Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/50c4415d-9228-3a30-a66a-ab34e14692c8.roa
File:                     50c4415d-9228-3a30-a66a-ab34e14692c8.roa (raw, json)
Hash identifier:          UtaykXLYNGbX3XnAQR0hBaPggzl1j9oSOHSxLdLXj6E=
Subject key identifier:   D2:FB:88:2E:84:54:2F:BE:FA:6C:55:B5:E4:B3:21:5E:3E:DB:26:24
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840930C29364946405EDB3D8280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/50c4415d-9228-3a30-a66a-ab34e14692c8.roa
Signing time:             Fri 13 Jan 2023 12:00:00 +0000
ROA not before:           Fri 13 Jan 2023 12:00:00 +0000
ROA not after:            Sat 18 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        71.141.0.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:93:0c:29:36:49:46:40:5e:db:3d:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 13 12:00:00 2023 GMT
            Not After : Feb 18 05:00:00 2023 GMT
        Subject: CN=b3ec70d8-a6b9-468b-8c1c-eede78466376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1d:50:b8:3b:fd:ae:de:36:c8:e7:a8:e1:19:
                    76:8f:90:67:7a:30:34:47:44:5f:2f:77:fa:9f:a4:
                    cf:25:b8:b0:9e:0f:8c:e2:a3:f4:cc:3a:be:2e:b5:
                    84:d1:6b:22:23:cb:83:b9:ef:f7:05:76:bc:2e:2a:
                    ff:2c:b5:d8:d0:55:75:55:c5:24:7a:ea:3f:cd:22:
                    15:3c:82:f4:61:50:40:b2:33:5b:e8:2f:5d:a4:f2:
                    89:cd:95:15:10:04:58:f4:71:87:9d:d0:ce:9b:86:
                    0c:af:d4:ad:52:16:3a:9d:8a:cb:f5:ef:92:89:1b:
                    9b:da:70:68:76:c6:9d:33:17:f4:c9:61:b9:48:7b:
                    6d:dd:80:6c:3d:4c:83:d2:6f:8f:29:8c:7b:34:e9:
                    85:7c:bd:aa:70:21:6d:84:37:b2:3a:e6:d6:e2:2f:
                    2e:a8:cb:77:ae:27:56:e4:a4:f6:00:8e:8e:4c:b6:
                    f3:d3:c8:d0:dc:54:d4:56:3a:fc:d4:61:22:f3:25:
                    27:05:7b:58:fa:90:5b:cd:26:ab:44:75:36:d7:6a:
                    d5:ec:79:78:c8:07:7f:34:7e:29:ca:f3:25:36:db:
                    c3:f7:5e:ec:ce:18:fc:d7:24:6c:3e:56:8e:1b:5b:
                    d8:51:5f:53:cb:12:03:f8:33:0f:45:35:f3:be:a5:
                    3d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:FB:88:2E:84:54:2F:BE:FA:6C:55:B5:E4:B3:21:5E:3E:DB:26:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/50c4415d-9228-3a30-a66a-ab34e14692c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.141.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:d7:e9:5c:2b:61:78:e6:cc:a5:23:2c:9d:14:f0:8f:c4:7d:
         15:cd:9d:f0:a7:55:a9:17:44:a9:c7:c6:8c:0b:70:dc:f6:d4:
         15:fd:d6:e4:23:e1:e1:cc:bf:80:d0:03:d2:62:61:db:ab:4b:
         5e:9f:2e:b8:cc:d3:b1:68:1f:27:56:d2:2c:05:3e:8b:1a:e5:
         4c:2c:d4:d8:07:aa:42:fd:30:43:fb:d5:e9:bd:ac:77:f7:09:
         fa:28:04:8e:c1:49:08:40:57:94:1a:7b:6f:4b:d9:9c:44:0b:
         17:89:e0:1b:41:32:10:9a:f2:6e:6c:f1:b0:e8:76:b8:ff:46:
         79:8f:2f:00:ba:ec:6f:ea:8b:5d:c4:31:c5:4e:ba:7b:f3:92:
         c2:eb:9f:14:b7:5a:6c:da:34:45:de:e3:c4:8c:57:38:1f:a1:
         07:c3:ee:d2:72:51:be:24:76:ac:15:ab:6a:2c:2f:8b:7a:d1:
         de:cf:e5:78:b9:71:36:e4:fe:b5:19:7a:35:73:92:3d:79:1b:
         7c:32:6a:ca:4f:7d:18:1f:8c:e9:e4:c8:a2:b7:10:7e:7b:b9:
         88:cf:ec:e4:09:83:18:ce:6c:ce:37:54:21:2b:82:79:05:31:
         32:fe:1d:08:8c:a1:3d:8a:9b:00:38:fc:b0:80:e0:03:69:27:
         3d:6c:fe:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----