Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1571dc64-c0ef-411a-ae77-6dd04e18b8bf/69386019-0adf-3a7c-abe9-046a2a480f65.roa
File:                     69386019-0adf-3a7c-abe9-046a2a480f65.roa (raw, json)
Hash identifier:          UZJvgl5crGxM0yv2lqbPc/4SSzVqc/ZYnGRMnrMt9Ig=
Subject key identifier:   01:DB:2C:87:37:67:74:B8:05:5B:3D:B4:6B:A0:63:C7:76:7A:BA:E5
Certificate issuer:       /CN=1571dc64-c0ef-411a-ae77-6dd04e18b8bf
Certificate serial:       010D0C9F4328584195D02E91032BB57B05C0AD40
Authority key identifier: EB:97:B9:3A:85:73:71:34:7C:C6:9F:B6:86:84:32:B5:90:EC:48:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1571dc64-c0ef-411a-ae77-6dd04e18b8bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1571dc64-c0ef-411a-ae77-6dd04e18b8bf/69386019-0adf-3a7c-abe9-046a2a480f65.roa
Signing time:             Sun 16 Apr 2023 18:56:11 +0000
ROA not before:           Sun 16 Apr 2023 18:56:11 +0000
ROA not after:            Sat 19 Jul 2025 04:00:00 +0000
asID:                     399970
IP address blocks:        149.112.154.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:95:d0:2e:91:03:2b:b5:7b:05:c0:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1571dc64-c0ef-411a-ae77-6dd04e18b8bf
        Validity
            Not Before: Apr 16 18:56:11 2023 GMT
            Not After : Jul 19 04:00:00 2025 GMT
        Subject: CN=e1b8d94f-8b4b-4e34-9f66-8c214c001044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:bd:19:56:03:7c:b4:6a:ca:fd:83:f9:55:f8:
                    04:34:a2:e3:85:8b:00:2d:36:45:e4:29:84:42:ed:
                    ba:49:2a:87:2d:23:ad:14:7d:41:7b:cb:74:61:1c:
                    89:93:d7:c8:59:20:84:76:81:98:cc:b5:a9:38:8e:
                    40:ab:9d:c1:ca:c6:95:0e:5e:f8:c5:9b:9b:35:b6:
                    3a:07:89:de:4b:69:32:fb:cd:c0:78:02:86:27:41:
                    89:65:75:d8:40:4b:0a:51:48:c0:41:18:45:fd:2b:
                    37:e9:03:e6:61:5b:1a:f9:fc:47:59:66:6d:2f:b5:
                    d2:83:99:b6:2a:ce:c0:82:99:e0:dc:6c:fb:87:57:
                    09:a1:9b:4f:46:a2:d9:f4:f0:b5:0d:aa:65:33:d0:
                    17:6e:62:26:e4:dc:f2:11:db:83:68:4c:f0:f1:57:
                    e3:53:de:13:1d:f1:40:bf:72:7e:d7:04:4b:9d:a3:
                    43:5c:aa:1c:f4:aa:64:6d:24:dc:1e:bf:5e:7d:18:
                    13:21:56:a8:25:c0:fb:96:75:ce:97:fc:97:2f:05:
                    bf:9e:69:64:d5:15:47:f3:7e:01:62:0e:bc:9a:8f:
                    5b:50:06:75:2c:87:a5:ea:a2:8d:22:72:8f:ba:c1:
                    1d:08:f6:c3:d1:d3:6a:07:6c:6e:89:15:7f:6b:7e:
                    0c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DB:2C:87:37:67:74:B8:05:5B:3D:B4:6B:A0:63:C7:76:7A:BA:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1571dc64-c0ef-411a-ae77-6dd04e18b8bf/69386019-0adf-3a7c-abe9-046a2a480f65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1571dc64-c0ef-411a-ae77-6dd04e18b8bf/1571dc64-c0ef-411a-ae77-6dd04e18b8bf.crl

            X509v3 Authority Key Identifier:
                keyid:EB:97:B9:3A:85:73:71:34:7C:C6:9F:B6:86:84:32:B5:90:EC:48:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1571dc64-c0ef-411a-ae77-6dd04e18b8bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:ee:6f:fb:b0:fa:a3:ed:9f:5d:f7:a7:dc:a5:9f:ce:bc:9e:
         65:f2:ce:ac:74:1a:7c:e5:9e:2a:ba:59:9c:e3:5d:a5:98:09:
         8b:f8:43:aa:20:76:70:2a:90:28:4b:33:15:36:07:45:c2:57:
         b5:04:a2:3d:ba:34:ea:b6:f5:a3:17:f5:d7:bf:44:5d:55:47:
         67:9c:22:2b:e2:b6:0c:93:45:f6:2a:26:36:96:b9:07:e6:bf:
         8a:60:3b:cd:6b:85:14:78:2a:b4:dd:7b:98:5a:c8:7d:07:56:
         2f:0a:86:39:50:71:a4:56:d5:a3:9a:06:82:6d:18:49:f3:76:
         42:b4:11:58:f0:c0:f7:ea:e4:cd:28:63:66:88:bf:9a:17:82:
         2a:73:b9:58:a2:51:9a:a6:8c:6d:9d:b4:f8:e4:12:78:ef:2d:
         76:c2:a7:50:2d:79:0c:0d:90:d9:3f:d5:65:98:53:7f:23:09:
         1b:d6:e4:96:66:35:20:49:51:63:30:03:1f:dc:cf:9a:cc:aa:
         9c:2f:bd:72:74:00:b8:a1:38:aa:47:9c:e0:6f:8f:59:fb:8a:
         b3:17:d2:7e:3d:13:e9:5b:d8:f2:8d:1f:06:3f:56:25:6b:51:
         31:28:2e:6f:3c:25:8c:b8:5e:a6:cb:7e:78:81:28:33:0e:b6:
         b7:25:f5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----