Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fbe1b8c8-b0cf-3cc8-8b4c-e801c9bb9d0b.roa
File:                     fbe1b8c8-b0cf-3cc8-8b4c-e801c9bb9d0b.roa (raw, json)
Hash identifier:          dpDL4akJxcfqz8xzpZHEf0R2HUX0kDP3bkua0a3KFsQ=
Subject key identifier:   7B:CB:38:D1:01:9D:00:CD:68:FC:3B:A6:B9:89:95:1E:94:1B:E2:2E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840B9E620F036DC39CA6759EE00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fbe1b8c8-b0cf-3cc8-8b4c-e801c9bb9d0b.roa
Signing time:             Fri 27 Jan 2023 12:00:00 +0000
ROA not before:           Fri 27 Jan 2023 12:00:00 +0000
ROA not after:            Sat 04 Mar 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        172.103.40.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b9:e6:20:f0:36:dc:39:ca:67:59:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 27 12:00:00 2023 GMT
            Not After : Mar  4 05:00:00 2023 GMT
        Subject: CN=070b69ed-2c4b-4717-b87d-c35fe37613e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2c:3a:62:ab:31:23:62:a3:87:e2:52:c1:df:
                    c9:d8:47:31:44:ff:a7:96:6e:91:13:a2:37:07:74:
                    68:13:99:18:47:20:21:b3:12:2d:24:06:d2:69:9f:
                    1b:46:55:9d:b6:9c:fc:f1:a7:bf:7d:6d:bf:b3:78:
                    bd:fc:e2:0c:79:0c:9a:fc:a6:b5:40:03:11:0f:38:
                    f0:18:60:1e:41:0f:eb:3b:4d:31:74:c1:20:ce:ca:
                    88:cd:c4:c2:97:90:b9:be:c5:49:0f:81:be:5f:68:
                    70:3d:f3:93:c7:eb:f4:5c:8d:7d:bd:15:19:04:26:
                    40:a9:69:f6:ef:3e:2a:d1:87:1d:d8:10:ed:0d:9d:
                    05:a3:47:4c:15:67:e0:02:65:92:e8:1e:d8:cc:7e:
                    f2:c7:1e:80:4a:ce:49:ee:b9:ab:d7:92:c2:bb:84:
                    52:be:67:db:84:f4:69:70:e8:66:60:ff:df:c3:76:
                    c5:5a:6b:a0:21:8c:d5:d0:7c:51:de:8a:ab:2d:76:
                    fb:2b:ca:43:60:35:c4:87:ad:57:3b:35:43:40:45:
                    2a:af:68:86:7c:cc:fc:92:f8:96:44:43:05:81:43:
                    36:db:0a:c3:83:01:26:a7:2c:49:f5:40:09:65:bf:
                    9e:88:74:f7:0f:37:2e:c6:9f:3d:65:1e:ba:79:c6:
                    ea:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CB:38:D1:01:9D:00:CD:68:FC:3B:A6:B9:89:95:1E:94:1B:E2:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fbe1b8c8-b0cf-3cc8-8b4c-e801c9bb9d0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.103.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:32:05:39:2f:e3:d0:b9:67:08:02:00:94:da:91:4f:ef:e4:
         64:e3:04:83:54:3a:07:a8:dd:94:a9:cd:19:b4:53:ce:d0:4a:
         3e:1d:b7:94:a4:ce:82:4a:12:ea:ec:83:e7:ab:33:a7:3b:63:
         2d:7f:b9:55:e8:cb:05:f6:38:31:fb:ba:1b:23:12:f4:3a:a0:
         d5:cf:33:5b:f8:5a:c2:0c:82:ab:a1:ad:a4:11:54:00:bb:39:
         0d:ea:4f:24:2a:05:20:bb:c4:00:09:3f:2e:4a:ab:fa:0c:b4:
         d5:f3:ed:8d:d2:93:d0:4f:3b:4f:21:07:35:2c:cb:06:e5:5f:
         02:dc:ce:a3:ad:a1:f8:15:41:d8:e1:bd:50:4a:40:c3:d0:33:
         56:5d:76:4a:ed:83:e9:1b:b5:00:20:c0:f8:3c:43:c2:2e:fe:
         09:24:c2:49:00:d8:d7:e8:19:02:20:e3:0e:f0:ff:1a:2a:fb:
         fa:7a:7e:19:ee:c0:cb:8a:22:91:cc:c5:3a:3a:8c:a8:9a:e1:
         15:30:70:86:2d:c0:49:80:27:9c:18:b9:51:e9:ff:8b:de:2f:
         c6:d0:48:f3:2c:3a:25:3f:e1:20:ae:46:8f:1a:f0:66:c9:6d:
         07:4e:fe:1c:02:08:28:97:58:b2:32:d5:c9:27:2c:e9:34:bb:
         4e:8c:df:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----