Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/400f40e4-efed-31a9-947a-c13923abdb3a.roa
File:                     400f40e4-efed-31a9-947a-c13923abdb3a.roa (raw, json)
Hash identifier:          Z5Lq6YnYkt3tvrocoiJFevtjQCQAiWdH61aKRCN0VPg=
Subject key identifier:   5A:80:E4:25:D2:37:86:25:29:DD:5A:C5:A8:0D:DE:D3:24:25:E2:F3
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840B93AF1CDDEFB670FE6D8D780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/400f40e4-efed-31a9-947a-c13923abdb3a.roa
Signing time:             Fri 27 Jan 2023 12:00:00 +0000
ROA not before:           Fri 27 Jan 2023 12:00:00 +0000
ROA not after:            Sat 04 Mar 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        52.0.0.0/11 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b9:3a:f1:cd:de:fb:67:0f:e6:d8:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 27 12:00:00 2023 GMT
            Not After : Mar  4 05:00:00 2023 GMT
        Subject: CN=ec136fcb-efd7-4248-a67e-7d3ca8a00e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cb:91:9c:68:26:c9:66:59:e1:a1:46:86:5b:
                    16:dd:bb:f7:96:4d:95:80:a1:de:04:92:17:3c:37:
                    39:af:d5:fc:df:11:7b:91:8e:b3:ee:de:6a:79:81:
                    9e:58:be:b1:a7:89:aa:54:89:6b:24:b0:6c:4f:7b:
                    ef:2b:77:64:b7:69:14:d1:10:48:33:70:14:c3:9d:
                    07:f4:08:ed:a7:f2:58:4e:05:d1:2e:a5:c9:83:4a:
                    07:1a:4c:7b:83:b7:a4:df:7b:ea:1c:62:f8:15:f8:
                    45:c4:e5:c8:46:1d:99:b8:8c:49:57:3e:98:70:f1:
                    88:df:93:4f:05:d3:9d:f7:4e:4a:04:5e:63:fe:f4:
                    a9:01:7b:7f:a1:7c:58:8b:41:71:2c:67:15:c6:de:
                    97:53:f5:8e:50:77:3a:6e:80:c3:3e:6a:de:90:2a:
                    3b:f1:68:70:52:2a:3d:84:b3:f8:7a:94:73:08:78:
                    d3:41:30:ae:86:aa:85:3f:1c:04:1e:f5:d9:86:55:
                    01:1c:30:bc:01:24:60:49:99:99:9c:ed:3b:00:0d:
                    92:7e:67:ea:12:77:8b:90:d7:54:c6:e4:8a:46:e4:
                    f5:f5:95:9e:1d:cb:2f:ce:a2:e6:c4:74:e5:7d:03:
                    4e:12:6c:9a:cb:dd:e7:e0:9a:e4:b4:16:ac:c7:dd:
                    2c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:80:E4:25:D2:37:86:25:29:DD:5A:C5:A8:0D:DE:D3:24:25:E2:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/400f40e4-efed-31a9-947a-c13923abdb3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.0.0.0/11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:a3:b4:03:22:72:0d:14:c7:83:cf:a6:61:55:f2:b8:2d:b9:
         7a:76:e5:fc:48:0b:d4:f0:96:9b:84:5b:6b:fa:f0:3a:fd:c2:
         8e:03:20:91:4f:f6:11:70:68:c1:23:3b:e0:5c:6f:4a:2a:f3:
         ce:0d:89:3a:c9:ca:aa:4b:3c:a8:62:63:02:52:79:41:f2:66:
         c2:57:b1:f4:c6:7d:e0:cd:b4:a1:10:13:29:56:11:5e:b7:8d:
         34:f4:be:78:ce:24:fd:d4:b8:ab:c8:8b:5f:b2:1a:c2:23:7c:
         f7:ea:8a:6f:06:bd:2d:e5:75:cc:bc:31:76:9a:80:f5:45:d5:
         83:2e:8e:f1:4b:e1:26:26:08:7e:ad:94:f1:de:5e:36:25:d1:
         06:36:94:39:a2:e4:7c:4d:7c:a6:58:55:cc:69:5b:15:b0:c0:
         2c:87:26:e3:95:8e:7a:e5:95:b6:ae:7f:4b:d3:26:c5:82:ec:
         35:d6:1a:a6:1f:2c:ad:88:4c:21:4e:d3:a2:d3:4e:ea:59:28:
         1f:ec:f9:16:e4:53:e2:db:4c:1a:e6:9d:38:de:0d:fa:fb:f6:
         77:49:e8:f3:f6:0c:13:74:1b:e4:2d:0a:e5:ae:d2:d2:39:e1:
         f8:a7:10:25:85:90:fa:31:e0:6d:cf:27:52:b3:03:a0:a4:d2:
         3e:d8:0c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----