Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/95867101-0612-3a2f-8e74-4b5d60aa30cf.roa
File:                     95867101-0612-3a2f-8e74-4b5d60aa30cf.roa (raw, json)
Hash identifier:          diCzdH7YF+CBfiNjUscCpv2l8qcM+1bMuxyFqV50zyU=
Subject key identifier:   DD:81:52:86:14:23:BD:DB:0E:EB:B9:2A:D3:33:41:55:C4:1F:F2:14
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858405F1493CAFCAB58BC45032078
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/95867101-0612-3a2f-8e74-4b5d60aa30cf.roa
Signing time:             Mon 26 Dec 2022 12:00:00 +0000
ROA not before:           Mon 26 Dec 2022 12:00:00 +0000
ROA not after:            Tue 31 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        158.138.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:5f:14:93:ca:fc:ab:58:bc:45:03:20:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 26 12:00:00 2022 GMT
            Not After : Jan 31 05:00:00 2023 GMT
        Subject: CN=578c231a-7c34-48ae-a8a7-dc1d3bcfd00d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bc:c1:e5:98:a7:75:6b:ec:84:fa:cc:ef:d3:
                    e9:6d:64:c4:ff:1c:31:b7:82:de:e0:8c:14:4c:85:
                    db:71:5a:9d:7f:77:a8:9e:fc:24:8a:04:62:43:10:
                    33:f1:3c:0b:be:80:65:e6:cf:8e:c4:aa:1c:5b:05:
                    9f:30:7e:38:54:7d:05:9c:d1:8b:b0:a8:57:59:5a:
                    77:f0:43:87:0b:21:43:35:d2:af:aa:c5:cc:ab:63:
                    3c:28:58:a2:2c:db:9a:7a:76:b5:cf:55:b2:d7:d3:
                    e7:0b:f3:ee:db:57:59:5e:c6:1e:14:d4:3f:b6:76:
                    f8:2c:a9:ad:7d:42:97:c9:a1:61:bc:97:1e:73:86:
                    c5:a1:e8:19:61:01:a6:e5:6c:8e:6d:d1:3f:6b:15:
                    b3:03:6d:d6:58:a9:ba:d4:01:6d:e9:62:7d:bb:72:
                    7a:5b:58:5a:e8:ec:24:0d:df:8a:46:00:87:28:e0:
                    18:de:3b:9d:eb:3f:41:f9:d1:ff:d7:ff:82:34:34:
                    61:e4:70:f3:32:8c:eb:86:4b:66:ab:6d:25:fa:a4:
                    03:d6:7f:78:04:67:e0:39:de:8e:be:b5:e4:15:31:
                    2e:5a:c9:aa:ac:66:37:6c:45:4a:33:b0:b0:c2:93:
                    8b:66:9a:07:49:a8:fc:29:8b:9e:08:6d:0e:91:48:
                    dd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:81:52:86:14:23:BD:DB:0E:EB:B9:2A:D3:33:41:55:C4:1F:F2:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/95867101-0612-3a2f-8e74-4b5d60aa30cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.138.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:8d:db:36:fd:8b:bc:73:b6:bf:f2:e2:05:9f:40:8e:eb:88:
         af:29:45:53:8d:bb:49:15:25:34:9c:36:69:61:e0:4c:1f:f0:
         15:e4:0d:a0:0f:db:f5:54:3f:a3:15:59:86:87:5d:87:12:cb:
         88:70:68:97:24:c4:5d:99:a8:c7:c6:76:f2:34:23:7d:3c:1a:
         1d:c8:74:2c:c2:1e:1c:79:6d:fb:b6:42:f5:30:19:28:04:d3:
         d2:5e:b4:17:c3:bb:92:d4:35:b2:09:9a:2d:ed:01:99:5b:26:
         58:db:9b:c7:c6:e6:9a:9b:dc:15:a6:73:d4:47:75:04:31:6e:
         d8:be:0b:53:04:95:10:4d:38:6e:7e:3d:df:bd:de:05:45:85:
         73:22:4f:54:ae:3b:06:51:20:8a:8b:56:35:5a:2b:29:0e:7b:
         72:6f:7e:37:74:89:9f:6d:b2:73:83:b2:e6:07:2b:75:33:f7:
         29:ce:3b:31:a5:96:5c:86:6e:4b:04:a0:88:5b:05:13:9f:4c:
         21:43:b6:a5:de:fb:2a:f1:67:bc:3f:b6:cc:67:67:e8:31:16:
         61:9c:9c:4e:e9:e8:2d:07:1a:b4:bb:24:80:9f:60:0d:7d:df:
         06:e9:91:a8:be:ee:fe:f0:75:fa:d2:da:1e:00:da:41:33:9e:
         e8:aa:f9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----