Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/175f2463-b5ee-3c1f-bfac-4dcdff5545d5.roa
File:                     175f2463-b5ee-3c1f-bfac-4dcdff5545d5.roa (raw, json)
Hash identifier:          1hXXjoWuSt9GJ9gkf24sX6Xl2J2iVtDhQcsamFclU60=
Subject key identifier:   79:A1:6E:1B:21:CE:08:D9:61:94:E6:CA:FD:80:D5:68:30:82:14:55
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583EB9E0A131D2C76AA1C974F240
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/175f2463-b5ee-3c1f-bfac-4dcdff5545d5.roa
Signing time:             Thu 28 Jul 2022 12:00:00 +0000
ROA not before:           Thu 28 Jul 2022 12:00:00 +0000
ROA not after:            Fri 02 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        47.128.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:b9:e0:a1:31:d2:c7:6a:a1:c9:74:f2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul 28 12:00:00 2022 GMT
            Not After : Sep  2 04:00:00 2022 GMT
        Subject: CN=747b42fa-816a-4efc-ad10-61e3d45f6ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:05:4f:a7:a4:4b:35:e7:97:3f:a9:b0:83:94:
                    0f:a1:db:43:44:5f:bc:7e:a3:fe:ae:c3:de:a6:23:
                    87:f6:79:c7:c2:aa:a4:a1:26:26:a5:12:15:63:ae:
                    20:c2:1b:dd:39:26:b6:87:8b:a8:55:93:8e:c2:d8:
                    6f:10:37:9b:d2:af:7c:9f:89:14:ec:1a:6e:7d:ac:
                    5b:73:ca:fe:fb:06:fd:3f:b9:92:1a:5b:df:22:f2:
                    62:ba:4b:12:3a:49:4d:b1:fa:b4:1b:a8:21:12:5d:
                    5f:05:e5:9b:1d:d4:88:fc:d8:20:a6:b7:a6:f2:cc:
                    7a:32:11:2c:87:30:06:29:d9:f7:ab:de:f5:ea:b0:
                    fb:79:86:df:fe:aa:ab:00:0a:ff:90:47:92:77:1a:
                    13:2e:05:74:19:ec:58:ab:9c:06:2e:c7:e3:12:fb:
                    7f:77:ed:22:d4:7b:61:64:2e:d1:bc:c1:24:d1:7d:
                    b6:01:2a:d0:2a:81:67:f8:d4:73:bd:cd:cf:67:0d:
                    c2:f2:b5:fe:30:cc:5a:17:3d:87:32:55:42:e3:ca:
                    c1:78:b6:f3:19:34:ab:01:3f:32:d4:69:f9:c8:23:
                    6a:3e:6c:22:c7:47:54:55:88:aa:7c:0f:be:23:4c:
                    5f:99:6a:b5:d7:41:8c:56:51:69:e0:98:b7:88:f6:
                    aa:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A1:6E:1B:21:CE:08:D9:61:94:E6:CA:FD:80:D5:68:30:82:14:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/175f2463-b5ee-3c1f-bfac-4dcdff5545d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.128.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:8f:41:c2:29:ca:6f:66:22:76:77:01:e4:dc:b3:c0:fe:87:
         d6:d5:f7:43:24:45:a9:c5:92:2d:e3:d9:7b:a0:44:52:65:23:
         a9:27:82:89:28:2a:f2:82:49:bd:9a:f7:c7:3c:d3:99:6d:42:
         c6:b5:3f:e2:6d:d1:88:b1:22:b7:65:f8:3a:a3:3c:ad:66:ad:
         57:f5:0c:80:c5:9e:be:01:37:1a:44:f6:2c:3f:98:47:c7:48:
         68:93:bb:4e:ba:8b:af:c3:ab:6b:72:44:30:78:6a:6b:53:10:
         db:86:22:16:68:dd:40:c5:69:19:a1:a9:37:dd:d2:10:41:b2:
         cd:5b:a4:99:33:ad:00:eb:1a:36:d7:20:93:f2:00:0b:65:01:
         bd:26:b3:25:e0:77:24:26:95:80:31:1a:54:cd:bf:0e:2e:3c:
         0a:a3:3e:fc:33:21:5e:74:ff:27:d3:19:55:59:fe:22:f9:23:
         f1:b2:a1:c1:c6:a0:e3:d3:87:9d:59:4a:84:eb:59:65:ec:7c:
         22:1a:4d:b6:4b:26:aa:2a:9d:04:11:7b:03:5d:f0:30:8a:75:
         13:32:4f:03:43:35:3b:6d:ca:7a:95:94:ca:c4:af:e0:d1:16:
         ae:97:ab:e7:c8:6e:38:c1:3f:b1:cb:4f:69:c6:51:ec:6a:34:
         01:32:43:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----