Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3b1aa243-e5c2-35d3-8438-e2c3d001c641.roa
File:                     3b1aa243-e5c2-35d3-8438-e2c3d001c641.roa (raw, json)
Hash identifier:          om5bkA2i7vv4GJeqNBoUi3jSbNpJcSjXT0KLa3lT8TA=
Subject key identifier:   AC:63:67:A9:9C:07:36:59:E1:4D:91:BA:14:81:D3:94:7E:C9:E6:8C
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858408683B04F85184605935C9140
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3b1aa243-e5c2-35d3-8438-e2c3d001c641.roa
Signing time:             Mon 09 Jan 2023 12:00:00 +0000
ROA not before:           Mon 09 Jan 2023 12:00:00 +0000
ROA not after:            Tue 14 Feb 2023 05:00:00 +0000
asID:                     6167
IP address blocks:        155.146.48.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:86:83:b0:4f:85:18:46:05:93:5c:91:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan  9 12:00:00 2023 GMT
            Not After : Feb 14 05:00:00 2023 GMT
        Subject: CN=9e08fb17-60aa-4fda-8094-883a42a134bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:18:63:8f:8e:f5:67:a3:3f:2d:cd:39:63:c1:
                    00:ff:05:56:87:36:0a:d8:f6:86:6f:ed:36:ba:c7:
                    60:ee:e4:af:4c:90:75:c8:bd:f3:a0:92:ed:f7:9c:
                    cf:ef:90:85:70:6f:c7:38:ed:c8:94:3c:01:19:23:
                    ef:07:73:1c:19:8e:75:6c:ac:68:a8:56:17:4f:f2:
                    43:d8:be:f2:7f:22:86:f8:18:4a:99:96:79:a2:9f:
                    87:48:45:47:78:c3:5a:9e:08:1f:ca:84:f5:18:5d:
                    9c:d8:19:83:81:e1:97:ad:86:a9:ad:00:7a:24:83:
                    44:1f:63:2e:e0:76:e7:c9:15:ff:66:31:5a:fe:a4:
                    55:e8:7a:e1:f6:41:61:b6:20:0f:25:24:81:75:35:
                    7d:13:0d:e4:51:eb:ac:95:c2:9a:c6:2c:7b:9c:b6:
                    43:e1:4f:e0:a8:48:99:8d:8f:8e:46:00:79:26:19:
                    da:cb:05:89:1d:b2:db:e1:de:8d:e4:0e:da:88:a3:
                    42:cd:db:a3:c8:68:b0:25:d9:a7:96:01:7c:60:12:
                    18:fa:d1:91:b4:17:c2:2c:17:aa:1a:7f:76:49:9f:
                    55:83:5d:6c:2c:94:49:86:8f:b1:73:51:e5:ce:ca:
                    28:25:67:74:8c:d3:79:0a:34:5d:5d:01:17:85:e3:
                    1b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:63:67:A9:9C:07:36:59:E1:4D:91:BA:14:81:D3:94:7E:C9:E6:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3b1aa243-e5c2-35d3-8438-e2c3d001c641.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.146.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:67:be:27:0e:80:a4:cd:43:3b:86:74:60:b8:bb:08:8f:ef:
         04:f2:0e:6e:f6:ad:09:b8:eb:ce:19:f4:b3:09:8a:b3:36:44:
         82:90:71:b2:f7:3d:1b:6b:89:05:d5:e6:98:88:b2:32:0c:95:
         23:ab:47:fb:73:8f:e4:05:5c:79:4d:97:f2:79:94:9e:7e:4a:
         40:28:c9:18:32:ad:77:40:60:b4:0a:0d:cd:d2:48:f5:45:81:
         d8:9c:5f:ba:7c:8b:cb:b1:0b:3f:d2:be:7d:35:00:8a:25:14:
         dc:3d:8c:d7:8d:cd:04:6a:a8:59:f1:ef:f2:04:07:ea:24:4f:
         f5:cc:08:3d:43:78:29:8d:55:b8:10:ed:84:aa:99:4d:e0:09:
         2a:d6:86:db:be:b5:51:2c:7d:0a:2a:a5:2d:c5:21:00:60:cf:
         43:d8:80:a9:df:97:d9:d6:b7:6e:a2:af:e2:a9:43:1c:7e:b9:
         cb:7a:bc:96:b4:e2:1a:1e:75:d9:e9:1d:d3:72:7b:41:05:8b:
         e2:5d:9b:65:ef:ca:1f:fc:7d:9d:da:5d:83:61:1d:05:f9:8c:
         b4:0b:94:4e:7f:a4:4e:06:c2:00:36:cb:76:8b:1d:42:c1:5b:
         df:e9:bf:45:1c:1e:99:6b:8e:23:ee:91:07:c6:0e:b4:27:6f:
         49:64:fd:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWECGg7BPhRhGBZNckUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDEwOTEyMDAwMFoXDTIzMDIxNDA1MDAwMFowLzEtMCsGA1UEAxMk
OWUwOGZiMTctNjBhYS00ZmRhLTgwOTQtODgzYTQyYTEzNGJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRhjj471Z6M/Lc05Y8EA/wVWhzYK2PaGb+02
usdg7uSvTJB1yL3zoJLt95zP75CFcG/HOO3IlDwBGSPvB3McGY51bKxoqFYXT/JD
2L7yfyKG+BhKmZZ5op+HSEVHeMNanggfyoT1GF2c2BmDgeGXrYaprQB6JINEH2Mu
4HbnyRX/ZjFa/qRV6Hrh9kFhtiAPJSSBdTV9Ew3kUeuslcKaxix7nLZD4U/gqEiZ
jY+ORgB5JhnaywWJHbLb4d6N5A7aiKNCzdujyGiwJdmnlgF8YBIY+tGRtBfCLBeq
Gn92SZ9Vg11sLJRJho+xc1HlzsooJWd0jNN5CjRdXQEXheMbJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKxjZ6mcBzZZ4U2RuhSB05R+yeaMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvM2IxYWEyNDMtZTVjMi0z
NWQzLTg0MzgtZTJjM2QwMDFjNjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm5IwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALZnvicOgKTNQzuGdGC4uwiP7wTyDm72rQm4684Z9LMJirM2RIKQcbL3
PRtriQXV5piIsjIMlSOrR/tzj+QFXHlNl/J5lJ5+SkAoyRgyrXdAYLQKDc3SSPVF
gdicX7p8i8uxCz/Svn01AIolFNw9jNeNzQRqqFnx7/IEB+okT/XMCD1DeCmNVbgQ
7YSqmU3gCSrWhtu+tVEsfQoqpS3FIQBgz0PYgKnfl9nWt26ir+KpQxx+uct6vJa0
4hoeddnpHdNye0EFi+Jdm2Xvyh/8fZ3aXYNhHQX5jLQLlE5/pE4GwgA2y3aLHULB
W9/pv0UcHplrjiPukQfGDrQnb0lk/Vk=
-----END CERTIFICATE-----