Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e39a7527-9c9f-33c6-84eb-4e3ca06e9245.roa
File:                     e39a7527-9c9f-33c6-84eb-4e3ca06e9245.roa (raw, json)
Hash identifier:          73/BujN6T5ERE2AXQoJ4K6ED/kjDs2bmYwtV0cN8/Z0=
Subject key identifier:   E7:BB:1D:44:11:69:33:64:61:3F:02:79:E5:14:AA:0E:E7:03:11:0B
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840ADFA16F18B12DB0374EAC208
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e39a7527-9c9f-33c6-84eb-4e3ca06e9245.roa
Signing time:             Mon 23 Jan 2023 12:00:00 +0000
ROA not before:           Mon 23 Jan 2023 12:00:00 +0000
ROA not after:            Tue 28 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        161.46.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:ad:fa:16:f1:8b:12:db:03:74:ea:c2:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 23 12:00:00 2023 GMT
            Not After : Feb 28 05:00:00 2023 GMT
        Subject: CN=902ebab8-f55f-4cbf-a829-375058878ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b7:47:e0:28:50:ff:3c:47:20:ef:76:43:e3:
                    87:b5:e0:00:4e:93:fb:f0:13:da:a4:32:16:32:20:
                    5d:d6:34:60:45:f7:70:b0:d5:37:c1:a3:78:da:95:
                    ad:6b:9d:e5:1f:6c:5c:d8:25:2f:1a:eb:a8:1d:bd:
                    12:a7:5d:80:fa:f4:35:d8:02:e4:29:8e:9a:18:1c:
                    e8:7c:fe:70:46:61:e4:ef:34:e7:89:9b:1b:6c:90:
                    1c:37:36:ba:1c:d0:c5:cb:c1:d7:bf:2a:56:0d:4b:
                    61:93:8a:d3:03:90:bd:2b:57:8f:f9:81:29:9c:1a:
                    f2:d9:ae:b7:28:95:e2:34:72:3d:71:03:23:f1:90:
                    d1:42:bf:62:cb:06:68:7a:46:fa:f7:22:42:08:48:
                    67:4a:01:e0:27:e3:e1:1e:8c:30:1a:57:72:ac:54:
                    23:31:30:a4:a7:f0:5a:de:14:04:29:cd:f9:ba:00:
                    6d:b3:c4:b0:77:6b:25:73:64:92:a0:7e:ad:1b:ce:
                    01:44:cf:98:ee:4a:02:40:17:c5:69:a2:5d:5a:06:
                    70:4a:08:0c:fd:39:41:9a:9a:3d:d5:93:e9:b3:04:
                    6f:b3:e3:e7:91:8a:e8:ce:75:8f:51:ad:49:f5:90:
                    fc:0b:c3:29:21:6c:a1:ac:20:5b:69:2e:b6:2a:37:
                    bd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:BB:1D:44:11:69:33:64:61:3F:02:79:E5:14:AA:0E:E7:03:11:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e39a7527-9c9f-33c6-84eb-4e3ca06e9245.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.46.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:46:4f:64:10:4e:ce:14:93:88:3f:25:82:bb:f7:1c:c5:74:
         25:25:61:e7:5d:c3:d1:9e:22:9c:3c:25:a7:8b:e7:d2:ba:5d:
         c8:39:6e:b0:ad:70:a0:e8:8f:8d:a4:29:2f:1b:e9:56:55:63:
         f5:e9:00:40:f0:8c:b7:e6:8f:d9:82:d1:45:ff:ec:21:46:c8:
         4e:a2:57:be:8a:a4:ff:70:25:77:c5:11:1b:27:d0:7c:42:a5:
         ae:0a:60:c0:44:f8:a7:19:e1:4a:13:a2:34:a6:34:ec:b9:7f:
         00:a6:47:f8:28:c4:21:18:e4:11:34:c7:56:c4:60:11:02:8b:
         8e:a1:bb:ee:ea:28:53:56:8f:4a:90:c1:35:f2:64:a8:39:74:
         3f:4c:b3:30:e4:1c:3c:87:24:99:7b:aa:84:d9:fd:2a:86:80:
         0e:ee:6a:a6:2d:3f:05:23:e2:ae:59:dd:df:f4:7c:47:58:26:
         42:4d:61:e6:fe:30:ec:d0:3d:9b:35:3e:3c:c6:72:71:9f:3e:
         c1:b7:87:dd:8b:80:0a:e0:c9:3e:bc:d3:6e:06:07:2c:e0:5b:
         c4:49:46:ac:04:6d:41:72:e3:c4:70:89:a6:b3:69:28:59:32:
         8f:2e:c0:cf:f3:f9:8e:56:c3:9a:b1:20:76:9e:27:8d:43:d4:
         4c:22:90:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----