:17:bd:90:ba:19:7b:7d:ca:0f:61:ae:6c:d7:a5:
         f9:47:bd:b7:29:53:46:c8:d7:1d:6f:18:28:08:31:a2:f5:ea:
         62:28:56:c4:d5:e4:e7:b4:a2:35:6d:fa:80:cf:c6:f8:a1:8c:
         27:21:07:dc:9a:9c:73:76:bd:75:78:e4:7b:bc:a0:94:47:74:
         69:66:de:93:99:9c:30:0a:b9:60:f4:49:1e:01:18:5c:dd:42:
         7f:96:36:b7:34:99:bf:85:c1:06:57:0c:b7:fb:fb:18:45:ed:
         b5:87:01:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----