Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5761561c-88f2-34e5-9aa9-30af4c8915b7.roa
File:                     5761561c-88f2-34e5-9aa9-30af4c8915b7.roa (raw, json)
Hash identifier:          477CSp5o7sTVtTJh/P4dmqpcFv/OIAOGEraPhTNRMQo=
Subject key identifier:   EB:AC:07:71:D3:D3:4D:B0:0B:40:67:64:EA:66:03:FF:85:63:B6:9A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840B9E62F2D50FB47DAFBAC7E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5761561c-88f2-34e5-9aa9-30af4c8915b7.roa
Signing time:             Fri 27 Jan 2023 12:00:00 +0000
ROA not before:           Fri 27 Jan 2023 12:00:00 +0000
ROA not after:            Sat 04 Mar 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        172.103.40.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b9:e6:2f:2d:50:fb:47:da:fb:ac:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 27 12:00:00 2023 GMT
            Not After : Mar  4 05:00:00 2023 GMT
        Subject: CN=e72ca97f-b376-44f9-8bfb-4776bb42f881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:38:b0:ca:f3:89:1a:ef:6c:6b:dc:d7:f9:a1:
                    d6:5e:36:31:73:41:7d:1b:93:51:56:85:65:80:25:
                    6e:8c:d8:97:94:39:55:57:03:26:d4:b5:d5:fb:45:
                    3a:d5:b7:62:e7:2c:fe:46:a7:8e:6d:c3:ec:54:02:
                    7f:dc:f0:0a:ce:13:c0:1e:47:6d:f1:02:21:da:b5:
                    1f:36:31:35:ef:2e:97:aa:d0:2a:9d:77:a1:1d:c4:
                    f2:ab:ee:9e:06:35:ba:a8:e7:4a:9c:78:89:58:c5:
                    2d:91:a7:f6:ab:b1:e4:b5:ef:b9:68:ab:d8:e1:6c:
                    7f:b8:bf:5d:9f:21:8e:af:20:85:14:8e:ed:89:a1:
                    c4:d3:d4:ea:1f:a0:01:12:18:d5:5c:ac:c1:1f:11:
                    40:39:fd:af:d4:f5:3c:db:d5:1c:2b:ca:b3:eb:8a:
                    66:6e:90:6a:86:22:74:1a:52:12:b3:11:f0:32:b0:
                    59:ff:65:fa:4d:ba:bb:4f:0c:8f:bc:8f:7c:6b:89:
                    66:69:3c:91:4e:8f:98:73:8d:f2:cc:9b:bf:22:14:
                    20:eb:8f:0e:29:e3:c2:08:4c:0b:dd:d4:fc:a6:0f:
                    3a:bb:89:6d:c8:d3:fe:df:23:99:99:39:06:05:7d:
                    d2:ae:3a:0b:a8:01:fe:20:dd:cd:8f:ec:de:f1:53:
                    fe:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AC:07:71:D3:D3:4D:B0:0B:40:67:64:EA:66:03:FF:85:63:B6:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5761561c-88f2-34e5-9aa9-30af4c8915b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.103.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:1b:ec:f4:71:c4:35:1a:01:28:87:d2:7e:cd:9a:65:5d:9e:
         34:87:49:cb:43:f4:0a:8f:40:ce:bf:07:a1:a0:c8:e8:bf:4d:
         23:9a:d9:19:d0:90:09:6b:f1:ac:13:05:00:ae:3b:82:be:e4:
         d9:10:41:68:05:18:c8:21:1a:fc:52:d1:8b:7c:bd:6f:32:3e:
         80:4c:82:7e:34:2d:52:35:e9:b4:2c:45:1d:20:72:a9:70:a0:
         27:40:6b:5a:41:cb:a3:a5:8e:7f:eb:75:d7:47:20:8b:20:59:
         bd:5e:9b:a1:10:cb:f7:bb:14:86:7d:fb:04:be:5f:0c:f9:76:
         10:23:72:e1:44:bb:0d:f0:ba:13:99:64:f5:2f:49:63:a8:ba:
         ef:d5:5a:ba:c3:d4:88:b8:e2:59:64:10:0a:de:bc:78:34:32:
         8a:86:1c:2f:59:36:b5:0f:28:3c:60:b8:47:34:e5:4b:63:24:
         f7:59:26:4b:ca:36:05:c5:c5:13:98:77:de:1a:a4:31:3a:b4:
         63:78:78:53:d9:da:e1:ff:4f:5c:19:91:66:e2:95:6e:bf:18:
         8b:f5:52:b2:08:c1:a8:87:25:6c:1f:21:2a:3c:8f:51:e3:af:
         2f:a3:af:48:4e:74:18:48:41:82:11:e6:bf:58:eb:b7:eb:c0:
         fc:90:d4:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEC55i8tUPtH2vusfgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEyNzEyMDAwMFoXDTIzMDMwNDA1MDAwMFowLzEtMCsGA1UEAxMk
ZTcyY2E5N2YtYjM3Ni00NGY5LThiZmItNDc3NmJiNDJmODgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsziwyvOJGu9sa9zX+aHWXjYxc0F9G5NRVoVl
gCVujNiXlDlVVwMm1LXV+0U61bdi5yz+RqeObcPsVAJ/3PAKzhPAHkdt8QIh2rUf
NjE17y6XqtAqnXehHcTyq+6eBjW6qOdKnHiJWMUtkaf2q7Hkte+5aKvY4Wx/uL9d
nyGOryCFFI7tiaHE09TqH6ABEhjVXKzBHxFAOf2v1PU829UcK8qz64pmbpBqhiJ0
GlISsxHwMrBZ/2X6Tbq7TwyPvI98a4lmaTyRTo+Yc43yzJu/IhQg648OKePCCEwL
3dT8pg86u4ltyNP+3yOZmTkGBX3SrjoLqAH+IN3Nj+ze8VP+JwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOusB3HT002wC0BnZOpmA/+FY7aaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNTc2MTU2MWMtODhmMi0z
NGU1LTlhYTktMzBhZjRjODkxNWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrGcoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB8b7PRxxDUaASiH0n7NmmVdnjSHSctD9AqPQM6/B6GgyOi/TSOa2RnQ
kAlr8awTBQCuO4K+5NkQQWgFGMghGvxS0Yt8vW8yPoBMgn40LVI16bQsRR0gcqlw
oCdAa1pBy6Oljn/rdddHIIsgWb1em6EQy/e7FIZ9+wS+Xwz5dhAjcuFEuw3wuhOZ
ZPUvSWOouu/VWrrD1Ii44llkEArevHg0MoqGHC9ZNrUPKDxguEc05UtjJPdZJkvK
NgXFxROYd94apDE6tGN4eFPZ2uH/T1wZkWbilW6/GIv1UrIIwaiHJWwfISo8j1Hj
ry+jr0hOdBhIQYIR5r9Y67frwPyQ1DI=
-----END CERTIFICATE-----