Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7c58585d-b256-3626-80a4-669624e9fb7e.roa
File:                     7c58585d-b256-3626-80a4-669624e9fb7e.roa (raw, json)
Hash identifier:          LnN9QmmEl071JdLii2tj1KG3fbLmFmiPr7te/pVDU5g=
Subject key identifier:   E4:C4:E9:C7:8F:FD:7D:6C:C0:0B:AA:95:71:82:28:40:27:B4:14:67
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DCC6F3C073B9A2B4C883778C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7c58585d-b256-3626-80a4-669624e9fb7e.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Thu 09 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        15.190.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cc:6f:3c:07:3b:9a:2b:4c:88:37:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : Jun  9 04:00:00 2022 GMT
        Subject: CN=2b46c1f4-0170-4523-b24e-bd9b57f1b73d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bf:bc:b9:c5:c8:f4:e9:bf:e8:f9:9d:04:7c:
                    63:ea:0b:65:8a:f9:4d:e0:a9:ba:4b:f1:2f:60:0f:
                    12:61:e6:0c:f4:b1:e3:f3:f3:67:94:24:e8:db:08:
                    60:b4:a4:8d:fe:49:af:0b:a4:c0:da:fc:3c:d3:ea:
                    89:3e:ae:41:83:d8:36:e8:c3:9f:6c:02:18:b7:af:
                    67:b9:7b:c8:ea:bd:dd:08:b0:35:04:ff:37:3e:a1:
                    a8:7c:e6:47:fe:4e:02:81:e3:d0:27:83:3d:5b:83:
                    93:68:d6:aa:01:61:3f:37:87:42:33:ca:5f:b0:48:
                    06:f1:79:6e:55:48:83:96:d2:21:d0:27:00:25:77:
                    b5:23:4e:fd:42:f9:09:91:8e:56:03:41:14:59:16:
                    64:1e:6c:bd:fa:c7:00:60:43:ba:43:09:55:81:75:
                    7e:89:73:2d:ac:cc:0b:eb:0d:df:48:c1:21:08:85:
                    c5:f8:61:f7:15:38:73:dc:ff:69:c1:30:c2:fc:93:
                    cb:29:0d:3b:5e:34:c4:c1:12:c3:81:56:f7:9e:4c:
                    6b:11:01:a3:0f:61:b0:3d:7c:1f:35:88:88:b6:90:
                    79:25:82:a8:99:cd:c5:ff:84:b7:40:46:a9:8b:6a:
                    dc:1c:19:dc:ea:7c:ec:63:fb:47:9f:ce:f0:92:ce:
                    fa:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C4:E9:C7:8F:FD:7D:6C:C0:0B:AA:95:71:82:28:40:27:B4:14:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7c58585d-b256-3626-80a4-669624e9fb7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.190.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:71:88:d2:3d:c7:96:f0:b7:50:32:1c:2a:d0:52:ab:74:fa:
         66:5a:86:4b:3a:c3:d6:b8:14:93:e6:d5:39:e7:66:3a:f5:b6:
         9f:5d:b9:1d:58:b3:1c:35:da:49:91:4b:b4:8e:ae:7c:1e:38:
         84:ba:69:bb:b2:f4:24:7a:c9:e2:aa:e2:9c:fa:d2:b2:5f:0d:
         60:d3:db:32:e1:93:98:0a:c5:c5:67:8a:34:5f:c7:02:c3:40:
         d2:82:cb:31:86:44:b0:e2:95:9c:6d:2b:ec:5f:a1:0f:8b:52:
         93:0b:5e:60:a2:22:34:6c:3c:bc:5e:71:c0:7d:0c:56:e7:4c:
         7e:e2:6b:b5:08:c2:8d:4a:7a:e8:76:45:d8:ef:ca:03:85:23:
         0e:0a:c2:ea:7e:65:d4:41:ac:fd:ac:47:38:e6:49:bb:10:fd:
         47:e0:f5:33:41:5a:8d:c6:c5:10:14:ee:b3:eb:d4:00:4f:b9:
         4d:ab:38:a5:dd:36:59:46:0b:d4:f7:e4:56:95:bf:4e:7b:78:
         84:05:de:ba:9d:24:b4:d1:5a:e4:ba:d6:39:ac:78:05:10:ea:
         03:33:38:96:84:c5:e3:e4:d9:5f:9f:4b:7c:c9:90:92:e4:14:
         eb:68:9f:57:94:86:86:87:04:9f:da:77:e2:3d:3f:16:10:e9:
         97:04:82:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----