Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c3d1d7bc-8e61-3c00-b4a5-3001ca2fddc3.roa
File:                     c3d1d7bc-8e61-3c00-b4a5-3001ca2fddc3.roa (raw, json)
Hash identifier:          dOm6sGAEo6+QF8agmAZq+ncQXsp7ZaGyaT4Hmfc9WRI=
Subject key identifier:   C1:C5:1C:8C:CA:14:75:BE:97:70:D8:A6:7E:7B:B3:E2:78:39:83:FD
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840AD22597A341A8BD4138DE590
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c3d1d7bc-8e61-3c00-b4a5-3001ca2fddc3.roa
Signing time:             Mon 23 Jan 2023 12:00:00 +0000
ROA not before:           Mon 23 Jan 2023 12:00:00 +0000
ROA not after:            Tue 28 Feb 2023 05:00:00 +0000
asID:                     22394
IP address blocks:        155.146.64.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:ad:22:59:7a:34:1a:8b:d4:13:8d:e5:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 23 12:00:00 2023 GMT
            Not After : Feb 28 05:00:00 2023 GMT
        Subject: CN=e305a523-8456-4858-9054-b7ab94c344f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:19:80:ef:0e:a9:ef:15:1d:f8:fd:10:2f:a2:
                    82:99:e0:7b:71:09:4b:b0:f5:c4:d1:7b:32:3c:33:
                    26:2f:42:96:b8:15:07:44:7b:f4:3c:22:c7:d5:66:
                    05:e8:4d:3f:cd:9d:ea:90:88:27:53:9d:ff:fc:e2:
                    78:56:dd:c7:27:53:bf:72:e3:31:9a:e5:5e:60:5b:
                    0c:b5:e3:e7:58:77:24:b5:b5:23:0d:8e:30:e0:c1:
                    9f:b1:19:6a:c5:88:47:5c:50:a0:7c:f0:df:35:33:
                    f5:61:2d:57:a9:1e:58:0a:2d:85:7a:93:d9:5d:22:
                    26:58:8f:f4:b0:84:ce:56:5d:01:6c:72:cf:ee:16:
                    6f:50:f9:58:d9:af:76:5f:08:d9:72:c2:87:95:81:
                    e9:f2:4d:fd:b3:e1:43:ef:5f:df:25:71:73:85:71:
                    a8:43:b2:8f:d7:58:c4:ce:bd:48:21:f5:0e:39:87:
                    b9:16:73:79:f6:fd:74:a4:7c:31:1c:fd:e9:0b:e1:
                    b0:86:2b:24:1e:60:02:d4:f2:23:5e:7f:15:ec:db:
                    a0:c2:e3:10:21:72:bb:2c:1d:f1:7f:a5:df:0a:d6:
                    43:7b:9e:ba:e6:f1:98:b3:72:fd:6c:0a:de:34:3f:
                    57:84:a6:9d:17:cf:76:ad:0f:40:3d:b8:9d:d3:78:
                    9b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C5:1C:8C:CA:14:75:BE:97:70:D8:A6:7E:7B:B3:E2:78:39:83:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c3d1d7bc-8e61-3c00-b4a5-3001ca2fddc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.146.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:32:7e:7e:c4:df:34:1e:3d:a2:ee:86:7b:9d:07:0c:3a:61:
         7c:21:e1:3b:dd:3f:1b:3f:b0:bb:7c:02:8d:fd:3e:89:1d:83:
         37:05:72:9e:ed:43:ef:be:05:55:36:70:68:24:fb:4c:60:ce:
         4c:f0:30:10:86:84:47:53:82:79:1b:6e:e1:d7:d4:cf:62:28:
         e4:e7:cd:8e:90:39:6f:af:7d:03:cb:a9:fc:23:33:a2:35:83:
         32:18:5b:98:52:e4:ed:08:d7:53:bc:bf:83:c8:a7:3d:75:cf:
         d8:1e:fd:00:70:4a:8a:61:89:52:6b:3c:13:d2:be:47:e0:05:
         b9:47:3f:b3:db:55:81:c2:07:67:b3:a7:30:7d:a8:ec:a9:89:
         eb:19:63:77:10:27:4d:bd:56:b6:6c:19:33:b6:b0:ef:26:21:
         08:dd:c3:dd:d9:b6:10:7c:f7:02:7a:08:a5:87:ce:48:84:fe:
         9c:ae:3b:66:2c:7d:af:47:be:8b:d7:27:2a:1e:46:ef:96:b7:
         5d:3f:b5:7c:a3:07:a2:1a:15:93:db:f4:f2:18:a2:65:ab:ed:
         f3:64:10:37:0f:d2:68:ea:d3:83:f7:d9:86:39:16:2a:bc:c5:
         8b:d1:9a:8d:4f:74:7e:88:83:9a:c2:70:91:0d:a1:f9:2f:18:
         b9:b3:5d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:35:09 2023 by rpki-client on console-fra.rpki-client.org