Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c776a73a-f68e-3265-9b50-481a0729e574.roa
File:                     c776a73a-f68e-3265-9b50-481a0729e574.roa (raw, json)
Hash identifier:          iH4SyADqtumHH83WW9juRB3WMGn0Gh/sJyi53GL8Gq8=
Subject key identifier:   27:D4:AF:87:3C:16:57:E7:2F:1A:BD:4C:16:F1:C7:20:14:4F:FD:2C
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D9F79E0CC58AA05EF3F7E4780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c776a73a-f68e-3265-9b50-481a0729e574.roa
Signing time:             Tue 19 Apr 2022 04:00:00 +0000
ROA not before:           Tue 19 Apr 2022 04:00:00 +0000
ROA not after:            Tue 24 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        155.146.64.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:9f:79:e0:cc:58:aa:05:ef:3f:7e:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Apr 19 04:00:00 2022 GMT
            Not After : May 24 04:00:00 2022 GMT
        Subject: CN=6647ebcd-0d40-4a77-8e1e-4811cacc01bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:10:be:17:3c:14:7a:72:d8:1c:92:cb:0e:e2:
                    da:5e:58:9a:4f:06:2f:1f:e6:80:5f:c1:a3:0a:70:
                    bd:d0:c6:8f:e6:bf:5a:a7:f2:97:33:e9:02:73:7b:
                    d8:e3:88:cd:08:0c:78:b7:65:47:60:ce:68:ae:10:
                    c9:9e:2d:3e:3b:38:99:6e:4c:13:1a:46:00:70:aa:
                    d8:77:6a:f8:62:1c:7a:86:76:a0:15:9e:44:6f:19:
                    8d:bc:19:1e:df:46:7e:5e:be:1d:d9:0a:a7:50:7a:
                    cc:34:99:5a:9c:ab:99:ef:fd:75:d1:ec:9d:df:ce:
                    d4:b3:66:09:37:ca:b7:13:9a:ea:cd:f0:05:a8:c5:
                    ab:4b:14:c6:eb:be:f6:50:4c:cd:d6:ac:fe:5a:61:
                    31:18:56:cd:8c:3b:fe:2e:6f:0d:97:a8:42:0d:59:
                    34:d0:5f:ec:6b:d5:18:6a:2a:40:ea:e4:3b:de:71:
                    58:30:55:cd:ee:1f:33:be:fb:32:d5:3e:be:dc:78:
                    9e:60:6c:c7:c8:24:fb:dc:61:7b:b7:8a:e2:0c:1e:
                    2e:5b:df:d8:a6:20:7f:4f:56:d4:16:f5:4a:b6:dd:
                    ea:ca:6e:b0:6c:cd:22:58:90:07:bb:00:69:d7:af:
                    e3:75:ce:d9:39:01:43:62:5c:1a:eb:02:99:1b:3e:
                    08:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D4:AF:87:3C:16:57:E7:2F:1A:BD:4C:16:F1:C7:20:14:4F:FD:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c776a73a-f68e-3265-9b50-481a0729e574.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.146.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:94:6c:ed:ad:65:71:4d:c8:4b:3e:28:f1:55:e8:63:0b:19:
         5f:58:e9:8c:58:e0:cc:2a:05:19:35:d0:d9:00:13:cf:1c:17:
         e6:ec:74:eb:1a:db:e0:fa:c6:7a:cb:d0:4d:f4:9c:c2:96:e2:
         be:f7:22:65:1c:12:38:c6:0f:fb:12:82:ce:bd:c5:7a:e4:cb:
         a3:10:4f:9a:a8:92:3b:ee:5c:f7:fb:e3:a3:5d:68:aa:1d:d4:
         10:2a:9c:f8:40:16:a1:70:69:76:f2:7f:4e:40:83:34:38:83:
         52:14:c7:82:d0:98:c9:e6:69:80:6d:8d:d8:d5:db:8b:b1:f6:
         00:c0:45:25:61:5f:b5:88:12:a5:40:1e:1b:dd:1a:76:24:e6:
         33:7b:2c:1d:21:fc:01:75:e0:b6:07:9a:7c:eb:8d:e5:54:56:
         5d:28:bb:60:15:e0:5f:52:65:e8:9e:75:2a:a4:70:64:24:75:
         13:74:ae:a9:5e:ba:7f:a1:1a:97:5d:26:1a:a6:31:1e:da:b1:
         30:4d:d1:8a:04:70:98:81:a4:e2:6b:aa:96:b8:2b:b5:d7:69:
         dc:8b:10:c2:d7:68:a3:b7:a7:41:88:e3:ed:ba:af:6d:51:ff:
         48:43:2a:25:3d:73:d5:58:e2:d6:22:15:21:a8:10:cc:31:ae:
         af:a9:88:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----