Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/000193db-7882-39b8-b940-96d705fb8843.roa
File:                     000193db-7882-39b8-b940-96d705fb8843.roa (raw, json)
Hash identifier:          SKX9Ay/RzBslfTz2ncSHRro6tMwrLuAvyDxgHnAHge0=
Subject key identifier:   A3:F9:E2:99:6F:3E:13:29:80:2E:93:DF:4C:77:A6:DC:8B:A4:ED:25
Certificate issuer:       /CN=c097bbd1-dde1-4ee5-a727-5ee45da69052
Certificate serial:       010D0C9F4328583DFF3CA06AEE31AB125A6C9B00
Authority key identifier: 24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/000193db-7882-39b8-b940-96d705fb8843.roa
Signing time:             Wed 29 Sep 2021 20:03:54 +0000
ROA not before:           Wed 29 Sep 2021 20:03:54 +0000
ROA not after:            Sun 25 Aug 2024 04:00:00 +0000
asID:                     16509
IP address blocks:        157.254.154.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ff:3c:a0:6a:ee:31:ab:12:5a:6c:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c097bbd1-dde1-4ee5-a727-5ee45da69052
        Validity
            Not Before: Sep 29 20:03:54 2021 GMT
            Not After : Aug 25 04:00:00 2024 GMT
        Subject: CN=235a76d9-f430-48fc-9c2b-c9f1473174b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ea:d3:1f:a4:ae:72:ec:f3:0c:47:7e:89:71:
                    77:0d:c6:07:27:d5:22:1f:31:91:66:29:2b:dc:c4:
                    4b:3b:7e:7d:4b:94:2b:7e:24:b9:a9:71:6a:8f:30:
                    21:4f:a5:3a:69:29:73:a4:da:bd:8d:e9:30:85:5c:
                    5b:b6:67:1a:b6:10:52:25:2b:d7:6d:0c:aa:ef:72:
                    44:8b:18:98:6c:d0:d7:e8:40:85:0a:7f:2d:3e:81:
                    e0:26:7a:f9:01:71:80:ed:ce:6d:0f:c0:38:3c:2c:
                    40:7f:bb:b0:a8:cb:18:6e:74:c6:40:6f:f1:e0:d3:
                    2e:21:b6:a9:df:22:1d:d6:96:03:ca:dd:60:06:6f:
                    1b:44:04:e5:bd:46:57:b0:97:a7:b6:7f:dd:0d:71:
                    e6:a3:38:5f:0b:98:74:f8:ac:78:ee:78:dd:46:3e:
                    ff:bf:26:ee:73:8d:6c:98:5f:08:75:08:92:de:73:
                    f1:7e:c4:50:c9:be:01:2e:8b:37:c0:bf:69:22:0a:
                    00:b7:af:84:10:89:90:b7:73:7b:22:67:ae:10:a0:
                    6f:55:2e:2b:6f:87:f2:1a:8a:18:48:6c:9b:c3:60:
                    96:4b:f7:17:4b:1d:bb:9d:0b:2e:09:76:f8:6a:3c:
                    a5:75:9d:90:25:51:be:45:25:c2:17:a3:04:df:95:
                    a7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F9:E2:99:6F:3E:13:29:80:2E:93:DF:4C:77:A6:DC:8B:A4:ED:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/000193db-7882-39b8-b940-96d705fb8843.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/c097bbd1-dde1-4ee5-a727-5ee45da69052.crl

            X509v3 Authority Key Identifier:
                keyid:24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:45:91:34:69:45:9e:d9:c7:a4:87:3e:38:b8:e8:23:dc:c5:
         b0:14:23:1a:0e:60:6b:2e:e2:5c:19:8f:20:63:f5:e0:f9:67:
         d4:79:60:4e:47:a3:1d:31:bf:bf:11:75:b6:1e:c8:69:d8:0e:
         fc:60:e0:5f:9a:a8:90:13:08:2c:67:04:5f:52:ce:23:60:ba:
         67:77:55:a0:ce:24:e8:ce:df:9d:23:f6:4f:a1:7d:78:af:8c:
         7a:14:23:d5:df:65:24:ed:7e:5f:a6:0d:18:be:12:d8:b8:54:
         09:ce:cf:c0:7c:42:3f:05:e5:3d:9f:59:28:70:63:e0:07:0a:
         16:70:8c:c0:20:a7:6d:60:2b:de:39:a4:80:e0:25:73:4a:90:
         5d:e7:f2:c7:e2:81:57:79:3e:39:df:c5:35:0c:9a:aa:d9:13:
         6b:ab:b7:48:29:7b:73:67:f1:b9:2a:10:f6:a8:7b:d2:90:5e:
         23:ff:36:0e:ee:f4:94:f2:00:b4:c8:78:ce:bd:2f:ec:54:a5:
         ef:e0:9c:71:4b:4d:28:b7:14:6e:50:bd:60:d5:ca:e4:ec:57:
         d5:61:8b:e0:d0:af:e7:0a:04:40:65:13:d3:a0:09:91:da:18:
         d9:d2:ab:f6:44:fa:c8:b0:73:ec:9e:de:7b:2c:b5:d3:6e:7f:
         9a:93:b2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----