Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/db432af8-f150-37a2-8933-e1cd7119ca34.roa
File:                     db432af8-f150-37a2-8933-e1cd7119ca34.roa (raw, json)
Hash identifier:          mlSp7hJpfmHsKXebM3I6YTXdbmsJeWraF78WTR0Vr4w=
Subject key identifier:   D9:1A:25:1F:83:C0:EE:9F:AA:37:E3:5F:9D:2C:B0:84:AF:45:CF:FE
Certificate issuer:       /CN=c097bbd1-dde1-4ee5-a727-5ee45da69052
Certificate serial:       010D0C9F4328583BAC016BA8E3525CDC0F453C80
Authority key identifier: 24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/db432af8-f150-37a2-8933-e1cd7119ca34.roa
Signing time:             Wed 29 Sep 2021 04:00:00 +0000
ROA not before:           Wed 29 Sep 2021 04:00:00 +0000
ROA not after:            Thu 25 Jan 2024 05:00:00 +0000
asID:                     7018
IP address blocks:        157.254.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:ac:01:6b:a8:e3:52:5c:dc:0f:45:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c097bbd1-dde1-4ee5-a727-5ee45da69052
        Validity
            Not Before: Sep 29 04:00:00 2021 GMT
            Not After : Jan 25 05:00:00 2024 GMT
        Subject: CN=6309e54f-f0a9-4b25-b929-d4c46127438b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0b:ca:e9:d9:4b:cd:38:82:84:c3:57:78:d1:
                    7a:09:87:4d:6c:1e:f3:25:06:8d:3b:98:7a:37:90:
                    23:e3:86:eb:b1:9b:c1:c2:2e:48:fa:93:d1:81:37:
                    23:30:0b:2d:31:9a:3f:3a:9f:b7:5d:c7:39:3c:43:
                    a0:a4:54:c5:68:7d:ec:6b:ab:47:55:0a:5e:05:e6:
                    92:a1:e3:8e:81:50:6d:38:dd:1e:97:84:6d:1a:81:
                    66:97:63:0e:d2:f3:86:f6:2e:6f:07:ac:88:7b:ea:
                    4e:7d:4c:3d:2e:86:fb:88:82:78:3e:97:38:68:37:
                    5a:d3:09:0a:11:a1:a0:8e:c7:f5:55:aa:c6:12:9d:
                    21:25:fb:1d:b4:29:6f:1c:4d:b1:13:0f:2c:a7:16:
                    cd:0f:28:26:aa:48:55:20:97:b1:a0:0a:9c:e0:6f:
                    0d:f1:42:b7:82:20:0b:8a:cb:bd:ec:4b:fa:d6:3f:
                    51:98:80:d0:4b:68:07:f5:cd:74:2f:d4:38:90:a9:
                    99:b7:d4:a4:0d:3a:60:d1:62:5b:5b:c5:dd:3a:68:
                    58:48:2a:6c:b2:9b:5f:47:3a:6b:13:63:ce:ab:d5:
                    b6:c3:ed:cd:c5:59:de:ec:90:b1:d0:00:dd:e3:f3:
                    0a:33:4b:01:c6:f6:f5:77:52:e3:14:21:17:9c:05:
                    fc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:1A:25:1F:83:C0:EE:9F:AA:37:E3:5F:9D:2C:B0:84:AF:45:CF:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/db432af8-f150-37a2-8933-e1cd7119ca34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/c097bbd1-dde1-4ee5-a727-5ee45da69052.crl

            X509v3 Authority Key Identifier:
                keyid:24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:8b:b7:75:20:1b:e2:5a:eb:9c:b5:c8:f1:2d:21:4f:f8:38:
         0c:7f:7a:7a:4a:4d:c0:1b:17:f8:35:40:9b:26:d0:19:80:90:
         2f:82:00:e4:e5:44:e2:3d:b6:f0:a2:1b:52:de:b8:2d:e4:79:
         20:f1:70:c2:51:3a:99:da:83:04:fc:b9:94:24:b3:ba:0b:fe:
         af:d7:24:22:a8:0b:6a:4e:5a:77:b0:6e:5b:99:71:99:e6:72:
         eb:8b:99:73:ae:01:eb:02:36:23:cf:43:86:25:68:73:96:b9:
         fc:f0:11:58:a0:37:28:dc:c9:91:f4:7d:7f:3d:f5:f9:76:3f:
         12:57:73:ed:2f:30:12:ca:12:42:23:cb:e8:85:07:a1:1b:93:
         94:c8:30:07:0a:61:1d:82:89:17:be:f9:3e:34:e9:45:84:e7:
         5d:32:e5:4c:0a:b4:aa:92:2b:a8:57:43:cc:8a:09:38:1c:5d:
         0c:79:9e:b8:c2:1a:9c:23:8f:e0:d2:13:89:9b:b7:d5:15:db:
         15:02:8d:8f:86:b8:0d:0f:80:ae:b0:4b:18:02:9f:92:77:d7:
         3e:30:7a:d3:20:52:e2:93:8c:6c:c6:42:ce:68:67:4c:85:7a:
         72:ff:03:5e:f2:b8:76:64:b0:89:db:72:c4:c0:e5:56:2f:24:
         17:f6:81:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----