Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/851a9b06-d07b-3655-a8e8-6d59abb57ae9.roa
File:                     851a9b06-d07b-3655-a8e8-6d59abb57ae9.roa (raw, json)
Hash identifier:          Jx/cb/c1foBNRxp3uWBY3zbAjNq/RBvKkGkyOuBgZzo=
Subject key identifier:   74:7E:74:76:15:2B:F0:B7:C6:5B:59:25:87:73:B3:C6:66:16:E6:46
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840647D914A3B3C09324354A040
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/851a9b06-d07b-3655-a8e8-6d59abb57ae9.roa
Signing time:             Wed 28 Dec 2022 12:00:00 +0000
ROA not before:           Wed 28 Dec 2022 12:00:00 +0000
ROA not after:            Thu 02 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        15.160.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:64:7d:91:4a:3b:3c:09:32:43:54:a0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 28 12:00:00 2022 GMT
            Not After : Feb  2 05:00:00 2023 GMT
        Subject: CN=be543117-8bf8-4198-ada4-d4cb0e24b114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2c:55:40:84:4c:3f:c4:a7:5b:7b:dc:75:ec:
                    44:50:9d:eb:58:a3:ce:34:62:09:4e:49:d9:44:69:
                    d0:b1:de:82:69:84:ad:d0:d3:97:0b:69:61:c5:55:
                    74:ab:27:43:ee:2c:67:74:f7:42:8d:23:c5:fa:29:
                    af:53:94:5e:4f:76:d1:43:71:cd:52:61:02:32:5b:
                    c9:2b:99:7a:f4:66:e7:2b:3b:32:04:e3:56:63:84:
                    48:65:7e:42:30:d1:db:f4:18:57:43:72:b2:92:9d:
                    85:09:f9:4e:0e:fa:8c:ca:7e:00:da:ac:4e:5a:52:
                    01:85:4a:65:e0:d6:34:57:71:72:78:fb:4f:19:06:
                    8a:e3:88:cb:5e:50:3d:6d:85:34:ea:6d:1f:16:47:
                    51:3f:90:92:5f:16:7a:fd:34:fe:d7:eb:a0:91:0c:
                    7f:c1:ef:64:de:7b:34:b9:66:5d:62:7b:5c:94:cf:
                    dc:94:ab:4b:bb:08:d2:69:7c:91:8a:eb:96:72:66:
                    54:bf:34:b8:de:0e:1d:8f:4b:b4:c9:4f:41:29:f5:
                    f8:b5:de:13:08:b0:58:83:a4:34:2c:c4:1f:82:f4:
                    56:25:c0:26:ad:19:78:d1:9a:9a:d7:c0:e5:dd:30:
                    28:b4:cf:ac:6d:23:d2:a3:da:5d:24:26:e6:53:cc:
                    62:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:7E:74:76:15:2B:F0:B7:C6:5B:59:25:87:73:B3:C6:66:16:E6:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/851a9b06-d07b-3655-a8e8-6d59abb57ae9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.160.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:ff:c3:c9:26:07:b3:d5:1e:5a:5e:76:9e:f0:81:18:79:b5:
         21:46:88:5c:a5:38:6d:38:6b:88:70:b4:50:40:02:14:86:64:
         28:47:23:b0:b1:b7:92:53:20:37:45:20:1f:24:95:e4:05:28:
         35:93:93:ca:42:d0:c2:d3:87:7d:cb:a5:47:cf:fe:1a:d7:00:
         5c:2d:f1:90:c6:8e:4a:e4:e0:be:37:15:3c:01:68:e1:ea:8d:
         32:11:37:66:eb:3d:ea:d0:d1:9e:a2:ae:e9:dc:fe:0f:01:81:
         c1:ff:ea:4d:4c:c9:c7:79:5a:20:50:30:d9:fd:d6:9d:45:af:
         2f:80:17:b7:0e:c7:89:c7:42:60:4c:de:93:23:9f:f1:e8:79:
         30:cb:c9:55:f5:92:73:27:50:72:6b:44:00:c4:ed:51:93:66:
         6e:bf:b8:eb:fc:b4:b9:ec:9b:e5:c9:d4:13:98:d7:2f:35:7f:
         1a:e5:59:c6:7b:18:20:5f:50:08:4a:26:af:36:68:24:71:5c:
         1c:c7:f4:99:d8:11:3c:fc:68:cf:55:ee:39:b9:ef:de:73:6c:
         fd:e5:f2:ed:cc:e8:e9:53:05:b8:db:30:db:3d:c3:69:c3:01:
         17:4c:ca:42:c9:72:4e:aa:85:2f:f2:77:5d:6a:72:39:03:2b:
         b8:99:f3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----