Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6da68c7c-4262-3ea3-95b6-9a60109dec36.roa
File:                     6da68c7c-4262-3ea3-95b6-9a60109dec36.roa (raw, json)
Hash identifier:          3IqIp6FXrTJPnfiyjv4wjxP4ofBHkLtBjCoRMnYlFs0=
Subject key identifier:   AF:82:90:00:CB:B2:07:BC:1B:A6:E4:68:CD:6E:70:74:B8:2A:3A:B6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840D46BA17349A592115039D280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6da68c7c-4262-3ea3-95b6-9a60109dec36.roa
Signing time:             Mon 06 Feb 2023 12:00:00 +0000
ROA not before:           Mon 06 Feb 2023 12:00:00 +0000
ROA not after:            Tue 14 Mar 2023 04:00:00 +0000
asID:                     14618
IP address blocks:        182.29.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:d4:6b:a1:73:49:a5:92:11:50:39:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  6 12:00:00 2023 GMT
            Not After : Mar 14 04:00:00 2023 GMT
        Subject: CN=31c347c7-306f-45b8-9c9e-f63048702966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2d:f5:c0:8e:d6:7e:4c:cd:3b:20:cd:5f:ef:
                    a6:b9:6f:7f:bd:d9:31:0b:24:b3:97:0b:ff:7b:17:
                    12:65:43:25:41:a0:4b:5c:90:cf:29:16:c6:b9:54:
                    48:32:40:09:21:7b:8d:03:e2:60:77:4d:50:99:a5:
                    35:2c:31:25:67:ca:52:3d:f5:48:51:b6:dd:92:5a:
                    ca:18:0f:86:51:0b:30:73:d3:e0:a6:bc:3f:b1:7b:
                    4c:6f:fc:88:ca:72:eb:96:52:73:3b:6d:5a:83:ec:
                    6f:36:c0:de:94:b4:c4:53:f5:6e:e1:e6:30:7a:6f:
                    b3:76:67:fc:93:60:df:5d:5a:aa:f0:a8:5c:c2:9e:
                    54:d1:1c:cc:f5:3d:f4:56:d0:90:1d:69:c3:92:25:
                    bf:dd:1d:d4:34:d3:2b:28:7e:57:8f:b3:2d:54:3d:
                    b5:10:c9:ef:68:23:ee:8d:ff:bf:24:89:05:c2:9c:
                    f5:37:ee:62:1e:09:8d:23:ae:6f:0e:74:43:10:0c:
                    3e:4f:f0:0d:17:4e:8e:e0:fa:8a:aa:f8:a3:65:00:
                    65:a7:a0:f5:da:72:c3:05:b9:5a:37:7b:85:4b:d2:
                    fe:b7:64:5e:67:3e:b5:85:3b:62:89:96:6b:96:c1:
                    1b:a8:52:63:e7:c6:16:6a:a7:5d:47:5e:04:2b:f0:
                    a7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:82:90:00:CB:B2:07:BC:1B:A6:E4:68:CD:6E:70:74:B8:2A:3A:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6da68c7c-4262-3ea3-95b6-9a60109dec36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.29.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:0b:e4:1c:ec:63:4f:dc:be:f6:65:24:73:89:8f:07:cb:91:
         10:2c:03:56:07:5e:6e:d8:c6:5f:ba:bd:18:bd:5a:f2:ed:f4:
         9a:66:c9:d6:86:b8:78:4b:20:06:35:3d:ca:e4:24:e7:88:75:
         e0:02:25:62:78:10:70:f4:63:f7:50:95:85:bd:31:15:24:0c:
         7b:8d:75:3d:20:33:9c:b4:cd:c4:77:24:e2:52:30:79:de:52:
         41:62:82:a9:9c:19:cc:cd:ad:f4:e3:87:79:92:41:56:81:4b:
         01:4b:e3:71:53:67:2f:60:c0:7d:5f:8b:99:3c:1f:22:db:39:
         13:31:3d:ad:ee:66:15:68:fb:53:b5:bb:77:05:3f:9f:71:ad:
         d3:4f:bc:41:97:cf:b2:8b:0e:4b:62:fb:1a:aa:3e:15:22:10:
         51:72:66:d8:c0:05:b1:e8:4d:16:a0:a2:ab:4c:9d:1a:9d:fc:
         b4:84:31:f5:db:58:92:c6:2f:89:4b:20:21:90:47:e5:3c:9e:
         ca:73:24:27:1b:da:c6:77:c8:f0:0e:c1:78:a7:ad:b1:a4:e2:
         37:14:d2:17:d0:9b:58:7e:34:a8:73:f1:5c:3c:a7:ce:55:22:
         d9:89:a4:88:73:c0:75:a6:70:c7:dd:22:e5:64:67:85:70:5d:
         c8:74:dd:5c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEDUa6FzSaWSEVA50oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDIwNjEyMDAwMFoXDTIzMDMxNDA0MDAwMFowLzEtMCsGA1UEAxMk
MzFjMzQ3YzctMzA2Zi00NWI4LTljOWUtZjYzMDQ4NzAyOTY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtC31wI7WfkzNOyDNX++muW9/vdkxCySzlwv/
excSZUMlQaBLXJDPKRbGuVRIMkAJIXuNA+Jgd01QmaU1LDElZ8pSPfVIUbbdklrK
GA+GUQswc9Pgprw/sXtMb/yIynLrllJzO21ag+xvNsDelLTEU/Vu4eYwem+zdmf8
k2DfXVqq8Khcwp5U0RzM9T30VtCQHWnDkiW/3R3UNNMrKH5Xj7MtVD21EMnvaCPu
jf+/JIkFwpz1N+5iHgmNI65vDnRDEAw+T/ANF06O4PqKqvijZQBlp6D12nLDBbla
N3uFS9L+t2ReZz61hTtiiZZrlsEbqFJj58YWaqddR14EK/CnnQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFK+CkADLsge8G6bkaM1ucHS4Kjq2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNmRhNjhjN2MtNDI2Mi0z
ZWEzLTk1YjYtOWE2MDEwOWRlYzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAth0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAAAvkHOxjT9y+9mUkc4mPB8uRECwDVgdebtjGX7q9GL1a8u30mmbJ1oa4
eEsgBjU9yuQk54h14AIlYngQcPRj91CVhb0xFSQMe411PSAznLTNxHck4lIwed5S
QWKCqZwZzM2t9OOHeZJBVoFLAUvjcVNnL2DAfV+LmTwfIts5EzE9re5mFWj7U7W7
dwU/n3Gt00+8QZfPsosOS2L7Gqo+FSIQUXJm2MAFsehNFqCiq0ydGp38tIQx9dtY
ksYviUsgIZBH5TyeynMkJxvaxnfI8A7BeKetsaTiNxTSF9CbWH40qHPxXDynzlUi
2YmkiHPAdaZwx90i5WRnhXBdyHTdXA==
-----END CERTIFICATE-----