Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0bd30d07-fa7c-3cd3-95d4-869085345528.roa
File:                     0bd30d07-fa7c-3cd3-95d4-869085345528.roa (raw, json)
Hash identifier:          qLmzO66Vi6E5rPH9tSdHuwiDNd5TjZcbAhZy2MIQkTo=
Subject key identifier:   27:0C:3B:80:B5:AE:F3:E4:24:0C:1E:59:B9:8D:E8:B5:0F:02:4C:46
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D5A43F4FC477EF4AE4154C2C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0bd30d07-fa7c-3cd3-95d4-869085345528.roa
Signing time:             Fri 25 Mar 2022 04:00:00 +0000
ROA not before:           Fri 25 Mar 2022 04:00:00 +0000
ROA not after:            Fri 29 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        128.181.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:5a:43:f4:fc:47:7e:f4:ae:41:54:c2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Mar 25 04:00:00 2022 GMT
            Not After : Apr 29 04:00:00 2022 GMT
        Subject: CN=7f6d4214-2cbf-4d2d-8af3-71b96ae0505b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ce:57:47:30:7b:c4:2d:91:d5:c4:ff:74:96:
                    61:17:5a:4b:1c:04:bd:07:71:52:02:e8:8f:2c:be:
                    42:ed:1e:f7:12:9c:5a:0a:2a:e3:0a:ea:f7:0c:f9:
                    b5:0d:34:9d:66:1e:bb:58:38:55:d3:0b:62:74:df:
                    ae:f1:6f:7d:81:c5:e1:21:93:04:23:3b:2b:89:28:
                    92:dd:1a:39:5d:3c:8f:7d:61:51:a6:f7:c6:a5:af:
                    0c:14:b6:a5:75:23:d9:bf:12:4a:56:27:bc:d4:fb:
                    af:18:98:c4:45:32:fb:54:17:40:75:cb:28:92:8a:
                    4c:82:61:a1:59:79:e2:90:23:25:48:97:d7:09:b1:
                    c5:e3:ec:c0:cf:16:99:8b:c7:ef:b9:b6:f2:99:df:
                    c8:2e:76:ba:01:03:c8:9b:7f:b7:9f:82:d8:ee:79:
                    16:8b:64:87:ed:71:e3:24:d2:44:21:c9:89:e4:f5:
                    a8:d6:17:57:b6:74:bc:32:f6:51:65:24:98:36:6c:
                    2f:92:3d:8e:6e:cb:af:e1:50:b1:25:40:bd:b0:e1:
                    ce:6e:ab:d7:68:fd:ba:21:05:bc:cc:c9:f1:97:a2:
                    d7:49:ed:24:44:a0:b3:99:49:23:ab:b1:9d:0a:ab:
                    91:94:f1:01:61:33:39:85:22:58:aa:57:42:37:26:
                    d9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:0C:3B:80:B5:AE:F3:E4:24:0C:1E:59:B9:8D:E8:B5:0F:02:4C:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0bd30d07-fa7c-3cd3-95d4-869085345528.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.181.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:49:44:d3:71:fb:3c:96:de:22:13:fe:d6:cc:7e:25:0f:6f:
         d1:02:d5:a2:09:29:6d:00:c1:58:0a:af:fd:e8:0e:7a:35:2f:
         cc:b0:c3:75:81:bb:5f:e2:59:41:9a:33:66:17:af:d7:10:2f:
         77:97:0d:a5:59:fe:cd:6b:41:ac:fa:01:e0:a5:51:a4:b4:b4:
         d7:0f:99:37:f0:0d:0b:a5:8f:cf:a7:87:39:6e:39:da:0c:94:
         75:e1:0b:6e:1a:15:73:56:81:a4:e2:75:2b:5e:62:f7:0b:f2:
         71:0a:ad:ee:4b:d5:a4:52:2b:03:3f:81:cb:73:dc:34:d9:32:
         b9:b6:7c:39:58:bc:9b:16:d3:b9:db:c6:58:05:ec:f0:21:99:
         c9:53:d6:46:f2:31:30:cf:e4:44:68:c3:ce:04:1b:4d:ab:af:
         e1:b6:d8:6b:f1:05:80:e1:fa:38:a7:31:3c:b6:ee:70:ae:0d:
         29:91:40:f8:93:20:09:9c:25:16:50:01:8a:9c:8b:35:68:72:
         13:a6:ff:f2:c8:35:cb:73:52:67:0b:4f:5c:1d:30:c5:1f:1c:
         83:7f:53:e8:23:b6:41:bb:6e:3e:4d:a1:73:69:d6:63:16:f7:
         30:44:f2:21:b5:24:d6:19:4c:f2:8a:fb:8c:82:70:2d:c9:e9:
         15:8d:50:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----