Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/866035b9-4511-361b-966f-f0749c638b5f.roa
File:                     866035b9-4511-361b-966f-f0749c638b5f.roa (raw, json)
Hash identifier:          hsnAeVpFYwut9S78lUnTgubqSzJj4+5v1b309ZVTaqA=
Subject key identifier:   5D:C0:25:D1:9D:85:F0:FA:CD:47:0B:95:C8:4A:8B:30:5B:F7:44:3E
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840902B5979D4427857E0045000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/866035b9-4511-361b-966f-f0749c638b5f.roa
Signing time:             Thu 12 Jan 2023 12:00:00 +0000
ROA not before:           Thu 12 Jan 2023 12:00:00 +0000
ROA not after:            Fri 17 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        143.204.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:90:2b:59:79:d4:42:78:57:e0:04:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 12 12:00:00 2023 GMT
            Not After : Feb 17 05:00:00 2023 GMT
        Subject: CN=e411726e-7e5f-4627-8fa3-990c25ed234a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:81:00:68:64:84:75:8c:85:0d:99:35:96:15:
                    09:17:61:42:63:04:e3:ac:b9:13:dd:b3:02:de:ac:
                    78:b3:59:2a:ca:a3:96:5a:39:8d:7a:a2:f7:62:a8:
                    4b:fc:6a:5c:08:0b:c5:75:d1:f3:13:6a:18:9b:d5:
                    a1:54:9a:61:9b:44:a4:b8:f4:b5:e4:2d:bb:ca:ec:
                    0d:f3:cf:f9:22:57:ec:2f:bd:04:fe:b4:8f:c2:93:
                    ee:fa:3d:64:43:24:60:a2:75:74:3b:65:97:27:bc:
                    18:a4:e6:56:bc:a5:33:b3:e4:67:1a:b3:69:12:73:
                    37:71:f7:b8:cf:53:69:96:73:21:39:7c:e4:04:88:
                    ce:f4:44:f4:83:44:2f:69:16:2e:7d:ba:da:20:1e:
                    4f:41:91:30:9f:b5:4c:ec:04:92:96:f3:60:a7:14:
                    fb:96:99:d4:25:f3:49:7a:eb:84:96:9f:60:0f:fd:
                    73:d0:94:de:cd:81:23:40:bb:35:f9:a5:6a:dc:76:
                    f0:71:93:d5:ec:1d:5a:0e:0b:02:85:fe:32:41:f2:
                    a5:ed:95:01:da:a1:b5:b7:69:d3:23:cc:4c:94:be:
                    ca:de:f3:00:b7:01:b7:a0:28:45:7b:22:6e:47:63:
                    ed:dd:22:66:01:e5:e4:08:24:d3:68:d1:d1:0a:db:
                    fc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C0:25:D1:9D:85:F0:FA:CD:47:0B:95:C8:4A:8B:30:5B:F7:44:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/866035b9-4511-361b-966f-f0749c638b5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.204.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:67:c9:44:0f:8d:0d:e5:ca:f7:44:cb:64:70:ea:f4:b5:a9:
         e4:e3:bd:7d:19:00:6d:9c:bf:47:5a:0d:aa:82:4b:a5:9d:04:
         b5:67:c5:08:0d:cd:39:19:28:d6:7c:62:a7:ac:25:9e:f0:27:
         4f:76:77:02:cb:51:52:6f:09:1a:63:4a:a8:81:8b:9e:21:d2:
         51:f0:c3:97:62:64:98:14:76:08:8a:28:2c:54:8d:db:ff:66:
         23:02:d8:34:17:f7:4b:3a:1b:75:8e:4e:46:2f:5b:95:be:64:
         a4:7b:a5:be:5c:25:84:9d:16:84:bd:94:5d:74:9a:ec:c8:a0:
         70:f3:95:b9:62:21:be:b0:6f:58:9c:5e:78:03:9e:a3:bb:4c:
         8d:82:a7:1d:39:1a:e8:15:ea:16:f8:96:3a:0d:fc:49:d9:fc:
         59:4e:c9:db:9c:93:e0:3e:4b:b0:5f:b4:75:f5:60:68:7b:49:
         05:8d:f2:de:b1:ef:16:01:e8:0e:d2:f5:09:6d:cd:0d:f8:be:
         35:fa:fa:df:a5:6f:e7:9a:f5:11:17:bc:87:9a:52:7c:0c:fb:
         cc:b2:3f:25:9e:14:e4:20:1c:65:3f:f4:c6:77:99:12:b0:8f:
         96:0f:75:9f:2b:53:b3:16:cc:11:63:eb:5b:09:0e:98:ac:37:
         2e:33:4b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----