Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f94af326-81df-352d-b952-21794f1279b2.roa
File:                     f94af326-81df-352d-b952-21794f1279b2.roa (raw, json)
Hash identifier:          G4W65COgmiwKWO71PNo7zy71oKupBIbj2OX4zi1Ugvc=
Subject key identifier:   0E:46:47:A8:2E:8B:92:B9:31:8C:F4:3C:22:95:E1:AC:4A:8E:B1:E2
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858407AE1D04AF1D2D5CC0AD5C180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f94af326-81df-352d-b952-21794f1279b2.roa
Signing time:             Thu 05 Jan 2023 12:00:00 +0000
ROA not before:           Thu 05 Jan 2023 12:00:00 +0000
ROA not after:            Fri 10 Feb 2023 05:00:00 +0000
asID:                     36263
IP address blocks:        161.188.216.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:7a:e1:d0:4a:f1:d2:d5:cc:0a:d5:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan  5 12:00:00 2023 GMT
            Not After : Feb 10 05:00:00 2023 GMT
        Subject: CN=7e4904ef-36e9-4d4e-9254-aae1827cf445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6e:51:f5:d3:dd:4f:4e:17:68:7c:76:85:fc:
                    11:a6:60:8a:23:16:16:a7:5a:75:c0:c3:4f:ac:1b:
                    ac:e7:5c:f0:a2:f4:9e:05:a9:95:19:17:ff:a6:41:
                    8f:d6:31:9f:16:44:e6:79:ca:44:d4:a6:da:75:14:
                    2b:6e:fc:35:a5:8d:1a:43:76:3e:f4:7d:da:09:60:
                    e5:ed:3b:ac:9b:6d:af:54:4b:90:5e:95:c5:6f:7b:
                    41:20:5b:b4:b1:40:d9:43:7d:1d:94:9b:51:c9:17:
                    77:0d:0f:91:20:ab:24:5f:75:43:20:52:0d:55:96:
                    84:17:2c:38:e7:03:5b:0e:9b:75:a6:9d:9f:8b:32:
                    3f:78:7a:b2:0f:7f:e2:b6:5c:42:48:c5:c5:6e:25:
                    6a:96:94:d8:06:83:6b:3c:13:a8:9e:87:44:51:08:
                    77:9b:20:dc:fb:45:63:c3:05:ef:16:09:ab:7c:2a:
                    24:51:71:49:40:9a:4d:ee:f4:cc:d2:b2:66:d8:c0:
                    b9:35:ee:b0:23:08:e3:0d:75:8c:25:8d:1a:3f:f4:
                    d8:bd:a3:2c:d0:94:ab:8c:85:5a:91:f5:8b:d4:82:
                    03:d3:56:3a:32:14:9a:b4:2f:8f:95:22:e9:d2:59:
                    c1:db:65:90:3b:9b:7e:ce:84:1e:eb:8a:3b:6c:97:
                    24:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:46:47:A8:2E:8B:92:B9:31:8C:F4:3C:22:95:E1:AC:4A:8E:B1:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f94af326-81df-352d-b952-21794f1279b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.188.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:4a:8e:ce:b9:23:aa:92:ea:f6:85:a1:62:91:47:f2:59:3b:
         dc:17:f6:78:4f:3a:26:0b:08:49:24:17:fd:fe:17:fa:dc:54:
         0b:65:9a:dd:ea:67:73:2f:d0:af:54:d5:b8:19:d9:73:fb:e6:
         eb:37:1d:9f:19:66:eb:eb:4d:f6:dc:2b:a1:73:33:f0:6f:af:
         85:a9:41:6e:82:0b:90:c1:c2:0b:6d:6b:f2:ad:60:c9:65:48:
         2f:0c:14:19:15:02:c4:ad:39:94:e3:09:47:b9:8e:ef:51:49:
         f4:f3:2f:3c:b6:ab:18:05:17:18:eb:55:6a:35:0b:f0:37:df:
         08:c8:11:c9:a0:ae:d8:e8:e4:11:16:24:21:fe:bf:b3:90:7d:
         51:6f:31:49:0a:78:6e:86:af:c7:f0:7d:bc:1c:f2:85:f6:ca:
         83:56:b5:cb:18:9f:03:dc:e4:4a:e3:0a:12:cf:5f:a5:d5:a2:
         46:4a:48:b2:94:09:a1:3f:13:3f:5f:d0:fe:c7:37:20:94:72:
         95:52:95:3a:ff:0a:9a:2c:69:67:00:4c:bb:b4:a0:f7:12:c9:
         d4:72:f5:e4:bb:5e:9f:cc:eb:51:57:b7:23:18:a0:19:ce:ab:
         f1:2d:c3:39:e2:41:6b:13:42:82:e3:ab:98:79:5d:e7:25:eb:
         93:18:20:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----