Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cc24aee5-a885-39ad-bfd7-08a7d2d40d97.roa
File:                     cc24aee5-a885-39ad-bfd7-08a7d2d40d97.roa (raw, json)
Hash identifier:          yl1UMqzDkd7T9R/MsEzFQuTpraeQ9IroFumQCgYIT84=
Subject key identifier:   C4:C3:37:E7:99:71:17:26:1E:E2:DF:9F:CB:D7:6D:4B:13:2D:AE:85
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858409B03F36DE44F488A57536F60
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cc24aee5-a885-39ad-bfd7-08a7d2d40d97.roa
Signing time:             Mon 16 Jan 2023 12:00:00 +0000
ROA not before:           Mon 16 Jan 2023 12:00:00 +0000
ROA not after:            Tue 21 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        132.223.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:9b:03:f3:6d:e4:4f:48:8a:57:53:6f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 16 12:00:00 2023 GMT
            Not After : Feb 21 05:00:00 2023 GMT
        Subject: CN=5ff344b5-53a8-4e20-83d6-73d7d15b6e04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:20:cb:1e:f1:9a:fd:dc:ad:41:67:7d:4e:de:
                    22:d3:cf:6c:48:94:d8:b8:0a:9b:a0:3b:d0:3a:02:
                    85:9e:80:86:b1:a4:43:90:eb:4d:18:95:1c:97:57:
                    7f:3a:f6:20:df:50:6a:41:ad:cb:d9:bf:ec:88:fe:
                    dd:dc:26:dd:57:a3:24:5a:63:72:ce:f0:a9:da:b8:
                    2a:ef:4c:50:e2:9a:b8:3a:f2:9a:d2:be:a9:42:19:
                    95:c9:07:37:63:4e:50:e0:cd:a8:d5:54:56:95:0a:
                    c0:54:63:58:19:5e:13:c2:63:78:fc:6e:88:71:a0:
                    58:38:d7:3a:fd:60:67:a4:20:7b:88:a0:30:45:e3:
                    fe:2b:d2:c5:b6:e0:ed:1c:b2:1c:19:34:5b:e1:9c:
                    e8:d4:09:38:1b:53:bf:b0:7b:16:43:53:16:2e:81:
                    c3:ad:9d:5a:01:82:db:b5:88:a1:12:7c:4a:4a:69:
                    ef:b1:15:2d:93:06:51:6b:84:ed:02:84:d4:86:6f:
                    e7:cf:4c:6d:f9:90:58:83:e6:08:46:ba:94:98:53:
                    08:19:85:4d:b8:36:27:9a:6a:fb:b8:e0:b5:10:d4:
                    cf:7f:9e:91:50:42:00:68:c9:4c:15:fd:3b:56:52:
                    af:0a:68:4f:46:34:85:9a:18:c4:8b:d8:af:68:e2:
                    1c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C3:37:E7:99:71:17:26:1E:E2:DF:9F:CB:D7:6D:4B:13:2D:AE:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cc24aee5-a885-39ad-bfd7-08a7d2d40d97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.223.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:e0:d1:ff:cf:b5:c9:e3:84:b0:47:4b:92:8a:93:0a:85:67:
         69:a1:1a:a4:48:76:f6:c2:00:4e:49:a2:fa:0d:2d:32:44:be:
         22:d1:31:34:35:55:3c:5a:32:4a:18:2b:82:d4:ed:68:84:59:
         81:12:f2:9c:c1:43:5c:8d:58:9c:29:50:0f:9e:9e:61:07:a2:
         1a:b1:de:53:e9:06:6e:06:5c:db:ce:24:da:89:95:09:48:60:
         65:f8:3d:4c:0c:54:61:f7:0e:63:cb:a1:36:99:5c:ca:8e:f3:
         16:9a:b2:1f:e2:8a:be:a5:19:23:53:ec:b3:47:6a:e1:33:df:
         4a:71:db:bb:92:69:b5:3a:72:9c:99:3b:db:15:37:2d:9b:2d:
         f1:bd:1a:01:93:b4:3b:28:f4:b7:6a:4d:43:26:3d:f4:b0:f1:
         75:ca:5d:5b:53:d7:88:2b:cd:5b:ec:75:3d:62:2f:f4:08:18:
         67:b4:11:7f:5b:4e:98:0e:aa:ca:c7:e4:c9:06:c0:0f:95:ac:
         c7:4c:9f:d1:12:ce:03:b2:5e:2b:65:bd:d0:9f:2d:0d:78:44:
         59:5c:aa:c3:f7:9d:22:75:66:e4:13:31:ee:d6:b5:84:d2:e0:
         f5:44:cd:5e:d1:12:69:cc:bf:10:c2:ca:69:51:be:51:d2:2f:
         3e:cc:09:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----