Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/49c546ac-cdd7-3e9c-8c0a-171f5918d03d.roa
File:                     49c546ac-cdd7-3e9c-8c0a-171f5918d03d.roa (raw, json)
Hash identifier:          Vl4Ut3TnJT9nF6F52AFZutJQcSmWF713dXMiS63ge/w=
Subject key identifier:   19:E9:9B:5A:CD:82:03:90:E8:AF:29:1E:65:00:B9:AF:C1:41:77:CF
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858408C18E232072CD21F748E7D80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/49c546ac-cdd7-3e9c-8c0a-171f5918d03d.roa
Signing time:             Wed 11 Jan 2023 12:00:00 +0000
ROA not before:           Wed 11 Jan 2023 12:00:00 +0000
ROA not after:            Thu 16 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        15.156.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:8c:18:e2:32:07:2c:d2:1f:74:8e:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 11 12:00:00 2023 GMT
            Not After : Feb 16 05:00:00 2023 GMT
        Subject: CN=ae9e8d3c-dc18-469c-859a-a2bfd21a3118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:74:8d:14:e1:d6:81:9f:25:86:f7:7c:0f:0c:
                    ab:fc:b8:37:cf:51:18:6d:3f:b5:32:f8:fe:0f:f1:
                    b0:06:76:43:86:cd:3f:b2:d1:01:ed:2c:f6:36:da:
                    2b:e9:39:4a:1a:c7:ac:ee:af:b0:c5:9c:d1:c8:96:
                    9a:c9:0e:0c:4e:bc:1f:69:10:18:5d:9a:8a:fe:00:
                    7c:e6:e7:af:5e:90:29:a7:f8:c6:35:da:82:58:6c:
                    b5:37:ce:66:a5:c6:57:6d:9e:98:07:31:8d:66:c3:
                    50:84:2c:94:f0:24:f6:16:10:35:9b:ab:63:d5:dd:
                    2f:f9:75:aa:4f:45:27:e8:f7:d1:5a:2f:ec:1d:cd:
                    94:b5:c5:54:20:03:90:88:4c:09:01:d4:f9:0a:d4:
                    b5:2f:2e:08:56:ca:20:16:05:16:dd:62:dc:97:8f:
                    30:a6:58:58:de:ab:3a:80:1e:9b:d6:19:23:b2:59:
                    b7:e8:16:ba:43:33:c1:59:1a:20:d0:ae:e1:1f:9b:
                    c9:10:3e:2f:62:9d:12:6e:a5:30:bc:1e:a9:37:2a:
                    a3:c3:b4:b3:0c:da:26:b4:36:8b:9e:ad:fe:1d:4f:
                    34:da:16:1f:c9:03:35:ab:52:91:f8:ec:b3:56:d4:
                    84:b2:b2:6f:ef:18:f5:cf:f0:82:3a:3a:3b:bc:f6:
                    74:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E9:9B:5A:CD:82:03:90:E8:AF:29:1E:65:00:B9:AF:C1:41:77:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/49c546ac-cdd7-3e9c-8c0a-171f5918d03d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.156.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:ee:4d:91:cb:c0:d0:1b:ef:c7:6b:5b:a0:13:3e:47:09:82:
         25:e1:7b:ba:f7:38:30:a3:30:33:e6:72:0f:6b:bb:5e:f9:91:
         8b:99:a2:ab:36:9d:83:3b:a8:6d:2e:d7:37:0d:ba:da:b9:3f:
         02:a5:f3:a7:e5:14:f9:c6:57:e7:e1:ef:64:46:07:db:22:3a:
         86:55:37:36:0e:c6:5e:3b:66:22:a6:4e:69:da:23:15:32:21:
         54:45:bb:b0:8d:3a:85:aa:d5:c7:ac:b9:33:9c:9d:d6:ab:49:
         b6:7b:5f:5b:63:65:8b:7c:5c:29:c8:31:88:61:be:fa:90:d1:
         7e:e4:07:0f:48:c2:94:93:72:e4:b0:6f:f3:57:df:7a:c9:c8:
         c0:2a:96:aa:44:9b:45:66:f7:b4:1a:77:23:f8:7e:0c:9a:1e:
         09:00:f5:6f:a9:06:30:16:eb:39:da:03:4a:4c:31:29:26:de:
         b0:3c:8a:11:02:a9:41:96:64:5b:91:a2:66:78:91:39:fa:89:
         2c:c1:4c:5b:98:c6:ba:cd:bf:ba:12:06:de:87:20:30:de:fd:
         9f:43:d6:63:2d:b2:a1:29:4c:59:0b:1e:6d:98:f3:a5:a6:ac:
         5d:8f:1e:ea:f2:dc:fb:97:7a:62:be:06:d7:cf:8e:e6:64:92:
         5a:6c:8a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----