Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c8165cb4-19b5-3219-9acd-647f468e3498.roa
File:                     c8165cb4-19b5-3219-9acd-647f468e3498.roa (raw, json)
Hash identifier:          rR4n/BIZOO0WpaIfvGAVlccM/9YOeTxPfh0UMfQUe0M=
Subject key identifier:   AC:08:A3:6B:BC:3E:45:A4:3B:A5:C1:DF:79:63:A0:FC:D4:06:41:1E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840AD3FFA08601A853E7F950FA0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c8165cb4-19b5-3219-9acd-647f468e3498.roa
Signing time:             Mon 23 Jan 2023 12:00:00 +0000
ROA not before:           Mon 23 Jan 2023 12:00:00 +0000
ROA not after:            Tue 28 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        74.190.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:ad:3f:fa:08:60:1a:85:3e:7f:95:0f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 23 12:00:00 2023 GMT
            Not After : Feb 28 05:00:00 2023 GMT
        Subject: CN=9d1b4ef8-972b-4939-950c-10e60836b2a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:21:91:ce:2a:7f:8f:b1:8b:bc:1a:ba:65:f2:
                    de:d5:85:83:6c:3d:1c:30:40:09:37:11:4d:21:5a:
                    05:54:8d:7f:62:10:c3:29:8c:a8:9e:19:38:a6:6c:
                    62:41:17:b3:b6:ea:c3:b0:fe:9e:9b:7f:45:34:40:
                    aa:e1:80:1c:7a:e9:ef:60:ed:57:37:8f:69:82:d0:
                    f9:01:99:2b:9c:a9:75:1e:e0:11:03:6d:8a:fd:55:
                    39:e5:b9:1a:99:72:a8:5c:fe:b0:78:6a:05:36:50:
                    25:08:7a:f9:cf:d3:16:4b:c4:c0:40:f9:5e:74:10:
                    39:d6:31:4a:c9:fc:4a:4c:0a:51:61:25:26:30:39:
                    46:55:1e:2c:19:07:b3:74:6e:c6:36:68:0c:b4:e8:
                    b2:98:11:45:95:02:19:eb:ed:76:af:35:60:0a:8b:
                    01:67:a1:98:b3:e1:36:30:83:e5:f8:88:db:09:3d:
                    96:f4:3d:83:75:2c:aa:38:36:71:29:67:19:25:ec:
                    11:d1:54:25:c0:7d:b8:3b:04:db:5f:0b:64:6a:ea:
                    27:af:49:2a:21:3c:0c:9a:4c:8b:b7:c9:78:06:c4:
                    62:0a:88:f5:b4:6b:da:77:c3:5c:7a:f3:59:7d:d7:
                    be:72:c3:00:49:ab:f8:cd:bb:23:f8:01:69:4c:48:
                    1b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:08:A3:6B:BC:3E:45:A4:3B:A5:C1:DF:79:63:A0:FC:D4:06:41:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c8165cb4-19b5-3219-9acd-647f468e3498.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.190.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:35:50:63:3f:e8:15:d6:c9:88:8e:e9:86:2d:98:d7:56:72:
         09:ef:4d:b7:87:15:b3:ae:83:dc:2e:69:fa:1d:9c:c6:1b:28:
         a2:65:30:2d:91:71:b2:e4:a9:29:ea:b2:d5:af:fb:88:e5:5a:
         b2:db:27:75:84:3b:1f:41:0d:12:2a:ef:62:4b:67:bd:56:1b:
         cd:59:4e:2a:1e:ef:34:d0:6f:85:9d:c5:35:50:d2:44:37:7a:
         f6:c2:f9:ff:ce:3c:83:c2:ab:7c:fd:68:7b:25:96:fa:77:ce:
         59:8c:f6:4c:df:e5:f5:47:7e:9e:8f:9a:66:a9:34:5a:dc:04:
         06:22:26:40:f0:5a:c2:b0:14:c6:c5:cb:96:29:76:9b:ed:a0:
         74:db:b4:c3:3c:84:ee:82:9f:d5:30:3f:ad:28:e2:57:54:47:
         cb:76:5e:fb:e8:ce:2f:d6:20:f2:18:19:1c:bf:21:56:44:e5:
         d6:ac:68:ae:14:df:c1:b5:ff:6b:6b:cb:97:28:2b:3b:0e:91:
         e0:0f:e1:55:9b:a1:3a:de:df:98:1e:96:c8:53:c2:4a:8d:c7:
         07:d8:df:6a:6a:98:3d:59:8d:e0:94:b3:2d:8d:43:af:52:de:
         c6:2e:4e:90:18:b9:6c:c1:fe:3b:01:2a:16:bd:fe:3e:74:49:
         f2:a3:66:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----