Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a15721fe-0ad4-3a1c-a41d-4f609a872f1e.roa
File:                     a15721fe-0ad4-3a1c-a41d-4f609a872f1e.roa (raw, json)
Hash identifier:          JznhL0kVoPA9gaPyCCcJ1i30BTsGAQf6s4F9+i3mfjY=
Subject key identifier:   D0:C7:96:AF:A7:06:AE:BB:8C:D6:B4:9B:4A:F8:02:03:C2:94:6A:0D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858409F430D7A7C5E005630A194B8
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a15721fe-0ad4-3a1c-a41d-4f609a872f1e.roa
Signing time:             Wed 18 Jan 2023 12:00:00 +0000
ROA not before:           Wed 18 Jan 2023 12:00:00 +0000
ROA not after:            Thu 23 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        15.154.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:9f:43:0d:7a:7c:5e:00:56:30:a1:94:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 18 12:00:00 2023 GMT
            Not After : Feb 23 05:00:00 2023 GMT
        Subject: CN=0eaf3525-1832-4ca1-9c20-fae270a6926f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:85:84:26:83:c1:25:13:86:5c:ec:9a:bb:89:
                    94:c3:0e:ca:e4:84:1b:79:16:85:e2:67:14:04:13:
                    99:42:52:c3:cb:06:2a:0c:57:63:f6:69:2d:27:87:
                    6a:8a:49:a1:02:13:a5:37:ae:2d:c1:90:47:6e:9d:
                    f3:e1:10:01:27:e6:7d:1d:b0:3a:ad:4e:1b:51:54:
                    db:e3:ad:a2:92:c0:c9:0a:49:a9:dc:bc:ca:26:cc:
                    c6:3d:b0:60:b0:cf:2c:3e:6d:5c:40:cb:01:cb:26:
                    0c:1d:1d:b9:58:03:b5:35:54:9b:a3:f8:b6:0c:b6:
                    ad:ca:97:99:5a:7d:bd:f1:bf:75:b7:0b:9d:cc:e5:
                    56:84:36:0d:88:a4:07:3c:40:79:9a:7e:95:37:fc:
                    ba:95:53:0d:76:86:a4:89:2d:59:93:92:44:d0:8e:
                    51:4a:59:92:a9:9a:25:5c:b7:1f:8a:e4:fa:3c:f5:
                    1b:5d:4c:c9:0b:f8:fd:4d:f0:e5:2c:de:5f:ca:28:
                    95:29:1f:09:98:ad:b2:b9:c2:fe:3e:d8:9f:57:5c:
                    ab:45:12:51:e1:dc:71:8b:56:bc:85:7b:57:d8:a1:
                    fb:43:6f:68:07:fc:4e:16:36:19:59:6d:a9:7e:ac:
                    07:84:2d:6c:2b:04:3e:2b:a9:da:79:a8:ca:ec:c6:
                    f2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C7:96:AF:A7:06:AE:BB:8C:D6:B4:9B:4A:F8:02:03:C2:94:6A:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a15721fe-0ad4-3a1c-a41d-4f609a872f1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.154.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:b9:a9:0f:80:e3:e5:e0:e0:05:e8:4a:48:69:bf:5b:98:3d:
         b1:28:31:0c:2e:28:14:94:33:dd:c0:21:14:33:b9:da:c0:30:
         87:77:0f:4f:73:a0:c5:a8:db:dc:d8:6f:cb:68:cf:19:08:a2:
         47:cb:71:d7:10:3c:2d:eb:7b:b6:14:f4:f1:d1:90:5f:79:1a:
         31:7d:e8:43:4f:50:1a:f8:bf:e2:41:d1:4e:a5:c0:8d:73:71:
         42:ab:42:08:b0:0b:3e:8a:b7:16:89:0b:08:60:80:cf:eb:4c:
         00:66:22:7d:1d:d8:81:82:3f:8b:c0:f9:4d:3f:99:40:99:2c:
         62:b6:15:1d:48:c5:5a:85:6a:a4:16:e1:66:54:8f:bf:ee:73:
         f7:64:c4:d5:ad:4f:62:6d:76:57:68:18:fe:6d:64:43:4d:73:
         4c:d1:af:cd:5f:de:85:ae:cb:52:12:17:f2:6f:a9:ab:13:02:
         b9:07:8c:8c:9a:ff:83:5f:25:39:f7:7d:2f:73:67:80:74:9d:
         a2:e3:3f:30:9e:bf:11:9b:a7:03:80:e0:0d:9f:e3:9e:e8:d8:
         79:5a:0e:36:81:5c:04:0b:97:ba:06:44:25:06:e2:de:80:6b:
         98:a8:af:3c:12:32:cb:30:b2:e6:ab:6f:8a:16:3b:58:8f:ae:
         79:9a:65:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----