Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/53806eb2-2c7d-3a55-8a48-780dcee51c32.roa
File:                     53806eb2-2c7d-3a55-8a48-780dcee51c32.roa (raw, json)
Hash identifier:          0s+8hzhBjRqc4m8fKYho7ibAGoq46ZwvH6EY+Z370gc=
Subject key identifier:   82:C0:95:9E:27:C2:F5:82:EE:33:1B:0B:21:19:68:77:CE:7A:E7:2D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FFFFCD489DFDC7B70E67DAB08
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/53806eb2-2c7d-3a55-8a48-780dcee51c32.roa
Signing time:             Tue 22 Nov 2022 12:00:00 +0000
ROA not before:           Tue 22 Nov 2022 12:00:00 +0000
ROA not after:            Wed 28 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        15.144.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ff:fc:d4:89:df:dc:7b:70:e6:7d:ab:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov 22 12:00:00 2022 GMT
            Not After : Dec 28 05:00:00 2022 GMT
        Subject: CN=fc2990a6-71c0-4f07-bf00-2ef3ebf61d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:72:c5:8f:d3:e0:67:48:66:ba:af:8e:5c:8b:
                    13:d2:ba:56:90:85:43:eb:ed:71:a5:37:a7:d4:ab:
                    29:08:e2:ce:e2:39:41:0b:38:3c:2e:60:3d:31:90:
                    3f:a7:d6:5b:66:7a:0a:d2:25:52:7d:31:34:14:05:
                    a4:4b:ad:ce:22:cb:ff:00:c7:14:84:6e:79:3f:3b:
                    24:5f:63:f6:0e:18:8b:7a:05:a4:fd:0c:74:f8:f3:
                    9f:a8:84:68:a7:57:65:ce:b7:2e:01:95:8f:68:90:
                    eb:1d:79:ef:3b:04:a5:36:67:50:7e:29:8d:b1:69:
                    d8:6b:c8:d4:c1:26:a1:eb:07:fb:64:49:f4:8d:6b:
                    da:fa:07:fb:6a:5b:bf:89:96:48:19:52:15:39:4a:
                    cd:b4:dd:6f:06:dc:17:e9:02:f7:50:1c:13:7a:c3:
                    c2:d2:13:92:29:a2:40:35:1d:e0:2c:05:93:67:8e:
                    60:04:79:52:af:93:9e:4f:18:8c:00:6f:47:8b:d0:
                    c8:d5:b6:15:93:f6:ff:4f:7c:37:90:f7:19:71:28:
                    b2:38:bd:7b:60:a0:aa:c2:b1:3c:e8:81:04:06:97:
                    53:09:9c:ef:fa:d5:40:f2:ad:45:a2:c4:53:b3:fb:
                    a9:7c:4e:ba:e1:a9:77:c1:ef:40:cc:71:79:02:f0:
                    58:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C0:95:9E:27:C2:F5:82:EE:33:1B:0B:21:19:68:77:CE:7A:E7:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/53806eb2-2c7d-3a55-8a48-780dcee51c32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.144.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:5a:46:4a:e9:77:f2:2f:46:7b:49:4e:9e:e4:b1:81:0a:2a:
         ff:e8:5d:83:8e:08:32:a3:db:aa:e9:58:78:0e:67:fd:d1:1d:
         df:d0:ec:24:7a:ff:38:46:34:6f:4f:ae:ee:7b:89:e5:2f:d5:
         b7:ae:61:fc:99:e7:0b:69:fa:cc:6b:34:2a:f9:59:d1:59:8c:
         13:47:6d:8d:74:9f:e6:1a:33:d6:b4:2d:f2:12:bd:81:ae:3d:
         f9:85:b4:bd:69:2f:b3:05:c5:52:40:d3:84:25:90:5f:8a:45:
         6a:b8:bd:12:9e:41:b6:90:b8:c0:5c:64:28:44:42:62:20:56:
         00:3a:3a:0f:68:cd:9e:0f:b5:35:ba:55:57:88:63:2b:92:f6:
         99:36:bc:a6:51:2f:ba:fc:3d:0a:83:76:48:a4:83:2d:03:00:
         40:59:b3:f2:96:9a:54:7b:f1:84:f5:a8:69:07:c8:b6:d0:74:
         e9:5c:c0:4f:c2:c2:72:26:55:5a:dd:26:2a:6e:35:02:0a:b8:
         31:c9:0f:c8:27:bf:0d:57:95:4a:13:d1:da:6d:28:21:82:8d:
         e4:4d:91:b7:a8:7c:c5:84:85:19:a6:a0:e9:c3:55:05:d7:82:
         05:a7:8a:30:77:ef:9f:39:51:01:2d:6d:25:79:db:96:43:d3:
         89:7b:4e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----