Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/088ffa05-3902-334e-8199-e3a5654bf2a7.roa
File:                     088ffa05-3902-334e-8199-e3a5654bf2a7.roa (raw, json)
Hash identifier:          cxk+xRzljgLpasBn91YZSL7V7xS8C+8+wqvDi1Ap2sU=
Subject key identifier:   CD:99:6A:6B:27:7B:19:AF:CC:63:5A:B6:CB:3E:78:58:1A:40:BB:60
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328584091374C758500C229BDE55720
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/088ffa05-3902-334e-8199-e3a5654bf2a7.roa
Signing time:             Fri 13 Jan 2023 12:00:00 +0000
ROA not before:           Fri 13 Jan 2023 12:00:00 +0000
ROA not after:            Sat 18 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        152.137.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:91:37:4c:75:85:00:c2:29:bd:e5:57:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 13 12:00:00 2023 GMT
            Not After : Feb 18 05:00:00 2023 GMT
        Subject: CN=bb0fd984-37c7-4e11-a5a9-c9b11b871a05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:26:83:b4:d0:31:52:d4:86:fe:cf:59:9b:fa:
                    ed:4b:e5:04:65:84:71:fe:fe:a1:78:2c:1a:f8:34:
                    c0:17:2a:18:8b:b1:66:7f:e2:2b:20:08:f1:29:e9:
                    19:c8:e3:33:8f:fa:63:7b:8e:37:d8:d0:b6:d2:6e:
                    d6:2f:e2:ac:e0:6a:d5:80:a0:7c:f2:b1:da:b1:39:
                    21:bf:f1:12:ab:4f:e9:63:35:7d:60:22:f8:fa:48:
                    46:92:f3:3d:ce:35:35:62:cb:fa:d0:94:c7:64:b9:
                    c0:9b:21:b6:13:50:a6:3b:12:7f:4f:d3:e2:2f:77:
                    76:0a:55:59:26:dc:39:33:5d:e3:7c:bd:6a:13:e6:
                    62:5b:b6:a6:1d:91:65:98:82:41:24:40:0b:c9:88:
                    52:cd:25:dc:fe:ab:58:59:23:85:61:36:92:17:7f:
                    8e:03:49:2b:94:45:66:ac:a5:8c:2b:cc:e0:89:02:
                    fa:08:1c:94:67:0d:e9:b5:cc:56:6a:f3:3a:34:aa:
                    74:71:7e:e0:b0:0f:05:ad:5c:ad:2c:b7:d2:b3:d9:
                    42:52:b0:f9:b9:6e:2f:42:84:51:83:0a:a8:e7:1b:
                    f2:3b:f7:7e:34:f4:9f:61:a1:12:3f:66:09:5f:13:
                    d6:1c:a9:c2:11:a6:9d:61:6d:f2:6e:b8:c4:3d:41:
                    87:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:99:6A:6B:27:7B:19:AF:CC:63:5A:B6:CB:3E:78:58:1A:40:BB:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/088ffa05-3902-334e-8199-e3a5654bf2a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.137.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:35:80:88:9b:47:8e:bf:94:c2:17:ee:9d:d0:a0:2b:2f:65:
         5c:9a:6d:b1:d6:f3:ba:d9:12:eb:69:1c:77:43:3c:7c:29:0f:
         9b:9c:87:f1:5b:fc:86:1e:91:4c:9f:e8:66:6e:d7:77:6f:49:
         6e:23:a4:55:b3:39:62:7f:34:29:18:b2:d2:75:df:ac:70:f0:
         82:d8:e6:41:7b:6d:a1:f8:02:8e:b9:c3:89:61:a0:ed:4b:e6:
         f2:8f:9f:da:37:bd:a6:f3:f8:dd:72:9d:9d:1c:95:7d:09:69:
         20:0e:f1:61:a6:b6:fb:0b:3e:96:c6:81:60:24:32:d3:36:97:
         ec:a6:ab:e4:dc:58:98:56:54:8f:8e:43:5f:4c:05:af:92:90:
         da:e8:da:a2:f0:94:f4:8b:3a:b6:ec:f6:15:b5:00:dd:83:47:
         91:ac:7e:32:88:a9:4f:0e:05:4d:33:af:cd:a2:00:1e:2f:33:
         af:6c:7d:31:c6:7b:33:05:54:24:24:ef:07:3e:02:70:55:06:
         2a:70:27:db:e3:44:a2:ab:f3:96:9c:bd:9a:5b:9c:24:bf:5f:
         fb:ce:b0:4a:94:a0:1b:f3:e0:23:41:17:c4:1f:a5:ef:00:33:
         5a:b0:c5:a3:9f:ee:c6:8f:56:89:a9:94:13:da:ee:30:ec:b6:
         a4:4f:ae:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----