Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3f2c8aac-dc48-3e9b-9176-a32349b80715.roa
File:                     3f2c8aac-dc48-3e9b-9176-a32349b80715.roa (raw, json)
Hash identifier:          Q49Kj9EGJhs3eAuZubnhsv8+MNZ626KW5ezJprL0EOQ=
Subject key identifier:   A8:AB:31:CC:C6:F2:D1:67:5A:CA:62:DA:00:95:CE:EE:C9:14:74:1D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FA16AF1325384D5039C6E6E00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3f2c8aac-dc48-3e9b-9176-a32349b80715.roa
Signing time:             Wed 19 Oct 2022 12:00:00 +0000
ROA not before:           Wed 19 Oct 2022 12:00:00 +0000
ROA not after:            Thu 24 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        15.200.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a1:6a:f1:32:53:84:d5:03:9c:6e:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 19 12:00:00 2022 GMT
            Not After : Nov 24 05:00:00 2022 GMT
        Subject: CN=17ec5b14-5047-40dd-b25c-a50e1c584624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:4d:f8:01:d7:ec:3d:03:9e:9b:1b:51:ef:46:
                    77:4c:28:35:b8:b6:58:33:72:61:3b:8d:ec:c3:49:
                    45:df:e1:c4:73:14:cc:c7:de:f3:63:f8:56:b5:fc:
                    34:b5:77:0b:c9:98:36:cf:43:39:dd:86:ce:8f:57:
                    21:4b:73:6b:5e:31:f8:aa:14:50:54:33:65:23:a4:
                    16:1f:41:e7:59:0a:98:3d:c5:78:1c:83:7c:59:61:
                    1e:38:6d:33:19:da:03:d8:06:1f:c4:ec:d3:b6:85:
                    8a:a0:ba:e0:1e:5a:ff:16:fa:62:ff:39:fe:71:09:
                    10:9b:46:97:23:c1:3c:85:36:5e:7c:76:72:03:69:
                    4f:47:44:31:36:38:58:e5:b5:95:dc:ad:90:5a:4e:
                    96:03:62:8f:50:6b:83:3e:1b:7d:2e:a7:db:85:70:
                    2e:8b:fb:c1:bb:25:40:25:a3:ae:4d:29:c1:1f:fc:
                    38:04:b8:8c:9f:19:9a:65:9a:60:c1:96:53:15:ec:
                    eb:e5:b7:df:8b:d4:37:25:a5:fa:ba:ae:bb:a2:46:
                    6d:78:53:a9:98:44:4d:ab:be:68:90:40:37:61:f0:
                    39:26:37:9f:4f:0d:e2:1e:81:aa:c1:4e:db:a6:cc:
                    43:01:8f:21:f8:9a:4c:34:f4:fd:de:b7:29:60:b0:
                    0b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:AB:31:CC:C6:F2:D1:67:5A:CA:62:DA:00:95:CE:EE:C9:14:74:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3f2c8aac-dc48-3e9b-9176-a32349b80715.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.200.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:81:61:88:a5:14:cb:d2:97:bb:7c:d6:f7:19:0b:c6:34:10:
         18:d4:29:59:d6:96:8e:94:5a:5e:10:4c:d1:ea:49:dc:19:94:
         7e:f8:cc:7d:1e:69:29:58:28:60:87:6c:fb:d2:43:7a:6a:fc:
         f1:aa:4d:28:d0:f8:38:43:6e:fd:8e:a8:37:9f:55:0f:66:bd:
         a5:0c:d2:69:16:12:aa:33:7e:92:7e:97:92:02:d6:91:3a:42:
         ce:25:c2:0a:8d:13:b1:41:cd:b4:c3:fb:c3:a2:0a:5c:23:dc:
         8a:de:37:6b:e8:d3:1e:73:0d:dc:d0:d9:c0:05:c9:e1:dd:b5:
         70:a2:b4:d7:59:4a:a4:93:e9:c9:4a:dc:f0:9b:ce:ed:89:05:
         b9:61:fc:a7:a3:82:6a:5a:bd:55:3e:7d:46:23:1e:c6:b9:1d:
         ef:e6:75:b9:ed:e8:09:dd:11:1c:69:49:00:90:e1:c5:63:1b:
         9a:cf:97:12:8d:ca:8a:76:bf:32:45:ba:32:5d:ea:66:dd:cd:
         d3:96:3b:f5:22:e9:b5:3b:ca:5e:d6:26:d1:13:38:25:e2:ac:
         ad:f3:e0:61:9c:de:34:4c:2b:6b:07:6d:89:a9:40:9c:92:6e:
         0f:89:2f:83:02:1a:12:ee:51:4b:96:63:bb:ce:6c:bc:e1:4b:
         48:ec:fe:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----