Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/99b39b40-6b58-3226-b7c5-0c969806a6de.roa
File:                     99b39b40-6b58-3226-b7c5-0c969806a6de.roa (raw, json)
Hash identifier:          LOiFr9fsqjWjTLE7KTCOm05wvU98X7tjTTmHtMI6kFM=
Subject key identifier:   9E:E2:92:14:DB:B4:30:54:24:99:80:13:1F:56:25:0F:62:5B:71:51
Certificate issuer:       /CN=c097bbd1-dde1-4ee5-a727-5ee45da69052
Certificate serial:       010D0C9F4328583FB8A994097F9629AE9D1BB560
Authority key identifier: 24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/99b39b40-6b58-3226-b7c5-0c969806a6de.roa
Signing time:             Wed 29 Sep 2021 20:03:54 +0000
ROA not before:           Wed 29 Sep 2021 20:03:54 +0000
ROA not after:            Thu 30 Jan 2025 05:00:00 +0000
asID:                     397423
IP address blocks:        157.254.194.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b8:a9:94:09:7f:96:29:ae:9d:1b:b5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c097bbd1-dde1-4ee5-a727-5ee45da69052
        Validity
            Not Before: Sep 29 20:03:54 2021 GMT
            Not After : Jan 30 05:00:00 2025 GMT
        Subject: CN=2cf93e70-8c4d-4dc7-8cfe-e13d269ce6b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:41:b4:ba:63:19:87:d7:8c:15:e7:2d:ad:55:
                    04:b8:16:03:21:bd:4d:40:33:3b:54:e3:e4:a2:dc:
                    40:8e:75:b0:05:60:e9:52:22:5e:fe:e3:50:a6:e7:
                    6c:73:b9:b9:27:f4:c3:03:ca:6b:51:4f:65:7d:1f:
                    dc:e7:21:f1:96:73:21:30:31:16:54:62:c5:90:52:
                    45:6c:bd:10:73:7a:57:f2:a7:4b:5b:1e:ef:ed:43:
                    b2:ef:db:33:07:4b:49:db:0d:36:e0:47:c1:5d:23:
                    be:5f:c2:44:51:3d:88:33:c6:7d:a4:80:f0:76:91:
                    8c:5b:71:3a:7a:0b:db:fc:dc:da:59:98:ee:8d:b1:
                    0b:11:31:9a:b5:1d:57:fb:aa:61:57:c1:6a:f8:32:
                    97:d4:3f:d7:c8:e2:17:2f:a7:22:b2:56:43:fd:58:
                    8f:00:25:b2:9f:cf:f2:b5:41:13:81:a6:91:0e:96:
                    f8:55:9e:4a:5d:c3:8e:b2:e1:5f:f0:6f:eb:b3:07:
                    d4:a9:cb:f0:e3:f0:7c:2c:cf:b6:c0:f1:66:e9:64:
                    a0:0b:c3:76:d1:29:39:53:69:26:cf:05:9c:6d:97:
                    7f:e7:a3:ca:6c:b3:63:98:6c:89:26:5a:4c:42:82:
                    9e:a9:fd:06:43:d3:7a:e1:d6:66:c1:98:fc:38:2f:
                    87:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E2:92:14:DB:B4:30:54:24:99:80:13:1F:56:25:0F:62:5B:71:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/99b39b40-6b58-3226-b7c5-0c969806a6de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/c097bbd1-dde1-4ee5-a727-5ee45da69052.crl

            X509v3 Authority Key Identifier:
                keyid:24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:93:40:64:fe:af:e7:16:7d:71:82:c3:c0:df:27:2f:77:fd:
         4f:df:90:c5:60:eb:8b:7c:b6:33:8e:29:6b:78:df:da:80:0b:
         88:01:24:3f:eb:e0:43:92:c5:f7:27:78:37:40:d2:11:46:21:
         73:3a:92:b7:53:ad:98:ba:1d:d0:f1:fa:4d:dd:c4:be:6d:be:
         9c:b5:72:f6:89:3e:78:15:ae:76:be:57:ff:2c:42:93:75:57:
         94:b6:ff:60:96:d8:08:27:da:a6:a3:da:4e:5c:40:bb:94:6c:
         f4:a7:b9:55:41:82:7b:5e:d1:de:bf:37:25:89:e1:f4:0f:18:
         37:cd:b6:15:4c:dc:a9:56:24:10:35:5b:b5:c4:59:42:d7:bc:
         8e:07:4a:b2:65:e4:1d:a3:a8:3d:91:ee:30:1f:a1:3e:62:9b:
         22:7a:2c:67:01:39:d1:1a:91:5b:22:82:82:4e:f1:78:75:5c:
         0f:de:87:61:9c:16:a5:e8:25:a0:2b:68:e3:f7:34:6e:e2:37:
         d5:6b:7d:72:a7:21:8f:cc:07:a5:21:89:64:99:f5:3a:54:e7:
         f5:f3:15:a9:3a:97:9c:b2:57:94:25:67:7a:fa:e8:4f:4b:59:
         98:f7:de:8d:87:03:5e:af:af:af:a7:97:d6:04:6c:27:d5:4e:
         80:e1:07:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----