Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/4d301732-0330-3705-864a-cc6e6a882c66.roa
File:                     4d301732-0330-3705-864a-cc6e6a882c66.roa (raw, json)
Hash identifier:          nOOrxWWFka9+GFBDaSHggbMDUU1J2FcWjJmReeRa2WI=
Subject key identifier:   E8:09:0A:3F:DD:98:6D:A0:2B:C7:D7:DA:F3:2C:F0:98:A8:9A:91:77
Certificate issuer:       /CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
Certificate serial:       010D0C9F4328583CBD7685B49E34AD863C165280
Authority key identifier: 6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/4d301732-0330-3705-864a-cc6e6a882c66.roa
Signing time:             Fri 28 Jan 2022 05:00:00 +0000
ROA not before:           Fri 28 Jan 2022 05:00:00 +0000
ROA not after:            Fri 04 Mar 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        50.112.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:bd:76:85:b4:9e:34:ad:86:3c:16:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
        Validity
            Not Before: Jan 28 05:00:00 2022 GMT
            Not After : Mar  4 05:00:00 2022 GMT
        Subject: CN=c7791f75-a208-4105-9601-79a0eec79ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0c:3c:62:3b:69:6a:8e:9c:f7:f5:15:0a:43:
                    ea:4e:73:e8:08:96:22:c3:70:97:23:be:18:b0:43:
                    cf:31:2e:bd:e0:d5:08:9b:d5:11:16:02:4f:a7:85:
                    36:aa:a1:a0:67:a7:32:76:ec:e1:0f:85:e1:e3:bf:
                    8d:5f:87:93:78:53:a6:d9:05:98:f8:b7:96:a1:74:
                    33:d6:85:f6:b3:9c:13:0f:29:b1:3c:a0:13:01:ad:
                    82:6c:09:86:b9:0b:18:68:a5:c2:44:a2:be:b7:2a:
                    25:49:38:22:e1:57:cf:d4:bd:d6:d4:26:0a:76:fe:
                    9b:11:e0:17:49:ec:b5:2b:d5:a0:36:e8:37:e6:19:
                    1f:9e:11:c1:95:48:f9:a1:78:23:57:ce:2f:77:af:
                    d3:72:6e:27:58:d1:be:54:58:22:37:0a:06:53:89:
                    6d:16:02:7e:bd:44:da:53:38:75:25:c8:67:ff:aa:
                    2d:30:87:00:d7:5b:0f:64:5c:17:e5:95:84:42:b6:
                    d0:d5:81:1c:00:55:6c:ee:37:d6:cf:fc:19:20:89:
                    9b:65:88:37:4d:3c:6f:7a:f4:42:50:5c:9c:c2:6f:
                    10:85:9d:2a:df:14:96:ad:f1:73:b5:5d:65:37:20:
                    5f:3d:29:c7:7d:0d:ce:b0:ad:54:c6:9b:23:bd:0b:
                    9b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:09:0A:3F:DD:98:6D:A0:2B:C7:D7:DA:F3:2C:F0:98:A8:9A:91:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/4d301732-0330-3705-864a-cc6e6a882c66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.crl

            X509v3 Authority Key Identifier:
                keyid:6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:1e:8b:d3:d1:e5:1e:9d:0b:99:43:b3:48:15:0a:bc:8f:f2:
         d6:02:c8:6e:a0:54:d3:2b:46:3f:e5:44:b8:55:c6:e3:d1:88:
         c1:24:1f:18:a9:44:8a:51:12:1e:58:8f:e0:ac:d7:87:01:6c:
         4b:1b:19:42:c5:8d:a8:7a:26:e5:c2:2b:c6:a1:f2:71:46:c5:
         e2:06:f2:51:b7:c3:ba:0e:a3:e4:f1:65:ad:45:89:a3:97:2f:
         30:7c:06:9d:59:db:7c:80:e8:aa:32:c5:79:88:10:56:ec:5c:
         92:b5:9e:75:02:85:c4:4c:4d:82:ee:c7:14:50:f1:0d:9f:45:
         1c:ef:6a:6f:9c:e6:61:f3:35:4f:0e:f3:d7:97:1b:8f:a0:1f:
         ee:24:3c:f2:a0:d1:7f:91:ec:b6:f8:65:1d:0d:c3:15:bb:1e:
         1b:cc:f2:f7:69:b2:f5:fa:df:e6:5b:b7:9a:d7:25:e3:85:ba:
         b2:95:fb:9e:3b:19:ef:aa:98:38:c5:f6:f6:06:d9:3f:02:56:
         f7:3a:a6:6c:96:e8:52:04:2a:54:2a:a3:38:6c:65:89:9d:cb:
         58:0d:4a:34:59:2e:cf:98:a8:ba:cf:e6:db:30:5b:50:5f:33:
         13:60:86:5e:0c:93:00:88:d4:5b:64:42:3c:54:14:a7:e3:7f:
         8f:f2:58:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----