Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f71a5753-c3ce-4ad0-85f6-68ca6fc451ef/838c83a5-78ae-363b-95fe-dc8b1b7c86f6.roa
File:                     838c83a5-78ae-363b-95fe-dc8b1b7c86f6.roa (raw, json)
Hash identifier:          W/jOVJoGc67DalaPi7kWPKl+ZSp6KqFHCqaVkvdg5aw=
Subject key identifier:   41:F5:E3:84:DD:F1:28:FB:FC:B2:63:40:8E:BF:65:1B:73:2F:4D:03
Certificate issuer:       /CN=f71a5753-c3ce-4ad0-85f6-68ca6fc451ef
Certificate serial:       010D0C9F4328583A31E85F3C3CCB38F033C44290
Authority key identifier: 04:C1:5B:51:3D:57:62:04:59:E9:B1:BA:8B:7D:17:28:85:42:89:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f71a5753-c3ce-4ad0-85f6-68ca6fc451ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f71a5753-c3ce-4ad0-85f6-68ca6fc451ef/838c83a5-78ae-363b-95fe-dc8b1b7c86f6.roa
Signing time:             Tue 01 Jun 2021 04:00:00 +0000
ROA not before:           Tue 01 Jun 2021 04:00:00 +0000
ROA not after:            Mon 11 Sep 2023 04:00:00 +0000
asID:                     3356
IP address blocks:        158.51.86.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:31:e8:5f:3c:3c:cb:38:f0:33:c4:42:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f71a5753-c3ce-4ad0-85f6-68ca6fc451ef
        Validity
            Not Before: Jun  1 04:00:00 2021 GMT
            Not After : Sep 11 04:00:00 2023 GMT
        Subject: CN=1f483dd1-4faf-4c8c-824c-ce60f750d451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:49:df:70:da:e0:7f:fe:cb:b8:89:af:ae:64:
                    5d:90:2e:aa:56:3d:d8:79:1b:2f:8b:68:8c:6e:41:
                    a6:23:84:5c:99:18:5c:d7:77:d1:eb:b4:2b:c1:a0:
                    89:3b:28:d1:ba:17:84:0d:49:be:c5:c0:53:52:33:
                    d3:29:0e:0e:be:4f:9c:23:bc:45:0c:aa:b6:7c:57:
                    76:ca:8b:48:1b:c3:34:b8:a7:b0:e0:c5:d7:7b:d1:
                    40:97:79:3b:23:8c:49:31:c3:57:70:0f:93:d2:e6:
                    b2:ad:5d:4d:b3:82:0b:d9:3b:f4:d3:54:92:46:b3:
                    a7:a2:ee:ce:66:c8:46:fe:c8:49:37:69:50:bd:49:
                    60:f5:62:79:c8:52:7d:e7:b0:13:cc:16:f5:76:6f:
                    76:4e:36:be:25:d3:85:cd:4d:43:b4:4a:57:70:32:
                    c9:2d:ce:7f:5c:d9:5a:e6:dc:61:7a:65:3a:19:96:
                    26:c2:9a:40:16:b9:c1:e6:2a:df:9c:06:8b:10:b9:
                    55:08:8d:e9:e7:31:47:bb:c0:6d:f7:48:00:7c:9b:
                    0f:7d:90:8a:68:2d:3f:6c:12:98:b6:61:77:84:01:
                    2f:6a:80:e5:6a:ff:b8:4e:e9:f9:58:ec:c4:48:44:
                    b9:ba:c9:87:93:40:71:bc:a1:cf:10:0e:47:5e:cf:
                    81:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F5:E3:84:DD:F1:28:FB:FC:B2:63:40:8E:BF:65:1B:73:2F:4D:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f71a5753-c3ce-4ad0-85f6-68ca6fc451ef/838c83a5-78ae-363b-95fe-dc8b1b7c86f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f71a5753-c3ce-4ad0-85f6-68ca6fc451ef/f71a5753-c3ce-4ad0-85f6-68ca6fc451ef.crl

            X509v3 Authority Key Identifier:
                keyid:04:C1:5B:51:3D:57:62:04:59:E9:B1:BA:8B:7D:17:28:85:42:89:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f71a5753-c3ce-4ad0-85f6-68ca6fc451ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:5b:7b:c5:8a:13:79:f7:58:96:35:31:a5:1d:21:60:92:dc:
         76:d6:d1:a1:ab:c4:d2:21:d4:ce:d1:a7:65:07:ae:c7:03:a5:
         fb:41:9b:b2:b5:62:31:a5:ca:c5:1e:50:71:d1:b7:3d:2c:25:
         56:76:db:c0:37:bf:2e:18:53:f9:a2:21:fc:19:e2:f2:e5:23:
         2b:f5:bf:86:4d:b7:52:5a:00:5b:5f:09:e6:13:ea:d4:c3:6e:
         ff:69:97:88:c4:fc:82:28:4c:93:f7:84:f1:e6:55:0c:03:75:
         27:6a:60:e6:23:bb:12:52:ae:bf:21:d7:4c:35:c0:a8:2b:ad:
         f6:12:05:3e:2e:7d:a9:78:c0:31:97:95:47:53:b0:78:33:e5:
         97:9d:67:99:29:3b:0f:65:eb:ef:e4:51:c5:34:1e:cf:94:e6:
         cc:1b:5d:e0:a7:ea:de:fb:90:2b:9f:f6:a1:82:2a:08:15:de:
         f4:07:a4:78:82:9a:76:d2:50:4b:20:bd:06:9e:49:8a:94:f1:
         5a:b1:c3:3b:31:4e:9a:37:7c:04:ff:98:f4:ae:91:68:10:59:
         f3:c9:c8:48:bf:77:bf:9a:e0:de:d7:45:dd:1c:e7:72:10:8d:
         bd:61:95:e1:16:22:69:bd:3e:8d:31:c6:38:5a:86:af:06:10:
         84:66:c7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----