Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fcb2c849-bc68-3b0f-a497-ce763d22966b.roa
File:                     fcb2c849-bc68-3b0f-a497-ce763d22966b.roa (raw, json)
Hash identifier:          T5XCiAZxnIY6E8+5c1REn05jrChJFz+rnStpjUWQQBc=
Subject key identifier:   A5:2F:AD:FB:F2:2A:55:C4:65:25:C6:E8:E9:28:B0:A6:5C:A6:74:66
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858407ACB599A0E5B5399F5BF1940
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fcb2c849-bc68-3b0f-a497-ce763d22966b.roa
Signing time:             Thu 05 Jan 2023 12:00:00 +0000
ROA not before:           Thu 05 Jan 2023 12:00:00 +0000
ROA not after:            Fri 10 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        160.223.128.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:7a:cb:59:9a:0e:5b:53:99:f5:bf:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  5 12:00:00 2023 GMT
            Not After : Feb 10 05:00:00 2023 GMT
        Subject: CN=6141711e-9892-49c0-9828-fe4abefa707c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:df:d3:87:52:f2:1d:93:7b:26:f5:7a:d3:b0:
                    a6:b2:32:51:03:40:8d:e1:c7:9d:76:da:89:98:83:
                    4a:0b:d4:5a:c6:14:95:25:20:95:fc:41:9e:3b:c4:
                    49:f7:34:09:65:f3:3b:ef:0b:77:a1:01:67:52:c6:
                    8c:54:40:67:64:96:7c:ee:80:69:fe:bc:3a:61:b2:
                    2e:4a:2f:a1:2c:7f:4f:cd:ef:21:96:41:07:29:a6:
                    70:85:f5:1e:e9:72:d1:5d:86:3c:1f:1c:de:a7:4d:
                    a5:0f:b0:97:55:f8:77:4e:24:ac:28:ad:68:fe:27:
                    ea:c7:be:8f:c1:f1:64:32:85:3e:35:74:91:81:9e:
                    3c:d5:67:1a:b4:8f:00:b2:29:03:f0:5d:9d:35:15:
                    b9:f8:f8:8f:19:4c:a6:07:b7:3d:32:dd:89:94:ab:
                    23:29:f7:c5:14:60:1a:6b:59:e9:b3:10:23:4c:a1:
                    80:54:dc:a2:21:fe:48:be:c1:50:b4:92:49:74:05:
                    ef:a7:2e:ff:08:35:22:bb:0e:ff:e1:1f:81:b6:08:
                    f8:ca:09:c5:d3:6c:be:18:0a:52:ef:b7:91:76:3a:
                    73:52:be:46:42:79:8f:dd:48:90:a9:37:e9:46:dd:
                    b3:99:f8:f8:2e:44:c3:34:d8:c3:85:9a:e9:2e:b0:
                    3a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:2F:AD:FB:F2:2A:55:C4:65:25:C6:E8:E9:28:B0:A6:5C:A6:74:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fcb2c849-bc68-3b0f-a497-ce763d22966b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.223.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:9b:ff:b8:b1:fc:67:14:3b:61:71:25:56:64:5a:14:a2:59:
         b2:f4:95:d8:69:f6:92:4c:20:3b:4f:ee:0e:11:e3:b1:d9:19:
         ad:1a:c0:ad:3a:26:05:09:a0:ab:90:89:08:67:5d:30:f1:eb:
         03:e6:36:99:2a:81:26:e5:c6:2a:07:3c:cc:96:36:86:9b:aa:
         f3:ed:f5:a6:14:d3:61:fe:3c:83:a8:f0:85:2c:f5:82:aa:74:
         c3:8b:0d:85:65:cf:58:12:55:fa:58:59:85:70:31:77:68:a8:
         7d:a0:c5:d5:0f:db:54:fe:9c:42:c4:27:8b:6f:9d:96:95:77:
         16:13:8a:e6:da:c6:ec:d6:d8:ae:05:e1:f3:84:83:ad:64:9a:
         35:41:80:54:63:57:50:11:0b:77:25:03:63:de:9c:73:30:03:
         40:2a:23:97:ea:dd:e3:49:69:52:c4:b6:6c:81:50:58:80:52:
         7b:0c:d1:0d:73:c7:5c:61:be:cc:de:e8:0d:2a:e1:0a:de:a4:
         9a:47:8d:9e:07:ae:3d:3c:f9:7d:63:c4:22:e6:92:a6:3f:54:
         bf:20:83:29:8a:d4:8c:be:3f:bf:d6:e5:71:e7:65:98:0a:dc:
         7e:12:84:a5:b1:19:77:09:26:cc:b6:42:a4:4e:aa:cf:de:b1:
         4a:01:60:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----