Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/5e7c32e0-734c-3878-9261-87b2f4916711.roa
File:                     5e7c32e0-734c-3878-9261-87b2f4916711.roa (raw, json)
Hash identifier:          QxfOBVrwCvMkbhJ+xd3EJLD3lykdb3VAWYHu2+k1AME=
Subject key identifier:   B9:5A:30:01:3A:D6:EA:B7:E3:70:E0:16:F7:1B:DD:55:45:FC:2D:BC
Certificate issuer:       /CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
Certificate serial:       010D0C9F4328583CE49370E80188B54BA50EF900
Authority key identifier: 6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/5e7c32e0-734c-3878-9261-87b2f4916711.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        50.112.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e4:93:70:e8:01:88:b5:4b:a5:0e:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=d4723e66-d963-466b-b5c8-cf8c3b458784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:90:52:6f:93:5f:42:0c:df:17:c0:94:8f:95:
                    ce:e2:4c:76:3a:a1:9d:5e:28:b8:49:2e:18:30:37:
                    36:6f:79:55:7e:f5:3c:3a:b5:6a:66:93:e7:8b:44:
                    b7:da:eb:46:1c:0d:22:2e:08:48:f1:f2:50:b4:1e:
                    ea:72:af:74:21:73:e7:e5:81:77:7d:b1:35:a6:b1:
                    d2:70:2e:64:12:14:6b:af:79:63:b3:a5:8c:f5:eb:
                    83:8c:c4:b0:d5:f2:9c:a1:d2:a5:f4:c9:01:27:fc:
                    36:b8:a9:13:17:73:f4:51:82:65:97:06:f5:47:9d:
                    5f:e3:3b:d6:2c:dc:f2:f1:b4:be:6e:30:91:d1:da:
                    fd:10:65:24:f6:7e:b1:30:51:85:c4:85:0c:48:e0:
                    7c:36:1b:b0:e6:b5:0d:13:a0:f6:04:7b:54:47:e4:
                    4e:a4:02:ca:0d:51:53:d6:18:e0:33:0a:ac:b4:f5:
                    38:21:40:4c:7f:bd:ac:09:1c:aa:5c:67:c5:80:14:
                    1a:b4:84:a6:6a:25:c4:22:14:2d:4d:1d:e2:b6:aa:
                    f5:87:24:c7:b3:3d:6a:a7:06:ac:7f:8d:9c:83:4b:
                    bc:3c:5f:c0:36:28:d6:97:cf:79:e8:bf:d9:3d:45:
                    0c:88:82:cf:c0:2b:7d:93:72:c6:b8:2a:20:3e:4e:
                    34:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:5A:30:01:3A:D6:EA:B7:E3:70:E0:16:F7:1B:DD:55:45:FC:2D:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/5e7c32e0-734c-3878-9261-87b2f4916711.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.crl

            X509v3 Authority Key Identifier:
                keyid:6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:96:66:2a:6c:1a:f8:79:1f:18:44:a5:95:3e:0c:6b:81:8d:
         7e:3a:20:fe:cc:d7:79:2d:8c:ff:37:92:0c:11:80:c1:e2:3f:
         e3:17:02:90:cc:11:ef:46:d3:19:01:47:96:9d:57:3e:c3:b4:
         7c:12:69:50:74:51:1c:5f:f1:df:e9:29:aa:fe:73:8c:c7:48:
         12:45:4b:ee:c9:81:5b:7d:b2:05:dc:7c:87:fa:75:f9:34:4b:
         e5:b4:16:20:b9:58:d2:fa:fc:60:0f:d6:0c:5a:a6:d2:e0:7d:
         a0:c9:ca:7e:b3:73:2d:4b:b6:36:3d:9d:1a:bc:07:34:78:67:
         87:46:00:ff:4f:f9:91:12:93:52:06:c6:76:be:7a:8c:7c:25:
         81:fb:ef:76:af:3f:e4:6b:53:73:0c:ec:95:a9:64:68:31:4f:
         9e:b0:6c:db:bb:44:d4:00:de:4d:02:06:96:99:b3:5f:3d:2e:
         47:72:be:3e:e8:83:7e:1e:96:e3:4d:28:fe:5a:e7:8b:86:6e:
         79:82:d1:29:f4:55:1a:9e:67:4f:e4:6c:de:5b:9f:78:22:2f:
         64:63:83:20:92:7f:c3:41:b8:85:ba:20:2c:32:4a:a5:9e:67:
         ec:12:30:d4:66:b3:5f:99:8c:6a:86:61:6e:99:02:06:e1:e8:
         a6:2e:ec:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----