Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d191e4e9-53d8-40a2-82a9-2c8ce3155c43/8dff7178-3380-36ea-b2b0-2d64c060f1ae.roa
File:                     8dff7178-3380-36ea-b2b0-2d64c060f1ae.roa (raw, json)
Hash identifier:          yPg+l/bIiNbp1JV4g/AD3DWGEhlQ7ExuNTcNdvzAspg=
Subject key identifier:   84:BF:65:0C:C5:EA:B5:6B:61:26:B7:0B:67:E4:6D:81:7C:7A:F1:CA
Certificate issuer:       /CN=d191e4e9-53d8-40a2-82a9-2c8ce3155c43
Certificate serial:       010D0C9F43285839F29C5FD6D3B048A96F6DCA00
Authority key identifier: A1:CA:18:8C:7E:0C:D7:8B:DB:EC:8B:25:9F:CC:62:01:1B:85:EF:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d191e4e9-53d8-40a2-82a9-2c8ce3155c43.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d191e4e9-53d8-40a2-82a9-2c8ce3155c43/8dff7178-3380-36ea-b2b0-2d64c060f1ae.roa
Signing time:             Tue 22 Dec 2020 05:00:00 +0000
ROA not before:           Tue 22 Dec 2020 05:00:00 +0000
ROA not after:            Sat 19 Aug 2023 04:00:00 +0000
asID:                     2914
IP address blocks:        199.48.182.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:f2:9c:5f:d6:d3:b0:48:a9:6f:6d:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d191e4e9-53d8-40a2-82a9-2c8ce3155c43
        Validity
            Not Before: Dec 22 05:00:00 2020 GMT
            Not After : Aug 19 04:00:00 2023 GMT
        Subject: CN=46bcaf5f-71e3-458a-a1cf-22ecea572f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5f:84:52:df:81:d9:4b:d8:77:49:8e:df:4d:
                    65:97:18:cf:35:33:53:79:13:fa:c7:8a:5c:6b:83:
                    f6:1c:61:c4:a1:67:2b:c0:e4:ed:0d:9a:ab:b8:d4:
                    9a:41:d4:79:67:13:a5:ff:79:17:e7:85:98:a3:66:
                    26:ff:80:61:aa:04:9e:d6:2e:3b:aa:13:bb:ee:ec:
                    4a:91:3a:2a:45:8e:67:ec:fe:11:32:b4:5e:44:a8:
                    82:d0:6b:d3:0a:f6:d8:25:d6:94:0d:62:27:3c:3a:
                    53:47:d6:1e:0f:91:3c:71:84:1f:7b:01:de:dc:c6:
                    43:a9:57:28:74:ea:28:c4:67:83:79:84:58:c8:7a:
                    95:91:30:7b:0f:ef:16:83:ad:c7:1e:23:a0:10:f1:
                    a0:8b:66:47:3d:dd:59:92:9d:98:2f:9c:3c:d5:4c:
                    4d:23:aa:72:c9:8f:78:5c:91:c9:87:3a:8d:d3:b2:
                    e0:2c:ae:be:82:1e:bb:ce:54:ec:cf:58:06:17:27:
                    97:2c:93:d6:ab:b1:31:d5:be:11:5d:86:72:42:f9:
                    02:e1:43:be:64:5f:16:e6:78:02:06:3d:cb:ee:11:
                    ab:43:c7:69:8d:d6:5a:c4:37:e0:25:02:c0:71:54:
                    56:2d:b2:16:b5:75:6e:c6:92:f5:f7:07:27:a8:86:
                    e3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:BF:65:0C:C5:EA:B5:6B:61:26:B7:0B:67:E4:6D:81:7C:7A:F1:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d191e4e9-53d8-40a2-82a9-2c8ce3155c43/8dff7178-3380-36ea-b2b0-2d64c060f1ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d191e4e9-53d8-40a2-82a9-2c8ce3155c43/d191e4e9-53d8-40a2-82a9-2c8ce3155c43.crl

            X509v3 Authority Key Identifier:
                keyid:A1:CA:18:8C:7E:0C:D7:8B:DB:EC:8B:25:9F:CC:62:01:1B:85:EF:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d191e4e9-53d8-40a2-82a9-2c8ce3155c43.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:56:65:14:22:8b:ff:51:a0:00:c5:0b:61:fb:5e:b1:54:b2:
         ed:09:ac:1f:ba:58:d3:a3:35:f1:52:10:37:01:19:bf:40:b7:
         1e:1d:4d:48:d2:f6:31:e5:fd:2e:6a:75:4d:ac:0f:c6:87:06:
         5a:f7:be:c0:76:a6:5e:8e:82:96:2e:df:f2:0d:7d:b5:35:4e:
         3a:58:c7:a3:20:62:ad:10:a7:27:06:a6:df:b6:32:f2:e7:df:
         64:00:c9:f5:6f:65:ee:1e:17:53:24:96:b4:a4:92:37:98:e7:
         4c:2b:c1:6a:55:4a:48:3a:d9:03:21:7e:2c:51:54:04:5f:70:
         8e:df:5c:bf:5d:55:9e:20:92:85:2d:07:4c:56:e0:83:3c:b4:
         17:be:2c:b5:e2:1c:aa:c6:72:6e:5a:f8:f1:1e:2a:88:27:6e:
         21:bf:68:ef:53:d7:5f:37:bf:d0:a8:0b:44:a9:11:ad:a3:0d:
         67:c5:75:c6:6c:09:06:be:db:76:a8:8f:18:88:79:8a:10:e1:
         af:c7:a0:53:ed:df:56:00:af:52:bd:e6:b7:bc:3b:4a:ec:6a:
         9c:c2:9f:da:b3:db:4e:ec:7e:4a:62:39:ed:89:81:60:7e:4d:
         ab:8d:31:05:74:36:2d:1d:58:5f:64:63:21:a1:58:28:ef:3e:
         17:88:5e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----