Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/68d33e88-1329-38fc-8221-615f74dd9261.roa
File:                     68d33e88-1329-38fc-8221-615f74dd9261.roa (raw, json)
Hash identifier:          mmFOoFMoak8TUgQivWvFEF2wEDnxtJQBse5hlnUkCX8=
Subject key identifier:   06:0D:17:1B:7D:74:C3:3C:55:F1:D1:7D:4D:16:11:20:64:51:8F:37
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328584078528A7C204905E728209BC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/68d33e88-1329-38fc-8221-615f74dd9261.roa
Signing time:             Wed 04 Jan 2023 12:00:00 +0000
ROA not before:           Wed 04 Jan 2023 12:00:00 +0000
ROA not after:            Thu 09 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        15.210.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:78:52:8a:7c:20:49:05:e7:28:20:9b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan  4 12:00:00 2023 GMT
            Not After : Feb  9 05:00:00 2023 GMT
        Subject: CN=a0a82b93-f2ed-4af6-bc19-a00cb246d7e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:fe:46:ac:af:65:5c:1f:cd:bf:7f:b3:bc:68:
                    1d:09:e4:b3:97:4e:5c:e2:9f:9f:95:c9:50:7f:ec:
                    02:ef:48:38:f7:8c:c3:8e:bb:a5:fb:e6:5d:10:52:
                    b6:ca:f2:5b:bd:95:a3:c2:ae:c9:37:80:a2:aa:38:
                    18:8d:05:0c:5e:a2:af:0f:b1:52:35:5f:3d:4c:12:
                    a4:aa:3b:85:39:c8:96:a0:3a:c5:5a:67:0f:25:4f:
                    9b:35:dc:4e:7b:4a:0c:61:ee:1b:ca:75:6a:c5:96:
                    9e:37:ba:13:cd:27:a7:95:30:f9:cb:fd:d0:ab:60:
                    fa:7a:f3:8f:0b:b6:9d:a4:b6:21:6d:64:98:35:69:
                    57:b0:1c:92:91:03:b4:0d:be:1c:f2:3e:26:d4:1d:
                    ab:56:f2:14:2e:f5:ae:b1:6b:3a:92:94:ef:5c:60:
                    a9:a1:c9:23:4d:51:1e:d5:96:45:49:e3:d6:20:0f:
                    29:60:7b:cd:7f:b2:c2:44:1a:93:ed:e3:11:8d:c3:
                    c5:57:19:ce:00:4e:01:10:5e:95:30:ba:f0:78:ea:
                    06:2d:89:2c:04:3b:af:cc:2d:df:d3:95:a7:6a:0e:
                    c6:e9:4d:66:72:fd:dd:b2:f9:73:84:b3:7b:d7:81:
                    22:84:2f:16:24:c4:52:dd:08:0e:6d:e3:89:e9:70:
                    4f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0D:17:1B:7D:74:C3:3C:55:F1:D1:7D:4D:16:11:20:64:51:8F:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/68d33e88-1329-38fc-8221-615f74dd9261.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.210.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:31:c6:bb:8c:eb:1f:e4:de:dd:11:c7:c5:12:42:86:3f:86:
         2d:51:5a:9a:2d:05:29:85:9d:0b:48:b4:0a:a2:29:d2:8c:ea:
         e3:fd:6c:76:b9:72:8e:c9:c1:e4:0b:ef:14:c2:e0:ed:a7:ec:
         25:6f:49:d4:8e:3d:89:47:6c:aa:2c:83:be:e1:f7:f7:6d:79:
         b3:6b:77:39:07:54:1f:9d:75:f8:ad:22:0f:67:41:0e:2b:bd:
         8c:59:56:c7:23:4b:9b:e4:83:c8:a4:01:b9:7a:f2:3c:de:33:
         3c:d5:7f:1f:97:05:7e:34:97:76:91:f9:91:3d:76:3c:a1:2d:
         7b:f2:91:f8:bb:5f:21:83:19:4f:29:48:46:34:c8:04:ac:b3:
         fc:d8:47:3a:f9:54:f3:95:f3:b4:e8:3a:75:f1:71:92:68:ac:
         69:43:20:f0:53:c9:cf:16:39:8f:fa:77:fe:48:b5:af:84:a7:
         61:82:e6:f8:42:8e:b9:de:ef:4c:f1:91:20:d7:63:9e:c6:3c:
         de:d3:a7:c5:89:c3:ef:e7:07:c9:d5:dd:93:57:bd:d3:d7:bb:
         90:9e:e2:d7:cd:1a:4f:9e:29:b9:bf:5d:20:60:df:eb:1d:c7:
         30:73:bb:8b:17:09:a7:59:d7:f9:b1:e7:17:97:9a:e1:5c:a5:
         49:dd:1f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----