Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9b1ad4b6-03e7-3016-b948-5107f76e6bba.roa
File:                     9b1ad4b6-03e7-3016-b948-5107f76e6bba.roa (raw, json)
Hash identifier:          q6NzH5lYfre6lqFxmWHWC5PTuHOVaHhNProabdL5o2o=
Subject key identifier:   E8:3E:81:A9:0F:1F:B3:61:1C:5B:F3:D2:04:80:2E:37:E5:38:EA:9F
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E8F3EFC596BEC55D68381AE00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9b1ad4b6-03e7-3016-b948-5107f76e6bba.roa
Signing time:             Wed 13 Jul 2022 12:00:00 +0000
ROA not before:           Wed 13 Jul 2022 12:00:00 +0000
ROA not after:            Thu 18 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        15.177.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:8f:3e:fc:59:6b:ec:55:d6:83:81:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul 13 12:00:00 2022 GMT
            Not After : Aug 18 04:00:00 2022 GMT
        Subject: CN=9ed0ea53-36d4-4733-9a0a-1afdfec17ef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:45:52:d7:85:6f:2f:d2:c7:1d:1d:4c:e2:e9:
                    fa:ee:63:0f:1d:a3:de:6e:d8:c9:2b:f8:82:23:89:
                    44:7e:47:4e:18:29:45:8b:84:77:69:ad:39:34:65:
                    5e:54:cd:f7:8d:fa:cb:67:30:80:b3:91:5a:b2:1a:
                    01:88:42:1b:4a:48:09:c2:7c:9d:b5:c8:da:a6:a3:
                    3c:55:f1:35:20:94:25:3f:33:3d:ed:d2:1b:18:f4:
                    31:99:b0:26:d1:53:2c:ea:30:58:6c:1c:65:f6:bc:
                    32:16:c3:4a:87:5d:aa:27:1d:4a:77:d0:b5:58:55:
                    99:bb:d2:77:7f:c3:66:76:94:1e:9e:cb:6a:85:2f:
                    9a:f6:ba:f8:17:b9:3b:6a:b9:8c:26:64:21:8f:9f:
                    a8:b5:12:3a:10:a4:30:71:85:f0:30:fc:ca:3a:30:
                    c7:b2:85:cf:09:5d:0b:23:be:a7:fb:58:d5:74:3e:
                    0f:3a:4c:ce:eb:f7:b0:75:e1:f5:75:cd:b6:e7:6f:
                    aa:6b:09:97:28:90:88:82:84:41:69:f0:44:b9:16:
                    e2:1c:7c:9d:8c:e3:f8:86:f9:59:f5:d5:79:84:f7:
                    38:ed:a6:a8:fd:c2:9f:2d:df:34:d2:a8:88:8a:3e:
                    06:fb:b9:f9:32:2b:7e:27:72:7a:46:7d:89:f9:c1:
                    17:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3E:81:A9:0F:1F:B3:61:1C:5B:F3:D2:04:80:2E:37:E5:38:EA:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9b1ad4b6-03e7-3016-b948-5107f76e6bba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.177.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:66:97:ae:7f:cc:c0:b7:eb:ec:2e:c8:5b:3e:76:00:af:ec:
         5f:eb:78:54:60:90:ef:87:e5:ef:29:ac:fb:1a:e6:fc:78:77:
         ba:43:e9:ce:b3:df:a9:34:d1:8f:64:96:79:d6:97:52:4a:a9:
         e8:34:7b:08:17:7a:a9:a2:79:24:09:ab:73:b0:6c:79:5c:eb:
         42:e4:e5:d3:de:8d:99:90:79:f4:02:69:85:91:59:69:5b:43:
         ac:a0:51:e0:2d:ba:e3:ef:a9:7c:a1:22:89:a3:ba:3d:1e:03:
         3f:cf:06:c6:58:e8:71:69:2d:11:aa:72:e2:c0:6b:15:9f:1e:
         62:4c:92:28:46:9d:09:15:b4:de:0b:22:62:de:6f:13:98:79:
         ad:53:4f:e9:47:e6:f1:a1:b7:c6:52:e5:eb:1d:3b:55:65:c4:
         3a:96:69:77:1f:eb:a1:29:8f:f2:83:2a:c9:c6:dc:88:74:fa:
         54:be:b9:21:a0:eb:41:c9:fc:79:82:4f:0a:78:43:68:e4:36:
         e4:59:7e:02:6c:97:3d:d8:71:50:fd:92:83:20:01:77:2f:c0:
         f7:55:25:36:76:a9:d4:33:53:7d:02:64:0d:67:f8:a1:d0:0f:
         e8:cb:9c:50:a3:10:0a:af:68:62:f9:69:d3:2e:d8:67:18:25:
         bb:7a:fe:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----