Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3504db1f-4845-3a97-a4c9-6e4e08e8e7f3.roa
File:                     3504db1f-4845-3a97-a4c9-6e4e08e8e7f3.roa (raw, json)
Hash identifier:          80Juhrlc55Q4S/uA2pxlH3ms+fXalnES5+3iOsWiyEQ=
Subject key identifier:   49:14:50:4D:18:27:B0:B5:2E:C8:BF:17:17:EE:85:14:15:7D:DD:75
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858406E67E8059489D3F5D3A67550
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3504db1f-4845-3a97-a4c9-6e4e08e8e7f3.roa
Signing time:             Sat 31 Dec 2022 12:00:00 +0000
ROA not before:           Sat 31 Dec 2022 12:00:00 +0000
ROA not after:            Sun 05 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        35.160.0.0/12 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:6e:67:e8:05:94:89:d3:f5:d3:a6:75:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 31 12:00:00 2022 GMT
            Not After : Feb  5 05:00:00 2023 GMT
        Subject: CN=eff41471-a536-4aaf-b12c-617a1fa477f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:e4:79:9b:5e:dc:bd:fe:4a:f2:4a:09:2f:8f:
                    35:c9:94:be:2b:00:49:79:0a:0d:b6:71:a0:c2:af:
                    23:d2:fc:73:c5:4b:2c:49:36:d4:f0:53:90:33:f4:
                    00:03:f3:62:e5:b6:e7:80:9c:da:ea:95:ee:0e:5e:
                    14:ff:a3:3c:43:7c:1c:25:a5:26:1e:0d:28:cd:4f:
                    42:6d:81:e2:7d:7d:87:de:11:c0:44:34:d1:ff:cb:
                    91:d7:f1:d2:30:ca:19:3d:68:8c:ca:13:09:3f:ae:
                    b5:a6:7a:b5:53:ce:a2:a5:f5:ff:90:bf:f1:72:6b:
                    ba:f9:54:11:e3:da:16:ce:a8:f1:33:ad:fe:c7:4e:
                    8f:d9:51:2d:4e:0c:1a:3b:c1:34:05:15:d3:59:a2:
                    09:8c:7b:08:0b:92:3d:0b:32:37:82:51:33:ba:e7:
                    8e:c3:68:e4:f7:6d:c6:ad:69:77:20:68:01:79:74:
                    fc:66:8e:8d:96:56:55:e0:1c:bd:d8:72:10:84:91:
                    c7:f2:4e:19:43:7e:2e:eb:05:50:af:0a:29:f2:02:
                    af:55:86:8f:ce:8a:28:08:3f:10:78:9f:62:08:58:
                    c5:64:03:e0:99:ee:6c:a3:1d:cf:36:e6:54:7b:4c:
                    df:fa:ec:f3:8c:11:ef:d5:40:2e:e7:22:f9:c9:b8:
                    46:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:14:50:4D:18:27:B0:B5:2E:C8:BF:17:17:EE:85:14:15:7D:DD:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3504db1f-4845-3a97-a4c9-6e4e08e8e7f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.160.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:d7:95:a3:04:bc:32:34:b6:4d:85:09:6b:7a:5c:f0:36:1e:
         1a:ac:7d:9c:23:05:dc:ff:d4:a4:41:db:1a:43:76:c0:b4:81:
         d4:3f:df:87:33:ab:85:c6:a6:57:f5:f8:2b:c6:53:46:ad:73:
         5f:e1:c1:64:17:a0:11:80:7c:0f:02:30:56:ce:b7:26:16:3e:
         6c:df:8d:a9:d6:db:df:cf:19:c3:71:bf:cf:4b:e3:43:3b:41:
         78:fd:13:77:38:65:b9:43:ae:99:d0:cc:5f:d7:48:14:3a:49:
         ce:b8:2c:63:c6:68:08:a4:c3:15:4b:1f:07:8f:82:87:90:da:
         9d:31:9f:49:f7:31:83:71:e4:fb:ce:6a:84:8c:46:15:53:43:
         e8:71:83:b5:50:b6:b3:3e:f2:a4:7b:d7:a4:7a:90:de:0a:40:
         e2:09:55:27:1a:b7:1d:2e:8b:a6:56:74:2c:65:1b:ae:8e:ee:
         97:85:b8:25:02:ed:5f:ce:13:b5:1d:16:fb:72:30:2c:9a:df:
         25:a4:6e:24:d7:dc:6d:72:1a:87:84:67:4f:14:21:65:3c:81:
         d0:da:ed:3c:1a:68:d9:eb:ba:43:ad:e1:2f:65:0a:b6:9e:3d:
         da:67:ad:7c:7b:96:aa:2b:37:91:14:f4:45:a7:08:2c:5d:b2:
         a8:54:37:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----