Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/da252c39-1c4f-35b9-a729-90e896348d3e.roa
File:                     da252c39-1c4f-35b9-a729-90e896348d3e.roa (raw, json)
Hash identifier:          BoGyGg8WcPRLK3Kr/6x9Oad3ruDAVXP/cCFn9zyt/oE=
Subject key identifier:   56:01:D1:64:AD:6A:E5:5B:E3:DB:4D:7B:10:AA:CC:D6:F2:99:5A:53
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858409A7E2B6FECE29333762FC700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/da252c39-1c4f-35b9-a729-90e896348d3e.roa
Signing time:             Mon 16 Jan 2023 12:00:00 +0000
ROA not before:           Mon 16 Jan 2023 12:00:00 +0000
ROA not after:            Tue 21 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        164.168.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:9a:7e:2b:6f:ec:e2:93:33:76:2f:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 16 12:00:00 2023 GMT
            Not After : Feb 21 05:00:00 2023 GMT
        Subject: CN=5da2b198-29c3-4e36-b896-738597ba27ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d7:41:71:7b:e1:f0:46:34:2d:a7:4c:d3:99:
                    3e:69:63:d3:22:4b:e5:a1:6f:50:0c:31:2a:9e:f1:
                    4d:0c:7d:b6:09:1e:62:90:17:63:c0:08:21:0d:26:
                    13:40:e3:ac:b2:dd:22:a2:6a:5e:ca:a6:cf:6c:6c:
                    84:89:15:c6:08:83:05:ed:1f:fa:3f:42:fd:fc:57:
                    9c:0d:85:f6:4b:5a:8b:8b:46:68:96:3b:cd:9e:85:
                    ad:0f:70:c7:06:e7:6d:44:98:3d:d1:9c:d4:d5:25:
                    47:b2:60:50:b7:e1:e3:32:68:ba:50:8f:a9:a7:a7:
                    75:15:06:ec:8b:7a:2a:ce:ba:79:92:e2:30:67:3e:
                    ca:e0:02:17:cd:2f:16:61:1e:3f:31:8c:04:89:2f:
                    1c:ae:7d:9c:81:ba:ea:df:57:34:c5:0b:7b:09:6a:
                    cd:25:56:d0:96:18:d1:a8:fb:69:be:3e:cb:04:a6:
                    9e:70:7e:13:16:a6:f1:fc:54:9a:4b:c9:f8:e5:0f:
                    9a:f6:28:8e:a4:e3:ec:08:6f:aa:f5:e4:c0:20:13:
                    2d:f1:ec:18:9e:21:24:0e:6f:94:c6:40:f0:bf:37:
                    5c:a9:7c:e8:ef:3b:23:2d:55:1a:32:1b:e7:72:a6:
                    29:62:b3:72:0b:20:c5:63:0b:7b:b4:ac:cc:e8:a3:
                    05:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:01:D1:64:AD:6A:E5:5B:E3:DB:4D:7B:10:AA:CC:D6:F2:99:5A:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/da252c39-1c4f-35b9-a729-90e896348d3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.168.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:38:07:4c:03:e7:b1:76:50:99:4b:88:43:ff:42:27:86:93:
         c5:15:6d:b0:8a:cf:d8:a7:50:e1:fe:65:b9:de:48:1b:f5:02:
         56:ee:b1:29:f1:0a:77:c9:c7:63:1f:a8:bf:df:ac:34:c4:86:
         95:58:56:6d:8a:43:74:7e:d2:cd:96:1d:ea:d4:b9:e4:e5:00:
         d9:46:22:1b:f0:33:13:3a:4d:21:a3:db:fd:e7:44:3d:7a:59:
         de:bc:50:04:c4:c6:9a:b3:2e:7d:14:71:0b:a3:12:e2:ca:5d:
         02:90:09:81:f3:03:88:2e:17:d6:61:d1:07:43:e6:30:0b:c2:
         80:c2:74:8b:95:01:74:76:a8:12:c1:75:80:58:71:d7:f2:1f:
         ed:8a:c8:ee:66:fe:cc:20:83:c3:7a:29:dd:da:c9:28:1c:5e:
         f9:16:60:4a:d7:7a:9b:fc:a7:97:90:e5:80:ef:ec:af:6b:05:
         29:f6:10:b1:39:e6:c8:80:e4:61:53:de:6c:57:88:c7:bc:fc:
         c3:45:bd:4b:52:a9:c6:2e:c7:f9:27:a0:88:b2:12:d5:34:09:
         9c:c2:6a:82:21:47:d2:d4:5c:85:99:41:79:56:6d:c3:b6:a8:
         6f:19:77:c9:b2:ef:d8:9b:97:d3:72:2e:9e:47:5b:60:bc:9d:
         07:46:b2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----