Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/150e5089-0cf1-3c2f-bb85-f5a444e2884c.roa
File:                     150e5089-0cf1-3c2f-bb85-f5a444e2884c.roa (raw, json)
Hash identifier:          VVbbjXmHzELY93axDx51C514s/o1n0kp80a6rxx6h7Q=
Subject key identifier:   ED:8C:FD:CF:03:F8:C0:80:B0:05:73:F1:B1:B2:2E:6F:0E:59:0A:B4
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583EB3CCAEB7F4BCC74ACE38EFE0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/150e5089-0cf1-3c2f-bb85-f5a444e2884c.roa
Signing time:             Tue 26 Jul 2022 12:00:00 +0000
ROA not before:           Tue 26 Jul 2022 12:00:00 +0000
ROA not after:            Wed 31 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        13.36.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:b3:cc:ae:b7:f4:bc:c7:4a:ce:38:ef:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul 26 12:00:00 2022 GMT
            Not After : Aug 31 04:00:00 2022 GMT
        Subject: CN=a94c0e7a-6b28-44a7-a0ee-b9fc5b961bb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b7:cc:25:19:40:5b:e3:a6:64:81:f2:52:1b:
                    95:d1:07:52:99:c4:1f:23:93:a1:69:9a:ec:d5:78:
                    d6:0d:db:13:00:73:ad:de:4e:cf:97:da:2e:4b:89:
                    83:ce:76:a2:0e:e4:47:d2:17:e3:e8:08:c0:12:ab:
                    76:2e:30:43:50:c1:cb:5b:c1:87:9c:13:e9:3f:6c:
                    ad:88:3c:83:bb:cc:42:d0:89:c7:ee:72:5c:56:b9:
                    9c:22:17:02:b9:2d:29:36:38:bf:5d:73:74:ef:2c:
                    57:f6:12:28:3b:46:cf:06:ee:5d:7d:5f:54:72:68:
                    06:c3:a6:73:84:4a:e1:c3:5e:8b:1a:4d:b0:21:b0:
                    0e:37:14:d4:c2:b9:f3:72:de:cf:38:da:bd:45:65:
                    44:16:69:5e:a8:d8:9a:4b:c9:cf:89:29:6b:86:8c:
                    45:0c:a6:77:64:c2:43:79:4d:51:45:10:71:b3:ad:
                    d3:10:2c:f0:5c:22:45:d0:41:a5:bc:81:ef:1d:b7:
                    ea:09:54:f0:ea:61:d6:b1:cf:ec:36:6b:6c:35:d2:
                    49:81:92:e9:38:7d:59:2e:bb:2b:4f:f2:2f:77:12:
                    43:37:25:94:12:12:07:68:0e:29:da:d6:34:06:92:
                    39:04:fb:3c:d3:4a:40:f8:f8:c0:c3:67:dc:98:e0:
                    9a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8C:FD:CF:03:F8:C0:80:B0:05:73:F1:B1:B2:2E:6F:0E:59:0A:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/150e5089-0cf1-3c2f-bb85-f5a444e2884c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.36.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:aa:af:fe:6f:87:b6:08:c1:de:c9:07:c8:ec:70:df:0f:67:
         f1:2e:01:da:3a:1c:eb:b4:ab:ae:ce:9b:c3:90:78:cf:b8:26:
         c6:f9:79:2c:b7:f2:e1:42:a0:c5:da:b8:5c:41:14:d3:83:9f:
         09:81:5a:98:16:98:c9:f3:84:e1:c1:99:1e:bd:a3:18:80:da:
         6e:cf:24:a0:1d:39:d7:92:83:df:91:6d:08:06:bc:7c:f5:ba:
         ec:26:78:d1:4e:fb:91:26:7a:fb:ab:e9:fe:11:36:5c:54:6c:
         fa:20:94:0e:cf:17:ba:c1:d6:dc:6f:c8:97:e2:a6:3d:4e:34:
         aa:c5:f8:0c:23:61:74:ec:32:bc:d2:e3:5e:59:e9:75:e4:08:
         bd:21:87:48:3c:2f:ce:31:8e:1d:81:11:3e:f6:71:18:44:7b:
         1e:ec:c6:6f:5e:1a:f0:9d:a5:f2:52:22:c8:2f:61:4b:8b:0a:
         bf:a5:b2:db:6c:86:a1:93:0d:4e:2d:12:cf:8b:a2:4b:18:63:
         af:fe:01:7a:60:c6:f4:bc:54:c8:57:23:ed:9f:7c:f1:ec:6f:
         5b:9e:cd:18:8a:4b:18:d1:18:06:84:56:ef:94:c6:2e:5a:85:
         8f:75:d2:7c:db:51:e2:a3:f5:73:45:ee:c8:f7:f4:b5:e7:62:
         27:51:74:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----