Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/95cf08e2-4b95-3f20-b916-083a9b4e4c8c.roa
File:                     95cf08e2-4b95-3f20-b916-083a9b4e4c8c.roa (raw, json)
Hash identifier:          B2IOzyRKV5qDjHlQo+xXsBMBMqDqXf7hysJ6wmd9Zoo=
Subject key identifier:   45:D0:AF:83:01:F0:56:60:F2:C3:11:22:2E:32:E1:B1:B8:B0:DD:8E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840D44DE424FE37662398B2CBC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/95cf08e2-4b95-3f20-b916-083a9b4e4c8c.roa
Signing time:             Mon 06 Feb 2023 12:00:00 +0000
ROA not before:           Mon 06 Feb 2023 12:00:00 +0000
ROA not after:            Tue 14 Mar 2023 04:00:00 +0000
asID:                     16509
IP address blocks:        158.138.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:d4:4d:e4:24:fe:37:66:23:98:b2:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  6 12:00:00 2023 GMT
            Not After : Mar 14 04:00:00 2023 GMT
        Subject: CN=aa099248-1bdc-4243-ab0d-51aa51f89294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c3:93:1a:ec:58:17:60:b4:e6:6e:29:16:8c:
                    bf:7b:43:99:78:3c:e5:61:46:96:b4:8d:62:03:b2:
                    9c:ec:6b:0d:ed:89:55:3d:08:bd:fe:96:e0:55:af:
                    b1:4a:95:4f:b8:2d:72:07:6e:b0:db:93:44:eb:bd:
                    26:4c:9d:24:f8:13:75:c6:ca:e5:6c:e6:f6:df:36:
                    77:8f:af:5b:d7:00:37:25:88:93:5f:7d:cd:b2:df:
                    6c:27:24:7f:7b:d8:d4:94:62:e9:41:9a:4e:99:2a:
                    5f:8a:c3:c4:47:4f:62:3c:0e:66:a6:10:8b:a0:35:
                    7a:7f:f1:4f:e6:5c:99:3b:b7:14:44:55:a3:c8:52:
                    0f:94:d3:32:95:49:2c:ea:5a:17:84:5b:3e:57:5e:
                    66:15:9b:36:00:fb:bb:1c:72:87:d0:48:87:4b:8f:
                    a2:bb:fc:71:07:a1:e3:8c:c2:11:d7:cf:e3:d9:45:
                    6a:9f:56:75:91:1c:fa:b7:5d:fb:93:bc:5f:30:e0:
                    c6:5f:18:4c:b2:71:59:d7:09:54:3e:34:39:3a:2c:
                    f8:ce:39:55:28:b4:f4:3f:54:b1:db:f0:71:94:0b:
                    95:25:75:f6:4f:17:69:33:85:3a:a9:f9:90:70:2d:
                    80:34:7e:65:b7:4a:3f:f8:37:d6:1b:e4:dd:c6:03:
                    d0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D0:AF:83:01:F0:56:60:F2:C3:11:22:2E:32:E1:B1:B8:B0:DD:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/95cf08e2-4b95-3f20-b916-083a9b4e4c8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.138.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:c3:dc:fc:9d:3e:88:39:ae:20:ec:bc:0d:cd:fc:05:8f:08:
         9e:b0:36:bd:63:69:09:69:e0:dc:71:db:af:44:ee:d6:31:bd:
         46:e1:72:bb:b6:0e:40:fd:e7:5d:45:cc:c1:32:1b:e1:4b:e8:
         12:b7:20:bf:a1:98:f1:9a:3c:9e:22:ad:79:eb:d9:b5:f2:e7:
         71:9a:0b:bf:7c:dc:2c:7b:99:3f:92:54:65:7b:95:d3:b9:5c:
         97:ec:36:15:2d:b7:47:d6:db:e2:07:da:65:ed:b5:fc:ed:13:
         fa:2b:d7:f2:d0:ed:4f:a0:65:f8:8e:bb:24:fa:e9:bd:17:82:
         a4:fd:b1:69:d5:9c:df:9a:f9:01:6c:f9:56:f2:82:28:c6:f9:
         86:f4:66:26:e0:2d:fa:b1:6b:ff:5d:97:bb:a6:f6:15:d2:89:
         66:6c:ad:65:71:86:6a:f8:95:13:a0:7c:17:e8:c8:5b:a4:04:
         b9:1e:45:ea:ec:97:9c:ea:e4:05:14:3c:7a:cb:b1:6d:9e:16:
         9b:e6:7d:38:d5:23:77:f8:fd:dc:a5:66:28:ee:61:03:cc:42:
         55:20:d9:97:ec:da:43:24:dd:17:b7:91:f1:49:84:f4:28:cf:
         87:a7:4b:6e:a6:94:98:4c:01:20:7c:f4:6d:9e:f7:42:ea:d2:
         81:26:3a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----