Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/a85d0b9a-d1d7-3d98-85f7-bebda5e71f43.roa
File:                     a85d0b9a-d1d7-3d98-85f7-bebda5e71f43.roa (raw, json)
Hash identifier:          naE84RK0cRS8y+TuNokmrknWxOOzQKdfGLf5b/BcGlg=
Subject key identifier:   A0:9A:D3:9C:06:10:AF:C5:9C:9A:AC:C0:26:A0:7B:1B:AC:2A:5F:18
Certificate issuer:       /CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
Certificate serial:       010D0C9F4328583F565C6A0C3B83739D35050480
Authority key identifier: 6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/a85d0b9a-d1d7-3d98-85f7-bebda5e71f43.roa
Signing time:             Thu 22 Sep 2022 12:00:00 +0000
ROA not before:           Thu 22 Sep 2022 12:00:00 +0000
ROA not after:            Fri 28 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        50.112.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:56:5c:6a:0c:3b:83:73:9d:35:05:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
        Validity
            Not Before: Sep 22 12:00:00 2022 GMT
            Not After : Oct 28 04:00:00 2022 GMT
        Subject: CN=7b5818e7-d9d8-43fa-a7ab-9cf0d67806ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2d:75:97:37:b9:09:37:4d:aa:69:d0:b5:e5:
                    00:25:5e:a5:a8:48:fe:37:53:c8:f2:50:63:73:78:
                    74:ae:23:55:47:76:c4:34:90:09:0a:99:1f:fd:00:
                    9f:b3:ee:cc:c7:43:c9:20:b5:9b:62:6b:93:f2:97:
                    1e:29:88:9b:f2:1a:ee:f7:f0:1e:0d:a4:6b:77:6a:
                    ff:05:de:82:10:39:97:41:22:1d:cd:fd:9d:22:8a:
                    2b:37:b7:c3:24:6d:2d:a8:4f:1b:44:d7:a5:5a:9c:
                    f5:74:7a:db:04:58:8b:b7:6a:fe:76:74:78:d3:48:
                    d1:fe:09:69:8c:fd:74:a1:6b:3a:e9:a3:12:30:65:
                    63:73:f2:8e:4e:29:59:bf:a6:6e:b1:07:41:07:d6:
                    73:e8:75:6d:41:1c:65:62:09:3f:b7:e7:26:b9:64:
                    ef:57:d3:37:30:f2:53:c7:35:e5:07:04:4e:c4:8e:
                    e3:f2:06:30:e9:52:fe:3a:41:e9:7a:6a:48:d6:d4:
                    19:c8:91:90:66:de:0f:4a:b3:0f:0b:30:5e:4e:c5:
                    68:39:f6:25:92:7d:c6:bc:87:12:c4:99:12:4a:f4:
                    e5:ca:a9:86:9a:0b:23:3e:9e:39:dc:54:92:0f:87:
                    a0:66:09:ff:56:d6:7a:2d:d8:9c:37:bc:7a:07:8d:
                    ca:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9A:D3:9C:06:10:AF:C5:9C:9A:AC:C0:26:A0:7B:1B:AC:2A:5F:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/a85d0b9a-d1d7-3d98-85f7-bebda5e71f43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.crl

            X509v3 Authority Key Identifier:
                keyid:6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:39:76:5d:f5:a9:ce:c1:40:fe:e9:b2:43:8c:a9:c7:34:e1:
         5c:ed:37:d5:b9:2a:0e:f7:12:a2:a0:62:43:0e:66:2d:82:2a:
         a2:7f:55:be:0e:56:84:fd:10:4b:6c:46:75:11:14:03:8f:01:
         f6:ab:79:2f:05:d0:6f:03:61:6e:b2:f5:5b:56:ec:8a:89:01:
         ea:cd:9b:35:9c:d0:08:8f:6d:5f:d5:03:cd:d0:7d:98:92:84:
         05:7c:6f:8a:a3:d7:b6:f7:ec:fb:bc:0b:1d:ea:ca:73:f4:e4:
         d9:87:fb:73:c7:d3:87:d2:ac:55:29:7d:77:62:5e:55:4a:ff:
         7c:84:1e:04:c9:11:a6:c5:c9:c4:da:02:fa:c9:27:28:22:c9:
         79:af:3c:e4:58:c4:11:53:a1:c0:4b:b3:b6:69:d3:37:50:9e:
         93:13:77:0d:44:1a:42:f9:5a:af:1b:12:e5:c8:9c:ed:3f:65:
         43:be:11:03:85:72:d3:70:72:cb:78:01:cc:2f:8a:08:e8:8d:
         76:29:3f:c6:67:5d:6a:0c:20:8b:bc:71:3d:1c:78:50:78:81:
         d7:29:6a:31:10:68:3e:b3:c5:0b:1f:28:b7:83:e7:9e:4e:99:
         28:cf:d1:7a:bf:d0:8e:50:3a:b7:18:ae:0a:b8:30:d9:f0:ad:
         d4:6c:0f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----