Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/59820ea1-9ba8-345f-8aae-682f17e8dfe3.roa
File:                     59820ea1-9ba8-345f-8aae-682f17e8dfe3.roa (raw, json)
Hash identifier:          iHbLeGzc01MPUa6bEo4/SUcuXj/WvksyzJV204y5W4Q=
Subject key identifier:   02:86:06:0B:E7:82:24:68:F8:A0:38:DD:B2:54:CA:B8:C0:8F:F9:B2
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840460AF97F3EF46475AA0137C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/59820ea1-9ba8-345f-8aae-682f17e8dfe3.roa
Signing time:             Sat 17 Dec 2022 12:00:00 +0000
ROA not before:           Sat 17 Dec 2022 12:00:00 +0000
ROA not after:            Sun 22 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        150.222.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:46:0a:f9:7f:3e:f4:64:75:aa:01:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 17 12:00:00 2022 GMT
            Not After : Jan 22 05:00:00 2023 GMT
        Subject: CN=b9b13ba6-a014-4a32-9888-fc22ee8cbcad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:90:58:2d:89:d7:0c:55:24:c0:09:51:78:5b:
                    3a:4e:a1:be:f2:9d:c3:f9:c4:1c:d4:b6:29:3e:96:
                    b3:bc:d9:cc:85:b5:9f:8d:97:fa:42:e8:6d:55:42:
                    09:73:87:c1:45:51:80:8e:7c:01:ce:74:e3:87:d8:
                    02:65:d2:6f:b6:8f:9e:b6:f2:36:73:df:6f:26:87:
                    c5:80:7e:38:b3:30:07:33:d6:26:10:c6:b9:e8:78:
                    20:e7:7f:a7:c0:04:2e:2b:70:9c:17:96:5b:f1:f3:
                    1d:d9:10:63:a4:ee:f5:fb:92:32:12:88:f7:fd:4a:
                    ef:71:74:42:d9:39:6a:85:aa:7b:a0:52:b8:52:8b:
                    dc:7e:ba:23:9a:0e:93:41:9d:37:77:ac:e9:0f:81:
                    9b:be:b5:f1:70:d6:97:d4:71:ff:bf:55:4d:ee:ad:
                    13:d3:a9:f7:9a:a2:54:eb:e8:4d:7a:62:f1:62:7b:
                    e9:95:e4:1c:13:bc:3e:53:55:ac:11:b0:40:ba:45:
                    f5:77:b6:eb:99:6b:05:92:46:ac:06:1e:0f:34:1f:
                    02:6b:f9:a2:88:66:d9:b0:66:d2:92:d2:04:af:3a:
                    05:b3:b7:a0:3b:69:c0:e4:98:3b:be:3f:d3:bc:6b:
                    cd:14:c6:f5:6b:97:c7:5f:15:93:5c:c1:2f:c0:8f:
                    d1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:86:06:0B:E7:82:24:68:F8:A0:38:DD:B2:54:CA:B8:C0:8F:F9:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/59820ea1-9ba8-345f-8aae-682f17e8dfe3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.222.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:80:b0:ce:16:92:01:57:61:0b:31:4a:ea:9d:71:66:57:c2:
         0d:6c:91:88:00:66:e7:4c:01:22:7b:8c:ce:c8:64:49:a7:80:
         9d:63:38:8e:2c:5e:9d:24:4e:4a:f3:f3:d3:b5:5f:f6:3c:b8:
         dd:2a:3d:21:dd:fe:75:a5:01:17:7a:ab:5b:10:30:6d:34:d2:
         44:90:fb:7f:25:0e:71:6e:13:d0:a4:41:f8:97:34:8c:2a:99:
         c3:8c:43:13:cf:bc:64:d5:ea:fa:1b:11:36:69:a6:dd:25:7a:
         68:c6:7f:cc:e2:7b:3b:ac:15:84:e2:ea:1b:d5:0a:37:fd:61:
         8a:6a:76:dc:00:ee:30:1c:f6:d8:2e:16:37:4d:11:78:f4:41:
         26:ff:7d:fc:fc:b5:5e:6f:3c:57:26:d7:53:e5:25:25:bc:d5:
         3b:3f:eb:a6:81:e2:23:3d:96:76:86:bb:43:dd:e0:68:d9:e5:
         00:00:a9:1c:c4:f6:1a:25:1a:34:24:b1:db:23:ad:eb:76:10:
         7e:d4:ad:f6:f6:fa:38:21:a4:18:46:0b:2c:0e:f9:62:53:87:
         24:9a:1c:56:bf:d1:98:42:5c:29:ec:80:1a:04:ea:3e:42:c1:
         ab:ea:e1:95:b3:26:a4:71:e8:48:5d:e3:ec:0d:b4:52:d9:ac:
         74:88:36:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----