Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/254f8308-9991-3e20-b0b2-d9cff0878d56.roa
File:                     254f8308-9991-3e20-b0b2-d9cff0878d56.roa (raw, json)
Hash identifier:          zQwzu6SQ1pJRft9lxUZunBFT2sw/2s0zZsqfJzrWE0s=
Subject key identifier:   C2:08:73:3C:35:26:44:BA:BE:B7:32:55:6C:86:13:A0:05:33:99:54
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328584068021240E2C3BE00784B3600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/254f8308-9991-3e20-b0b2-d9cff0878d56.roa
Signing time:             Thu 29 Dec 2022 12:00:00 +0000
ROA not before:           Thu 29 Dec 2022 12:00:00 +0000
ROA not after:            Fri 03 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        35.152.0.0/13 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:68:02:12:40:e2:c3:be:00:78:4b:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 29 12:00:00 2022 GMT
            Not After : Feb  3 05:00:00 2023 GMT
        Subject: CN=72550f1e-d372-4923-aeb9-267f2323e4c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:58:c8:b0:a9:50:97:48:25:50:78:ff:8d:46:
                    18:bd:0a:cf:f2:71:f3:a3:cc:58:cd:3b:b2:4e:5e:
                    24:a8:b6:04:fc:d3:c1:3c:01:f6:0f:e2:c3:f6:8f:
                    36:a4:29:3b:6e:22:83:f1:2e:32:64:1b:b7:3e:d2:
                    c3:d6:d6:0f:56:ed:eb:fc:2d:a4:4c:4e:1b:ea:cc:
                    a1:8b:10:08:ff:46:91:31:03:4a:87:be:21:d3:99:
                    69:48:9d:9a:a7:96:5d:73:d6:ed:38:85:1e:d5:a6:
                    bc:0a:20:03:75:84:bf:bf:89:08:49:60:6f:fc:55:
                    90:0f:a1:68:f4:28:2a:af:f4:32:1a:71:b8:a3:9e:
                    58:40:b2:7c:1c:ee:e4:1b:7e:20:d4:93:a4:13:e1:
                    6d:84:e3:6f:2a:00:5f:f5:04:f3:3d:ef:1c:be:99:
                    a7:47:75:73:94:45:40:79:8d:dd:b9:ea:0b:de:1f:
                    c7:de:dc:6c:e5:75:13:60:f3:2f:36:21:7a:cc:99:
                    f7:39:c0:8e:a1:f5:89:4e:a0:ad:dd:b6:bf:c1:66:
                    8a:18:f3:cb:f8:b7:f2:96:57:c1:75:1d:6a:b7:2e:
                    d2:85:bd:85:79:72:68:24:8f:63:97:25:62:fc:56:
                    fb:a2:67:f8:74:0b:39:25:c8:1f:2c:aa:28:1c:13:
                    16:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:08:73:3C:35:26:44:BA:BE:B7:32:55:6C:86:13:A0:05:33:99:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/254f8308-9991-3e20-b0b2-d9cff0878d56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.152.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:34:a6:3b:ce:c7:67:c4:99:0b:33:4a:40:e2:9b:52:de:18:
         88:60:26:06:60:15:df:5f:57:50:b1:2f:0d:4f:0d:d2:50:2c:
         80:e0:69:23:79:38:de:41:83:5e:6f:bf:57:4b:54:ba:5d:e8:
         5d:83:4c:d2:fc:2a:1c:39:92:35:ec:7d:9e:70:54:ce:1a:6d:
         b2:b8:bb:4d:00:98:ba:77:ef:65:17:a4:f8:8c:0a:ea:95:36:
         cb:8c:a2:1c:5c:97:54:84:2e:66:b3:e1:42:51:fc:43:47:d5:
         10:6b:20:0b:c4:68:e6:8a:52:d8:4d:fa:02:4c:23:e3:ec:f0:
         3f:90:28:2b:6a:94:31:59:30:31:60:12:81:16:99:d1:21:d2:
         be:62:1b:95:4e:bb:e4:fc:e1:d2:26:13:16:a9:31:9c:5e:8c:
         92:9b:60:68:f7:f3:a7:d1:99:82:87:16:64:59:07:c4:e4:38:
         fc:17:8a:10:7f:bc:65:c5:e2:09:25:af:6c:08:0f:89:49:27:
         8b:50:92:95:1d:b4:1a:32:a7:b9:47:ef:28:d8:26:b4:c4:76:
         0f:29:90:9c:b6:cc:55:82:97:6c:25:a4:e9:83:06:ae:25:60:
         a6:c6:82:52:58:44:4b:c1:77:e6:f3:7d:77:c9:ce:c7:42:5a:
         a1:7c:b7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----