Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8afaca03-d20b-38ab-bf2f-9476b7c371d6.roa
File:                     8afaca03-d20b-38ab-bf2f-9476b7c371d6.roa (raw, json)
Hash identifier:          Owj9B18HMnyh0zFrvJ/dkXWDceMW33C9XeaZxU4RBs8=
Subject key identifier:   14:8C:F8:44:B6:66:3E:22:74:02:2C:5F:98:16:0B:7A:ED:22:19:9D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F8AE89E2B33B1CAEB51783C00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8afaca03-d20b-38ab-bf2f-9476b7c371d6.roa
Signing time:             Tue 11 Oct 2022 12:00:00 +0000
ROA not before:           Tue 11 Oct 2022 12:00:00 +0000
ROA not after:            Wed 16 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        161.191.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:8a:e8:9e:2b:33:b1:ca:eb:51:78:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 11 12:00:00 2022 GMT
            Not After : Nov 16 05:00:00 2022 GMT
        Subject: CN=36a4a0cc-2378-48e2-83b7-78ed2691e248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f4:a5:a6:bf:4f:a3:2a:ad:98:62:69:c0:13:
                    a9:68:37:a9:d7:b3:4f:27:97:42:b4:c2:47:dd:46:
                    c4:0a:5e:bf:01:b6:ac:bb:10:1e:9e:3b:75:70:90:
                    e7:22:b1:b2:64:11:13:ac:ac:db:5a:33:f0:ba:b7:
                    67:46:19:77:e2:cc:f7:9b:5d:ad:1a:79:96:23:4e:
                    2a:2a:1f:6a:b3:cf:65:09:b5:32:b1:34:e9:ad:85:
                    08:12:18:35:99:05:95:f3:1e:ce:60:55:5d:31:93:
                    c2:e8:4d:b7:b6:a6:d6:71:4f:29:15:70:f1:8f:93:
                    1d:e7:66:60:2d:bb:36:96:84:52:a0:5e:63:a2:7a:
                    1f:a5:c0:e9:1e:12:91:99:f0:6a:6a:a2:97:e9:b1:
                    4b:bd:a3:73:23:7d:95:44:bd:97:be:b9:37:ec:18:
                    d3:76:1c:0c:8f:5f:77:2c:67:92:41:72:27:1f:98:
                    df:78:b1:b1:3e:6f:78:00:b8:81:a3:5e:1b:b4:95:
                    02:bb:90:7e:78:4e:99:65:71:89:c7:10:af:e2:81:
                    ac:12:83:9f:ad:b8:88:a4:b4:41:7f:b6:f4:8e:64:
                    10:75:41:e7:70:29:58:31:85:0a:c8:e5:19:e8:2a:
                    8e:c9:08:3b:55:cc:dc:10:4c:64:75:fe:f2:a2:dd:
                    33:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:8C:F8:44:B6:66:3E:22:74:02:2C:5F:98:16:0B:7A:ED:22:19:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8afaca03-d20b-38ab-bf2f-9476b7c371d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.191.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:14:94:8d:ed:e6:eb:c9:79:99:bb:eb:69:1f:0a:a3:71:df:
         2f:17:f9:e8:6a:58:d4:5b:2c:41:d1:2c:fc:aa:00:fa:b7:e9:
         d5:70:1d:49:7e:9d:52:a9:86:6f:15:e4:5e:f6:e8:68:a8:05:
         04:3c:08:53:e6:46:31:12:44:51:38:78:ac:96:e6:de:73:c8:
         51:79:20:d7:02:43:31:9f:8b:60:5b:47:0b:ff:02:b9:9f:2a:
         60:46:14:80:38:d6:dc:20:d6:ec:14:dc:ed:80:88:6d:8c:27:
         b7:32:15:d9:4f:48:ab:fc:b2:2a:fa:31:43:dc:93:b8:db:fa:
         e4:ef:54:3a:a4:d6:0b:ab:24:c6:f3:2b:1e:13:56:25:1f:e9:
         e5:af:55:2d:9a:16:70:43:9e:f2:a6:1b:5d:56:33:e2:4a:32:
         11:53:c7:58:bf:4b:a4:ac:77:1e:6b:45:5b:df:f6:60:bf:49:
         98:a2:19:bd:4f:1a:87:56:02:4b:e8:46:70:fd:85:60:74:40:
         fa:27:b3:80:04:68:2d:0d:6a:f9:e2:f1:8f:56:c2:45:b5:43:
         ac:60:f8:d8:1c:be:2f:2a:bf:8a:ac:ea:5c:24:7d:a6:5e:3f:
         11:c2:93:9b:af:51:59:a9:39:16:e8:5c:8e:bc:bb:2a:08:4a:
         41:fb:58:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----