Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c4df9dd6-87f6-30fc-b5d9-bb04890aa20f.roa
File:                     c4df9dd6-87f6-30fc-b5d9-bb04890aa20f.roa (raw, json)
Hash identifier:          mSQv8FrXcCJyXi1nF3dsBkqh3yvcYadRahu5ckA/Rd4=
Subject key identifier:   D4:F6:FB:DC:C7:9A:10:C5:2A:0A:43:3E:39:05:7E:97:D1:41:C7:F6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584075C3A9DE3210A5FB65E8DB00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c4df9dd6-87f6-30fc-b5d9-bb04890aa20f.roa
Signing time:             Tue 03 Jan 2023 12:00:00 +0000
ROA not before:           Tue 03 Jan 2023 12:00:00 +0000
ROA not after:            Wed 08 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        141.230.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:75:c3:a9:de:32:10:a5:fb:65:e8:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  3 12:00:00 2023 GMT
            Not After : Feb  8 05:00:00 2023 GMT
        Subject: CN=39a741f7-5a89-49fe-b73c-118d38113a3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3b:be:04:95:33:98:d6:cf:cb:06:ca:a7:14:
                    9b:69:5a:35:ec:2e:de:7f:2e:73:30:4e:2b:56:8f:
                    37:cc:27:b5:56:b3:cb:28:86:89:e2:04:57:8e:03:
                    74:bb:fe:f0:ed:a1:bf:92:69:ae:e9:a4:4b:d1:c8:
                    6b:b8:50:43:64:df:54:ef:c2:1a:1d:19:3f:c2:26:
                    96:f1:a5:16:84:ba:93:f5:f8:e4:52:4a:72:04:09:
                    77:6e:21:79:11:0d:08:67:92:34:c2:2d:ad:7c:40:
                    98:69:dd:5e:ca:be:7e:75:ec:ea:8f:9d:a0:fd:fa:
                    a1:07:5b:e8:d7:a2:ad:11:01:d6:9b:58:25:86:fd:
                    f8:67:cf:5f:e2:f7:09:8e:7f:cd:a5:40:b9:e4:ca:
                    30:56:42:1b:98:2b:d6:2c:bb:ac:80:12:86:c6:ec:
                    36:61:c5:44:4f:be:2b:61:0f:56:6e:84:85:2c:d3:
                    e9:57:57:53:ca:49:33:4d:a3:6b:28:1f:df:09:9e:
                    51:5c:64:82:dd:fd:b5:2a:72:92:e6:70:28:19:f6:
                    eb:60:37:29:b5:18:28:64:76:b6:de:01:ff:d7:af:
                    f2:48:aa:1d:7b:de:9b:24:af:5d:69:67:16:03:73:
                    79:c8:89:a2:36:b8:b3:07:32:98:6a:43:ad:93:de:
                    f8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F6:FB:DC:C7:9A:10:C5:2A:0A:43:3E:39:05:7E:97:D1:41:C7:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c4df9dd6-87f6-30fc-b5d9-bb04890aa20f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.230.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:84:9b:28:d6:83:e3:72:13:8f:c5:f3:39:ab:e0:2f:c8:68:
         e9:fd:db:f3:9a:34:b7:39:aa:e3:83:94:6a:a6:42:79:6b:f9:
         8b:46:32:44:c6:e9:1c:17:b4:70:00:9c:e5:3c:59:40:b7:1c:
         5f:94:37:64:ff:7d:d9:ed:c5:ee:aa:df:92:4a:43:9e:c6:a5:
         56:01:4b:62:f9:9c:07:d5:d9:74:f0:a2:66:75:db:55:b3:5a:
         86:88:92:c9:a0:a2:dc:ef:af:16:fe:e3:cd:2b:31:50:c7:2e:
         5c:78:8b:88:2f:26:ee:09:c6:90:df:a4:8d:ab:ee:e6:52:de:
         76:22:0e:04:0c:04:6e:5d:39:db:ee:0a:9e:f4:8a:d5:bb:57:
         26:04:2b:a2:bc:c4:07:2a:b9:52:a7:ae:53:ea:ad:c6:04:62:
         22:9f:f2:e9:c7:d9:2a:a1:19:5b:fd:a7:b7:1b:71:48:95:cf:
         4c:fa:48:aa:a7:34:86:f2:f9:39:3e:f0:e0:53:10:ab:ab:f1:
         c6:d5:86:75:44:83:88:18:af:98:ab:e6:4e:cb:5c:d4:3d:f4:
         2b:c5:56:7c:0c:3d:d1:19:3e:f7:48:01:4b:12:c4:d7:53:01:
         b9:a0:6b:01:5a:08:01:9f:ce:db:a0:8c:1d:20:32:c2:5a:7b:
         cf:90:7a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----