Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35e5abbc-d049-4f24-b1e7-96dde9bf811b/0d3617e2-6d80-3192-9dff-526578e4ed5f.roa
File:                     0d3617e2-6d80-3192-9dff-526578e4ed5f.roa (raw, json)
Hash identifier:          A9FpJClrrAeaJdLJA1YwlowlBcuobRaAm1Q4ek3eVTo=
Subject key identifier:   E0:34:E2:97:93:70:02:8D:5A:1A:C8:92:CD:AC:CD:A1:40:71:57:91
Certificate issuer:       /CN=35e5abbc-d049-4f24-b1e7-96dde9bf811b
Certificate serial:       010D0C9F43285845B383703BE880079CA67C8C00
Authority key identifier: DD:D0:05:E4:FB:45:62:2F:02:F7:3E:C8:68:1E:48:AB:C9:78:C2:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35e5abbc-d049-4f24-b1e7-96dde9bf811b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35e5abbc-d049-4f24-b1e7-96dde9bf811b/0d3617e2-6d80-3192-9dff-526578e4ed5f.roa
Signing time:             Mon 29 Apr 2024 01:00:25 +0000
ROA not before:           Mon 29 Apr 2024 01:00:25 +0000
ROA not after:            Sun 28 Jul 2024 01:00:25 +0000
asID:                     7896
IP address blocks:        129.93.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b3:83:70:3b:e8:80:07:9c:a6:7c:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e5abbc-d049-4f24-b1e7-96dde9bf811b
        Validity
            Not Before: Apr 29 01:00:25 2024 GMT
            Not After : Jul 28 01:00:25 2024 GMT
        Subject: CN=5b24991c-e6c3-4f43-b530-16865d3839a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:34:53:45:de:80:a8:14:94:bf:96:45:bc:b6:
                    c9:bc:94:95:dc:d7:b4:53:bc:7f:0f:d7:c9:bc:5b:
                    38:6c:a4:7a:05:e5:6c:71:4e:a5:2b:ab:33:82:66:
                    ef:6e:dd:1e:e0:1d:09:13:58:ea:65:8a:96:e8:70:
                    2b:2c:d9:06:a4:84:dc:70:cc:7c:f7:d4:e9:c3:b1:
                    98:57:6c:8c:fa:55:0a:5e:ca:41:5b:7b:87:07:a1:
                    f6:6e:93:eb:6a:58:28:54:c0:21:91:94:88:c2:d5:
                    87:4e:82:3d:9a:3c:ae:3e:6d:df:17:48:09:29:40:
                    f9:65:b1:c1:20:9c:b9:48:cd:67:73:92:05:f6:ef:
                    a2:14:34:80:87:e5:a3:44:a3:96:22:7d:7a:ce:0f:
                    8d:58:c3:9e:ef:38:b8:96:c9:46:10:21:4f:e2:f2:
                    c1:fa:fa:4f:bc:6c:59:91:64:45:1e:6f:e7:94:b5:
                    36:c0:52:eb:5b:b6:2a:20:ae:32:d4:fc:62:95:e1:
                    e5:c0:c6:bd:ee:cf:3a:bd:37:34:91:9d:ef:4e:ac:
                    ee:fa:26:eb:b7:e0:25:70:25:e6:46:89:c3:92:e5:
                    33:0f:99:45:15:f9:dd:76:1d:34:2f:42:44:36:1c:
                    a3:51:eb:8f:a1:e6:e6:f0:1b:57:09:f6:c9:99:2c:
                    57:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:34:E2:97:93:70:02:8D:5A:1A:C8:92:CD:AC:CD:A1:40:71:57:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35e5abbc-d049-4f24-b1e7-96dde9bf811b/0d3617e2-6d80-3192-9dff-526578e4ed5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35e5abbc-d049-4f24-b1e7-96dde9bf811b/35e5abbc-d049-4f24-b1e7-96dde9bf811b.crl

            X509v3 Authority Key Identifier:
                keyid:DD:D0:05:E4:FB:45:62:2F:02:F7:3E:C8:68:1E:48:AB:C9:78:C2:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35e5abbc-d049-4f24-b1e7-96dde9bf811b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.93.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:d2:f7:01:73:d1:a3:5d:d6:a8:2c:26:d5:0d:32:c0:db:a4:
         22:ea:3d:e9:7b:5c:be:ba:87:35:11:12:a8:8b:e8:f3:47:76:
         f3:38:e6:d0:9b:5d:d5:5d:03:3f:36:a2:71:2e:cb:b2:36:6f:
         df:78:b6:58:95:00:fc:38:dc:ca:0f:46:c0:84:2d:57:77:24:
         33:33:e4:4f:d1:2f:1d:9e:79:3a:01:8a:47:d1:c9:ef:f7:46:
         ee:7a:3b:d1:32:4b:a0:53:bf:7d:7d:64:5f:88:69:f0:c9:11:
         90:31:59:5d:dc:93:4d:e4:ab:5b:1b:44:f6:64:83:6c:4a:e4:
         e7:2d:bf:94:86:77:15:71:86:ed:45:d8:d1:76:64:4b:13:83:
         ad:13:56:e9:01:dc:ef:53:0a:6a:fe:c0:3d:cd:5b:80:f5:f5:
         27:b8:bb:66:07:7a:b6:02:e1:6a:3c:0d:fa:d4:a6:79:a0:e3:
         8d:03:82:50:d2:7e:68:29:32:10:33:88:52:f2:5a:0c:35:51:
         7a:7c:83:ee:c9:70:98:83:a3:4d:24:e3:84:06:ca:71:16:b9:
         dd:32:d2:b0:dd:46:0a:5c:01:66:32:9d:0a:38:46:eb:c4:e9:
         dd:20:1b:28:1d:3f:54:c9:96:64:5c:a5:7d:c6:cd:fd:bf:58:
         c5:2c:22:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----