Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d191e4e9-53d8-40a2-82a9-2c8ce3155c43/8ed639aa-3b93-3afb-b35c-79806d0bc27f.roa
File:                     8ed639aa-3b93-3afb-b35c-79806d0bc27f.roa (raw, json)
Hash identifier:          ui8SubRV7kNx9v72MATNkWG248Msm5R2MGwN189ztXc=
Subject key identifier:   3B:11:75:76:50:1B:2D:99:B6:5E:F9:2F:12:BA:B3:50:E8:58:DE:D3
Certificate issuer:       /CN=d191e4e9-53d8-40a2-82a9-2c8ce3155c43
Certificate serial:       010D0C9F43285841E44770045B0541C89293CDC0
Authority key identifier: A1:CA:18:8C:7E:0C:D7:8B:DB:EC:8B:25:9F:CC:62:01:1B:85:EF:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d191e4e9-53d8-40a2-82a9-2c8ce3155c43.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d191e4e9-53d8-40a2-82a9-2c8ce3155c43/8ed639aa-3b93-3afb-b35c-79806d0bc27f.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Fri 11 Aug 2023 10:07:01 +0000
asID:                     33696
IP address blocks:        199.48.183.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:47:70:04:5b:05:41:c8:92:93:cd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d191e4e9-53d8-40a2-82a9-2c8ce3155c43
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Aug 11 10:07:01 2023 GMT
        Subject: CN=c3f0330b-8e13-4ab5-90d0-606833ed941b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:69:90:bb:39:3f:a5:3a:2e:9f:22:36:67:8b:
                    2d:b0:88:6c:95:3b:58:e9:a2:dd:f4:3c:24:fb:43:
                    4f:b3:3f:bf:de:d2:f3:cb:d1:a8:13:f3:0e:8c:a2:
                    e8:0a:1f:1a:83:82:88:2c:1b:22:e8:60:32:a8:f3:
                    8e:41:b2:5c:42:7a:d4:89:66:df:f1:f1:3c:7d:d7:
                    01:db:ea:7c:30:44:25:b7:1d:3d:7d:a4:46:88:fc:
                    d9:7c:b3:86:71:b6:41:15:6d:6f:b8:55:94:cd:65:
                    71:5d:4c:ac:27:ef:37:c4:3f:54:d2:74:65:43:19:
                    e4:d7:4d:3f:47:a8:b5:a1:80:0a:ab:8b:fa:a3:b2:
                    ba:32:aa:19:f2:ca:1f:d1:78:c5:d3:61:0d:2e:30:
                    dd:e5:29:48:82:da:0f:54:d4:d9:bf:3f:c1:2e:b6:
                    1b:09:3b:f9:95:c3:77:58:3b:b9:54:f0:22:89:bf:
                    cf:cd:c2:32:af:f9:f8:13:15:77:6c:35:f9:26:41:
                    29:e1:d0:9e:c8:8e:4e:0c:c9:3f:e9:a7:33:ab:40:
                    c9:f5:8f:31:e8:6b:2d:f7:60:be:13:58:f8:45:33:
                    13:81:96:8c:b8:7b:14:76:d9:05:bb:d7:25:13:9c:
                    94:a1:10:7b:f8:2b:15:87:ce:38:42:58:e7:3c:af:
                    ec:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:11:75:76:50:1B:2D:99:B6:5E:F9:2F:12:BA:B3:50:E8:58:DE:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d191e4e9-53d8-40a2-82a9-2c8ce3155c43/8ed639aa-3b93-3afb-b35c-79806d0bc27f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d191e4e9-53d8-40a2-82a9-2c8ce3155c43/d191e4e9-53d8-40a2-82a9-2c8ce3155c43.crl

            X509v3 Authority Key Identifier:
                keyid:A1:CA:18:8C:7E:0C:D7:8B:DB:EC:8B:25:9F:CC:62:01:1B:85:EF:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d191e4e9-53d8-40a2-82a9-2c8ce3155c43.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:1b:89:15:86:ad:12:84:a8:1c:11:a8:ef:37:b1:ad:7f:cf:
         6a:77:47:9a:53:7f:f2:8b:20:eb:09:ac:94:5b:89:ef:d1:71:
         05:78:e0:d7:9e:e5:9a:88:80:5d:73:5b:ae:71:e2:d6:22:54:
         aa:14:14:b5:62:40:d8:98:2b:1b:d9:96:02:21:c1:ef:e8:5b:
         6f:8c:5a:e6:49:da:51:01:2e:97:d9:95:a8:d7:9e:78:c4:01:
         4c:d6:f3:d6:49:e5:f5:0d:c3:41:c8:fb:70:83:a6:51:33:d6:
         6a:51:09:94:39:6a:9b:c6:2e:31:b1:ed:30:90:c6:b4:f8:21:
         e6:45:22:4e:5a:f8:a3:d0:fc:2c:2f:bc:06:ca:f0:d5:8b:59:
         03:fe:b9:2c:a1:dc:69:b2:af:a9:46:9b:a3:c0:bc:af:db:ce:
         81:29:d7:13:6d:b5:fb:d5:82:e6:03:8b:38:1f:dc:57:d3:55:
         3f:06:1f:fd:d6:f1:0b:a8:27:d9:ff:5e:7a:39:28:d8:cb:c9:
         1c:8a:3f:5a:11:5f:c1:b9:b8:e8:28:6d:02:49:e1:2e:92:3d:
         91:7b:6a:2e:0a:f6:10:83:68:57:ff:b7:e3:24:ce:1b:d9:f8:
         6d:9e:65:01:83:67:ce:11:f9:2a:d0:10:5c:31:00:5b:c1:d4:
         bd:86:d5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----