Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/eb22e70b-9042-32d4-b904-3f6fc908e1a5.roa
File:                     eb22e70b-9042-32d4-b904-3f6fc908e1a5.roa (raw, json)
Hash identifier:          MMQZ9+aEUODQVaAEYaROfIdBHGUmZrYFFEnEEDhiWNg=
Subject key identifier:   4D:73:66:EA:B3:36:B5:5C:ED:79:36:FD:87:E8:62:48:8C:D0:00:3A
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DBB30983FE808C86442E81EC8
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/eb22e70b-9042-32d4-b904-3f6fc908e1a5.roa
Signing time:             Thu 28 Apr 2022 12:00:00 +0000
ROA not before:           Thu 28 Apr 2022 12:00:00 +0000
ROA not after:            Fri 03 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        141.185.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:bb:30:98:3f:e8:08:c8:64:42:e8:1e:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Apr 28 12:00:00 2022 GMT
            Not After : Jun  3 04:00:00 2022 GMT
        Subject: CN=6d0cdd4d-62b5-4afc-a30a-8deb5ffce4ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:3b:c4:79:34:cb:8e:ff:51:ac:2c:02:92:2f:
                    05:88:62:99:d6:3b:76:e1:a0:87:fb:9f:c6:b3:03:
                    80:6a:42:56:55:b7:59:0a:d4:77:7b:5d:a4:28:e7:
                    f5:eb:88:c2:eb:cc:28:91:d5:cd:68:bd:43:5c:77:
                    a0:15:2d:7e:71:29:30:b8:07:b2:3c:4a:1a:3c:78:
                    ea:8d:b2:a1:c8:77:01:08:6b:90:79:54:62:01:b6:
                    75:d8:cc:fa:02:0a:09:04:29:ec:bd:86:df:2b:6c:
                    bc:a9:62:d7:ef:87:7a:07:d9:97:d9:52:d8:53:07:
                    64:d9:99:43:b4:08:5a:45:13:31:bb:bc:35:5a:f0:
                    0d:62:83:09:e2:40:d4:ea:24:0d:70:d9:c9:e7:5e:
                    80:ae:31:6b:65:1c:30:9b:c5:d0:0f:bf:69:9f:43:
                    ed:c0:dd:86:37:1f:ef:2a:30:0e:36:c8:38:62:fa:
                    d6:9e:8e:9a:01:89:1a:29:db:57:cb:07:20:98:7f:
                    04:3e:b9:0d:ad:a8:ad:9c:cb:58:d9:1f:af:7f:ae:
                    bc:fc:8e:3a:a6:ec:35:a9:d2:6f:b3:1c:33:6f:b7:
                    83:fa:c8:b5:55:47:d8:b3:eb:81:59:c4:0a:e1:ff:
                    f5:4c:f5:bd:90:80:cd:af:19:01:31:8d:f7:1a:c8:
                    44:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:73:66:EA:B3:36:B5:5C:ED:79:36:FD:87:E8:62:48:8C:D0:00:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/eb22e70b-9042-32d4-b904-3f6fc908e1a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.185.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:22:64:59:f3:d0:26:b0:16:cc:d7:23:0b:76:33:86:30:c0:
         56:6f:51:34:44:f9:7c:82:49:83:d8:d3:52:ea:ff:59:9e:67:
         b2:57:7e:6e:f2:30:2e:4a:92:d8:28:85:18:81:52:06:50:1a:
         04:7c:38:56:c2:3a:d4:b1:06:66:7d:d3:56:1e:a2:82:cb:7d:
         a6:ba:7c:b6:3c:ad:a8:30:dc:d3:09:60:92:ba:ef:f9:00:da:
         e2:26:e8:e4:84:f4:58:ff:d0:69:73:a9:c2:84:43:cf:90:b1:
         12:a5:77:6a:87:41:b6:a9:e2:2b:25:c1:70:7a:f8:1d:bb:83:
         26:ec:d7:8f:1f:a7:b1:95:39:64:29:a5:95:5e:27:31:58:ce:
         c7:08:7b:51:04:1f:16:ab:33:1e:8f:e6:2b:9c:df:f6:9c:b5:
         d9:83:3f:89:7b:17:42:5a:4b:f0:be:68:56:9e:9d:14:a5:63:
         77:2e:c8:e5:4b:db:1f:74:97:fe:c3:f0:9f:9f:48:c4:2d:7c:
         93:54:a0:6a:60:ef:be:c0:2a:9e:65:c9:12:32:57:b6:d0:ac:
         9c:75:58:e4:89:02:ce:d4:8f:36:5c:7b:f1:89:a8:1a:ee:5f:
         72:12:cd:58:e6:2b:6a:c0:8e:2f:d2:23:f4:38:3c:e8:24:93:
         49:ac:46:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----