Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/398784b6-fbad-33f4-aa05-9f2c902aaeed.roa
File:                     398784b6-fbad-33f4-aa05-9f2c902aaeed.roa (raw, json)
Hash identifier:          eA4xTeJbI931ZrSHwU6IlUDqR53UdVeJyYQmDBDZPmM=
Subject key identifier:   6D:15:EF:BE:D5:C7:05:6A:66:AB:72:21:37:1B:96:AC:B5:8C:91:A3
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328583F78514A4D13D7EA2150C84680
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/398784b6-fbad-33f4-aa05-9f2c902aaeed.roa
Signing time:             Tue 04 Oct 2022 12:00:00 +0000
ROA not before:           Tue 04 Oct 2022 12:00:00 +0000
ROA not after:            Fri 12 Apr 2030 04:00:00 +0000
asID:                     8069
IP address blocks:        20.157.237.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:78:51:4a:4d:13:d7:ea:21:50:c8:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Oct  4 12:00:00 2022 GMT
            Not After : Apr 12 04:00:00 2030 GMT
        Subject: CN=fb2df8f4-3589-4258-a259-0dd0540960d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:86:34:84:71:39:95:9c:82:d9:b4:fb:12:8b:
                    f1:7f:01:8e:a6:0a:2e:3d:c6:1a:3f:a6:a4:25:c4:
                    b1:7e:bb:e7:20:20:2c:34:98:19:8b:37:ec:c8:d3:
                    73:46:73:40:c6:be:1f:75:db:84:2d:bd:35:e7:46:
                    bc:67:d7:70:81:91:26:40:69:11:4f:a5:92:22:18:
                    69:36:af:61:7e:1b:f7:d4:f6:c7:00:cb:da:01:6e:
                    6b:f2:83:38:ad:3e:79:8c:e8:f6:75:9c:55:40:6a:
                    38:da:dd:af:ec:91:4f:26:e9:3c:f1:52:46:b6:61:
                    82:cf:8c:21:60:5f:e8:55:a3:bc:75:c0:ac:7b:58:
                    fd:e2:50:3f:4d:4e:a7:2d:73:59:31:29:04:07:18:
                    dd:6b:f5:84:d7:09:17:6f:f0:4c:c0:16:07:40:1e:
                    2a:0f:fd:96:64:72:86:23:b4:ed:87:69:1b:9d:b6:
                    91:fd:5a:73:01:11:48:74:53:a6:95:4f:1b:74:a9:
                    f3:d8:b2:da:88:24:fc:be:cf:ba:7e:5f:63:c6:d5:
                    6a:8f:7c:a0:19:e8:a5:d3:69:ee:86:2a:e3:34:0f:
                    e9:c0:98:f5:51:2a:de:a6:7f:fc:f2:72:c8:11:eb:
                    48:04:ee:e7:77:82:df:e5:0b:59:5f:96:cf:44:e7:
                    f0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:15:EF:BE:D5:C7:05:6A:66:AB:72:21:37:1B:96:AC:B5:8C:91:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/398784b6-fbad-33f4-aa05-9f2c902aaeed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.157.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:f6:78:ea:ad:64:09:0d:83:5d:25:f0:00:32:91:3f:d8:fe:
         56:65:0f:88:8a:d4:7f:eb:da:fa:7e:cc:68:7b:02:64:21:b2:
         1a:91:22:da:84:3a:e1:92:0a:5b:c1:37:06:2a:b5:76:8d:9d:
         a1:56:a0:ab:5c:ef:74:94:85:ab:e7:de:9d:c1:49:18:97:31:
         ab:97:36:03:43:d2:bb:23:d5:a8:04:de:3a:2a:df:b3:f8:69:
         b0:ba:a0:7d:3e:2a:90:18:5f:17:7a:76:24:48:7c:9b:69:dc:
         c3:2b:34:f5:ea:bf:e3:14:cc:ba:30:0e:8e:27:77:cd:aa:87:
         04:3c:e9:25:30:41:5e:ae:c4:47:54:1f:63:6d:6a:55:25:0c:
         a7:ed:48:6a:c9:6c:3a:82:5d:71:39:b3:02:e8:e1:c8:80:16:
         bc:1f:49:41:a0:d9:d8:27:b8:c9:1c:f1:ab:d6:c8:9c:a6:15:
         e5:24:c8:2a:97:3a:11:a6:cd:d4:36:d8:8b:bf:e7:6a:6a:50:
         3f:02:9a:9f:05:81:79:c0:95:25:94:1c:66:06:11:ec:9c:d8:
         e1:26:62:68:69:1f:75:6d:d2:14:0d:63:37:12:39:d4:40:fd:
         4c:e1:1a:aa:02:32:ca:a1:c8:8c:e6:0d:f8:b1:d5:3b:83:91:
         13:56:94:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----