Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/af867b29-215a-36c2-9610-f9be052c1d3d.roa
File:                     af867b29-215a-36c2-9610-f9be052c1d3d.roa (raw, json)
Hash identifier:          I/TEHjqEWwMvRF9OoG6TILSgrG9GBPs333iBr7qFFiU=
Subject key identifier:   42:02:35:43:44:BA:CC:E7:0A:59:F6:2C:B2:35:4B:88:0F:57:41:F2
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840A04F18318D16777D47358C40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/af867b29-215a-36c2-9610-f9be052c1d3d.roa
Signing time:             Wed 18 Jan 2023 12:00:00 +0000
ROA not before:           Wed 18 Jan 2023 12:00:00 +0000
ROA not after:            Thu 23 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        15.209.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:a0:4f:18:31:8d:16:77:7d:47:35:8c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 18 12:00:00 2023 GMT
            Not After : Feb 23 05:00:00 2023 GMT
        Subject: CN=0f77ea26-e921-4f13-9ec7-9b4a7b730dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c1:54:70:a2:b2:96:bf:b8:87:fa:de:66:72:
                    08:a1:18:4e:ed:06:bb:da:57:80:4c:d6:a3:a4:6b:
                    9b:a4:34:8a:99:48:dd:83:cf:df:e9:3c:c9:a3:67:
                    da:ab:e3:30:0c:76:ed:0e:b9:d1:d7:e8:11:7d:07:
                    92:7a:c4:32:22:fe:67:3f:b9:f9:06:49:7f:46:4d:
                    2a:0b:12:e1:23:74:e8:df:7f:4a:17:bf:f5:12:cf:
                    00:7d:96:de:ad:ec:1b:b6:fa:e0:4b:e8:7f:cf:ba:
                    fb:4d:6b:a8:93:ca:d1:74:8a:bc:48:a2:ad:ab:94:
                    29:e4:1a:2a:32:94:4d:bb:f4:94:59:78:1f:28:23:
                    65:65:86:92:f8:54:c8:34:ea:98:21:88:07:12:4e:
                    2a:1d:aa:19:b5:fc:ee:87:75:5c:88:08:c4:e3:54:
                    e8:01:3e:96:e4:97:5b:5e:9d:e3:00:75:e6:00:7a:
                    20:f1:7c:20:40:22:ea:ab:f5:60:62:65:94:33:05:
                    5d:90:70:61:dd:8f:83:7f:1d:f6:d1:cd:19:b9:a1:
                    0d:7f:34:d2:56:ae:67:2b:a6:21:84:a4:43:83:78:
                    6b:57:bd:63:db:db:9b:c9:c6:70:ed:94:c4:66:7f:
                    18:06:81:9b:cb:f2:87:1c:88:2c:52:1c:6b:7e:6a:
                    79:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:02:35:43:44:BA:CC:E7:0A:59:F6:2C:B2:35:4B:88:0F:57:41:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/af867b29-215a-36c2-9610-f9be052c1d3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.209.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:8b:6b:ed:22:78:bb:ca:d4:75:9d:e4:f8:6d:4f:51:e5:a1:
         3f:72:5d:8e:54:bb:2b:e3:61:36:7b:87:90:fd:36:6c:42:a2:
         12:d7:46:1e:ac:a0:da:ad:0a:f8:f2:cb:9c:dc:2f:6c:34:eb:
         65:49:5f:40:62:dc:72:e9:72:b7:90:e9:c7:51:02:1c:2f:8b:
         95:47:91:4c:dd:50:81:b2:26:a3:46:cf:35:76:13:46:44:56:
         d1:9a:bc:51:60:12:34:e8:5b:3d:14:50:80:63:f4:91:76:89:
         16:fc:3b:bf:fd:12:c2:42:e2:ef:5c:8f:23:e1:ff:dd:80:07:
         65:19:a9:5c:5a:63:d4:c0:56:32:16:a1:01:a8:c2:89:4a:84:
         88:08:98:29:28:35:36:4a:e7:66:fa:ba:47:73:ff:0f:f0:22:
         91:05:6b:82:f2:c6:2e:c3:fa:0c:90:9c:a0:04:7a:55:4f:89:
         1f:c1:b5:1f:9e:29:22:31:c9:61:91:43:aa:91:47:07:e7:e4:
         3b:72:12:d5:60:ee:6f:55:3a:11:3a:d8:f8:c9:56:33:2c:ab:
         98:97:9e:37:14:54:62:9a:32:21:f3:86:af:e0:80:b9:62:1d:
         ee:47:c4:49:9f:dc:81:18:1b:3d:16:d5:07:83:ff:83:81:6d:
         95:53:8c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----