Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/36ed4709-3452-3893-bf95-154a76a48160.roa
File:                     36ed4709-3452-3893-bf95-154a76a48160.roa (raw, json)
Hash identifier:          /XYnecla1AC12CFicPZliF8Twy29L7ZF7O0n4HaZcZU=
Subject key identifier:   14:9C:B4:56:6F:77:33:B2:F3:F4:91:E1:7A:43:F3:0E:64:59:FD:B7
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840A232C69049D64788F81A3140
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/36ed4709-3452-3893-bf95-154a76a48160.roa
Signing time:             Thu 19 Jan 2023 12:00:00 +0000
ROA not before:           Thu 19 Jan 2023 12:00:00 +0000
ROA not after:            Fri 24 Feb 2023 05:00:00 +0000
asID:                     6167
IP address blocks:        161.188.16.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:a2:32:c6:90:49:d6:47:88:f8:1a:31:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 19 12:00:00 2023 GMT
            Not After : Feb 24 05:00:00 2023 GMT
        Subject: CN=501ac388-ff32-4ff4-a792-9f613f2706e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c7:0b:95:c0:4e:c5:b3:e2:7e:e9:d3:fc:72:
                    3e:05:ad:79:a8:fa:eb:0a:11:25:58:4a:f9:2f:dc:
                    6f:f3:30:bb:ee:3a:82:8c:80:f4:6a:d0:36:5b:5f:
                    d5:7d:b7:95:ea:fe:92:4e:84:7f:67:ad:a0:9a:13:
                    b0:7a:cd:b6:7b:b4:72:46:a6:00:e8:5b:dc:2a:66:
                    fe:f9:47:c7:29:84:34:39:4e:b1:82:bd:eb:6f:90:
                    6a:b9:d7:0b:1d:b3:24:36:f5:8a:95:78:bb:c8:ac:
                    37:63:87:53:d4:82:67:b3:10:31:b2:f4:23:6a:cd:
                    07:0a:27:3f:2a:63:99:92:34:8a:8e:c8:51:4e:f6:
                    da:ab:d6:87:cd:55:78:2d:48:94:eb:1b:f7:b0:d8:
                    a3:1c:9d:ed:f4:bf:ab:5e:d4:f3:8f:41:d1:79:ef:
                    b0:9f:50:56:0f:7e:e0:32:5c:06:58:1c:de:dd:d1:
                    23:bf:a6:8a:4d:9b:07:4d:5b:a1:9a:9a:93:ca:5b:
                    8c:e8:8d:23:41:03:aa:ae:7f:4c:5f:7f:40:fc:b5:
                    14:8c:08:04:e2:06:3c:c6:d8:8d:1e:cf:dd:18:95:
                    52:cf:31:ce:d0:47:1c:53:44:b6:3c:75:f9:00:c8:
                    9d:f6:f0:d8:ed:7d:59:5a:ba:08:e5:df:8c:14:2c:
                    ea:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:9C:B4:56:6F:77:33:B2:F3:F4:91:E1:7A:43:F3:0E:64:59:FD:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/36ed4709-3452-3893-bf95-154a76a48160.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.188.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:92:3a:ee:d5:74:6c:6a:d8:69:ee:06:ff:42:c2:13:09:61:
         20:74:10:50:87:df:58:c5:f5:69:3e:57:cc:e3:52:75:7b:40:
         bb:82:c6:6a:3e:3f:1a:94:99:c3:87:76:62:35:4f:c8:d9:48:
         0b:a1:3a:1c:b8:12:d8:90:b9:97:18:62:77:8b:d1:e1:d8:f3:
         26:96:05:5a:b6:bf:dd:89:b9:dd:8e:47:64:4a:27:b6:70:1f:
         ed:cd:d0:43:48:88:85:ce:c8:b8:3b:56:77:98:8c:6d:c0:f2:
         43:56:e4:a9:ae:19:73:e3:d5:06:bb:ac:ce:9d:3a:af:83:84:
         ea:3e:d3:9b:68:ea:71:d2:ee:96:e8:30:08:f1:22:b5:eb:0b:
         1b:23:d9:58:9f:ad:24:52:39:da:58:15:74:87:12:57:7d:2d:
         c1:b5:a0:9a:7c:d8:2a:37:fe:12:fa:eb:7f:dd:21:68:06:98:
         6b:3b:76:28:64:0a:a9:34:ae:2e:12:34:ab:55:30:b6:17:9e:
         7a:ba:53:0a:3a:a5:b5:b9:ba:db:a4:7e:9e:85:1d:37:94:db:
         84:39:50:41:22:4e:27:9b:df:2d:d5:a9:0f:b0:b0:0e:69:7b:
         2a:c6:47:6e:67:51:3d:ca:21:96:b5:0c:49:77:1a:61:2b:59:
         52:47:94:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----