Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9a84099c-6d33-3817-8fb4-9730ff1b41f5.roa
File:                     9a84099c-6d33-3817-8fb4-9730ff1b41f5.roa (raw, json)
Hash identifier:          8stPZda4JwqmSEGwPIpHNuU/sHda8CHXQaUX53vDwag=
Subject key identifier:   9E:4D:60:E3:95:AD:58:FC:46:E0:DB:04:32:EA:61:06:C4:6D:D7:61
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DF0342BF7EBABC93DA0961900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9a84099c-6d33-3817-8fb4-9730ff1b41f5.roa
Signing time:             Tue 17 May 2022 12:00:00 +0000
ROA not before:           Tue 17 May 2022 12:00:00 +0000
ROA not after:            Wed 22 Jun 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        13.244.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f0:34:2b:f7:eb:ab:c9:3d:a0:96:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May 17 12:00:00 2022 GMT
            Not After : Jun 22 04:00:00 2022 GMT
        Subject: CN=fca73e1b-52da-4d6a-a9ab-b9d8eaa7f1a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ee:09:7e:2f:b2:48:98:cb:3f:52:8f:ad:6b:
                    5f:25:64:b8:b0:67:03:0a:5f:67:4a:7c:d0:bd:3c:
                    88:18:91:24:62:6c:c0:2b:98:1b:97:99:3f:9c:e4:
                    e2:48:b8:26:54:7d:9f:a7:a8:88:41:7c:38:c4:14:
                    42:7b:d4:67:bc:b5:12:ca:d9:34:e5:5e:11:a2:a0:
                    6b:50:b7:8a:03:0c:4b:4d:8d:b3:e9:75:03:17:36:
                    76:e2:e6:ad:09:1c:84:3d:a5:4e:ed:49:79:c6:4d:
                    fc:a5:68:67:8f:c5:2f:79:44:f3:08:eb:18:9f:38:
                    39:59:5c:22:ce:7a:e4:3d:e3:77:53:dc:16:8f:70:
                    2c:e1:4b:f3:31:26:bc:66:7d:7e:3c:0a:eb:fc:61:
                    2e:0b:c6:f9:f9:47:28:3a:10:af:63:50:17:e2:80:
                    0f:23:1b:01:95:a6:b6:7a:fd:ea:48:f6:dc:f5:da:
                    7c:fb:a0:be:65:69:f3:ae:53:d0:e6:2c:e1:1a:39:
                    cf:f7:cd:73:de:3e:c9:d1:ca:3b:af:c9:1e:af:92:
                    ac:67:e0:df:47:b3:be:27:03:2f:30:e4:67:65:d9:
                    09:ef:0c:b5:87:25:10:1d:60:1f:0f:57:6d:c1:91:
                    3a:48:87:c6:a1:f3:21:3e:10:bd:3f:5a:2f:bb:d6:
                    df:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:4D:60:E3:95:AD:58:FC:46:E0:DB:04:32:EA:61:06:C4:6D:D7:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9a84099c-6d33-3817-8fb4-9730ff1b41f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.244.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:c5:20:c2:4e:d8:e5:3d:f0:36:1b:25:5f:50:d7:3e:54:81:
         4b:33:e6:8e:00:84:70:77:3d:70:b0:9c:c3:c3:23:82:5b:9e:
         88:84:98:46:ce:38:6a:cf:f3:47:02:66:b2:20:1c:65:f8:2d:
         c3:4e:c6:5d:70:6b:0f:9f:e9:49:35:ce:52:c5:0a:f1:33:26:
         58:58:61:5d:d3:c9:e6:9a:53:81:4a:ac:98:fb:cc:17:50:7f:
         43:de:54:45:40:b6:a8:41:e5:97:8d:83:fa:2a:fe:59:bc:ad:
         70:33:ef:4e:52:5b:b2:19:51:47:e3:9a:e4:a1:5b:45:94:a7:
         de:8a:4a:bf:6e:2f:f2:ef:f5:16:e4:f5:a7:49:24:42:00:2a:
         19:78:ee:0c:8e:2d:b3:9e:67:53:e2:f0:74:41:f6:29:87:e4:
         12:ad:3a:56:38:5b:1a:41:2d:6f:36:e4:55:aa:6e:19:0d:c4:
         52:e0:6e:be:ff:23:a2:cb:d1:f4:e1:c2:19:f1:5f:a3:c2:9a:
         d2:19:c6:8d:d9:65:61:e3:24:ee:87:dc:70:a2:eb:35:00:29:
         a8:28:a3:56:32:44:5a:9c:04:79:c8:a1:92:6a:9a:b5:31:0c:
         ce:96:b2:ff:dc:de:13:c4:0b:f9:a9:5b:93:06:d3:af:a3:03:
         aa:3a:04:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----