Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc/8ebad5f0-e7f9-306e-b744-529db3714378.roa
File:                     8ebad5f0-e7f9-306e-b744-529db3714378.roa (raw, json)
Hash identifier:          H3cgE0t+aYA+mJk2E/TWS9efNjfNeRxusgHjTDD07cI=
Subject key identifier:   21:31:DD:26:7E:13:85:07:5C:DC:92:7D:96:B2:93:B9:8F:7B:34:01
Certificate issuer:       /CN=5054a223-c485-46b0-b02c-2fdc3bfe26bc
Certificate serial:       010D0C9F4328583F872B20F3A6BF48EC97D51880
Authority key identifier: 8B:F7:51:E2:E3:D2:43:13:56:DE:2E:5A:0B:B4:F8:A0:BA:4D:40:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc/8ebad5f0-e7f9-306e-b744-529db3714378.roa
Signing time:             Thu 06 Oct 2022 18:12:08 +0000
ROA not before:           Thu 06 Oct 2022 18:12:08 +0000
ROA not after:            Fri 13 Jan 2023 05:00:00 +0000
asID:                     54681
IP address blocks:        23.134.94.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:87:2b:20:f3:a6:bf:48:ec:97:d5:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5054a223-c485-46b0-b02c-2fdc3bfe26bc
        Validity
            Not Before: Oct  6 18:12:08 2022 GMT
            Not After : Jan 13 05:00:00 2023 GMT
        Subject: CN=a426dc0c-a40b-48f7-a100-5a4b61235689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:07:6a:ff:df:0e:28:1f:d9:e8:96:db:f0:df:
                    fd:17:9a:7e:bd:24:44:13:5e:75:48:a9:d5:f7:77:
                    36:47:a5:4b:da:30:31:ca:b9:12:12:2a:64:43:1d:
                    54:61:fe:da:c5:c4:d0:6d:fc:49:fb:5f:d9:45:e5:
                    16:93:03:bf:f0:f0:1d:ee:8e:33:e5:97:b6:ce:3c:
                    65:fb:24:3f:88:fd:36:ab:4a:33:b7:db:9c:69:fd:
                    32:09:04:18:dd:0c:a1:48:66:d3:15:98:d2:74:44:
                    70:0f:4e:1e:86:57:d8:5a:93:9d:ac:28:19:2a:a7:
                    71:e0:58:f6:ca:9c:98:79:7f:35:d0:bf:44:3e:2a:
                    12:e0:1c:28:d3:42:e8:48:5d:15:bf:10:c2:3c:51:
                    6a:6f:82:f9:d0:21:7b:b1:b3:d6:70:e9:c3:27:14:
                    e5:83:16:cd:60:46:b1:e4:34:87:e9:26:50:95:11:
                    dc:df:e4:60:40:6b:b2:ad:30:9c:29:23:bb:62:08:
                    6d:92:6f:f4:78:9b:9a:d1:68:b5:68:63:21:99:61:
                    8e:4d:b5:52:8a:1c:25:11:3b:5e:94:86:9a:81:1f:
                    a0:0e:42:e6:4e:3f:e1:7f:18:59:47:74:f2:5c:8c:
                    1a:ab:d4:f6:d0:f0:29:be:a2:eb:72:2a:fb:12:d3:
                    9d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:31:DD:26:7E:13:85:07:5C:DC:92:7D:96:B2:93:B9:8F:7B:34:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc/8ebad5f0-e7f9-306e-b744-529db3714378.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc/5054a223-c485-46b0-b02c-2fdc3bfe26bc.crl

            X509v3 Authority Key Identifier:
                keyid:8B:F7:51:E2:E3:D2:43:13:56:DE:2E:5A:0B:B4:F8:A0:BA:4D:40:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:1e:40:a6:0b:36:8a:7c:87:e6:ca:48:c9:3d:7b:02:93:09:
         f7:07:74:36:2a:ac:d7:73:b1:70:39:de:04:da:27:da:09:60:
         47:c2:61:eb:62:d2:7d:52:6d:5a:0e:9e:87:5d:01:d5:81:88:
         d9:59:0d:d7:1b:c9:63:c7:ca:08:b3:2e:84:73:45:36:ca:bc:
         99:b8:a8:6f:73:2d:73:f6:f2:94:94:73:08:7e:70:26:7d:7d:
         eb:fb:5b:41:0c:a9:84:21:13:f9:6c:e1:d2:95:86:c5:28:76:
         c5:53:9b:c6:33:ad:2f:bb:85:5e:e6:58:1e:a0:f2:55:88:1d:
         47:4f:c2:55:df:6a:6a:69:f5:7c:2d:2a:2f:4f:1b:f2:cf:3a:
         0c:ce:08:64:07:46:88:31:bf:20:c7:26:0f:8f:0a:40:26:c6:
         0f:43:cf:f5:b6:e1:46:9f:a3:e2:7f:68:dd:9f:08:22:a3:f5:
         7a:30:17:93:88:e5:8e:c0:eb:27:9e:37:76:96:f3:6f:32:13:
         19:55:81:a1:67:81:c0:f7:b7:65:5a:51:ea:c1:ef:f0:4a:d7:
         7a:13:c1:4f:39:55:59:f3:fa:42:52:9c:5f:fe:1f:72:af:5d:
         99:9a:9b:80:cb:b9:95:85:77:ca:84:06:bb:94:dd:76:b0:0a:
         66:ed:a8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----