Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/1cf2e4c2-c0a6-39da-964a-e6c3beaa5039.roa
File:                     1cf2e4c2-c0a6-39da-964a-e6c3beaa5039.roa (raw, json)
Hash identifier:          Rf24Lbva5t+nSZstL3bB7ok7hnbgQkgYoEWUVf2YLa8=
Subject key identifier:   88:9F:60:CD:7F:32:F9:1F:EC:A4:33:13:C1:D7:89:07:94:31:AA:4E
Certificate issuer:       /CN=c097bbd1-dde1-4ee5-a727-5ee45da69052
Certificate serial:       010D0C9F4328583ECD60C94DA8542A6F2BD00390
Authority key identifier: 24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/1cf2e4c2-c0a6-39da-964a-e6c3beaa5039.roa
Signing time:             Wed 29 Sep 2021 20:03:54 +0000
ROA not before:           Wed 29 Sep 2021 20:03:54 +0000
ROA not after:            Thu 07 Nov 2024 05:00:00 +0000
asID:                     398373
IP address blocks:        157.254.248.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:cd:60:c9:4d:a8:54:2a:6f:2b:d0:03:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c097bbd1-dde1-4ee5-a727-5ee45da69052
        Validity
            Not Before: Sep 29 20:03:54 2021 GMT
            Not After : Nov  7 05:00:00 2024 GMT
        Subject: CN=b4be6f75-5af4-44c0-a140-b0fd609ef235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0d:14:87:cc:73:8c:16:33:8a:52:2c:bb:b8:
                    5d:88:e4:2b:da:c3:b9:b3:28:23:44:99:0a:eb:c2:
                    a6:e5:3d:a5:20:1a:d2:d3:13:0f:bb:c8:77:47:c1:
                    4a:a0:c5:30:0e:d0:e7:b9:b9:7b:1f:7f:fa:34:1b:
                    15:21:ac:ab:41:12:96:4d:e4:c0:85:0c:13:de:3d:
                    bd:8d:9a:ee:f6:d2:18:1a:c2:e2:49:99:a3:5a:0e:
                    a0:1b:3a:00:c1:ba:42:3c:12:30:e5:8e:0a:61:e5:
                    08:c6:49:34:f3:28:31:41:4c:11:4a:e0:d8:e7:af:
                    56:84:b4:47:0f:6d:1e:87:0d:04:55:0c:95:ea:b7:
                    86:fc:73:e0:10:11:d0:1c:33:f7:17:b6:00:ee:33:
                    73:5b:d6:30:30:1c:36:e5:7f:4c:4e:51:ca:76:28:
                    2c:41:94:03:0b:5a:bc:ca:63:49:7b:a8:ba:e4:1f:
                    40:20:60:72:b4:3d:87:a1:75:2f:80:14:61:93:59:
                    21:1f:45:e3:c1:85:56:f0:5a:da:58:54:c0:0b:20:
                    e5:f5:7f:7c:be:bb:03:fe:48:b2:e1:24:cc:a7:ae:
                    6b:f3:d0:cb:94:7c:be:3a:8c:41:a5:80:0b:8a:43:
                    f7:4f:dd:a5:29:fc:57:c7:9e:b2:aa:2e:14:27:e9:
                    e2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:9F:60:CD:7F:32:F9:1F:EC:A4:33:13:C1:D7:89:07:94:31:AA:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/1cf2e4c2-c0a6-39da-964a-e6c3beaa5039.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/c097bbd1-dde1-4ee5-a727-5ee45da69052.crl

            X509v3 Authority Key Identifier:
                keyid:24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:c4:60:08:0e:7d:7e:8a:f6:ac:9b:1a:5c:f9:d5:38:41:0e:
         20:cc:d0:3b:4d:c8:c9:e6:5a:66:ae:cc:f3:c4:15:60:23:0d:
         94:47:ff:33:94:0c:32:b5:41:3c:88:aa:83:fe:c4:74:33:bc:
         a6:7c:4e:6f:9f:d3:52:d2:03:3e:3d:55:e2:ae:4b:5e:ec:31:
         b6:7f:4d:74:35:5b:45:aa:cd:43:8d:34:09:d5:b7:35:45:35:
         ed:27:2e:97:40:d7:65:b9:66:25:14:69:d4:11:94:9d:9d:b6:
         47:72:e4:95:56:64:fb:90:51:cd:31:54:67:fc:61:17:fd:c7:
         df:6b:17:3c:90:b6:54:7c:7e:57:31:7c:02:e1:df:7f:b3:2d:
         3f:8b:d5:75:37:4a:b0:6f:0b:3e:6a:57:76:74:ae:28:ae:34:
         75:d3:09:92:21:65:cc:ec:4c:54:c0:96:f9:7e:2e:e6:4d:7d:
         e5:8e:8a:56:64:7c:e4:f1:30:ae:c7:c3:03:7b:18:9a:a4:ed:
         01:17:73:48:14:35:b7:41:e3:70:09:12:2e:cc:4d:6b:40:e4:
         01:a3:d5:1c:a8:b2:01:40:1a:de:13:ad:bc:bb:f1:d6:4f:6e:
         aa:49:c1:16:43:64:a7:8b:e6:23:8b:1b:87:e2:1b:72:f6:64:
         24:9c:dc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----