Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b03a83d2-f693-30e9-859e-2955c979f4ac.roa
File:                     b03a83d2-f693-30e9-859e-2955c979f4ac.roa (raw, json)
Hash identifier:          qifk+o7q9iD2oISSBpKGr94m1FN6F/DrDT75m3fLsxs=
Subject key identifier:   53:BD:6C:B1:53:FB:42:1E:D5:45:9D:69:FA:48:C5:FC:EC:12:36:09
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E9F4504535B22BF706516AFB8
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b03a83d2-f693-30e9-859e-2955c979f4ac.roa
Signing time:             Mon 18 Jul 2022 12:00:00 +0000
ROA not before:           Mon 18 Jul 2022 12:00:00 +0000
ROA not after:            Tue 23 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        136.135.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:9f:45:04:53:5b:22:bf:70:65:16:af:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul 18 12:00:00 2022 GMT
            Not After : Aug 23 04:00:00 2022 GMT
        Subject: CN=1336ae18-5c48-4cb3-950d-aee8ce39d937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:10:99:c7:4f:1f:34:3e:4c:c8:7d:7a:c4:a6:
                    82:4e:bb:30:a7:23:b4:39:09:b3:3c:eb:0b:74:ca:
                    19:aa:b6:fd:6a:69:01:80:17:87:fa:73:69:ff:d9:
                    2f:33:8d:94:ef:6e:52:f0:ed:99:31:82:48:36:c0:
                    6a:e9:7a:0f:f5:ed:a2:d5:0c:ac:fd:0b:97:d1:a4:
                    55:37:c5:0d:78:86:c6:77:dc:59:0b:a7:02:13:60:
                    87:42:89:fa:1a:02:1d:e5:9c:27:a5:ba:93:bc:40:
                    eb:fb:5d:90:37:e5:24:ab:c9:28:50:25:eb:78:8d:
                    12:04:1c:43:0d:ab:55:de:45:21:a8:72:70:4a:18:
                    ed:6f:a3:43:92:c6:61:73:b2:f2:f5:cc:e9:30:4f:
                    d3:34:56:ab:d0:b6:a3:d0:e5:85:91:d9:4a:60:86:
                    56:24:36:18:4e:43:bb:4b:93:2f:97:87:dd:23:0a:
                    d2:a0:b2:f8:9c:19:7e:ba:9a:9d:99:de:91:5f:9d:
                    1b:59:b1:45:f7:9f:89:91:6f:27:f7:bf:e2:32:a3:
                    eb:3e:b4:f8:21:77:cc:94:34:ce:26:79:34:00:ac:
                    42:78:4f:c3:e9:5c:c9:c0:9c:88:0b:10:6e:f4:62:
                    e6:3e:40:d2:03:75:a1:f5:9b:e2:fe:d9:a4:4b:b4:
                    60:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BD:6C:B1:53:FB:42:1E:D5:45:9D:69:FA:48:C5:FC:EC:12:36:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b03a83d2-f693-30e9-859e-2955c979f4ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.135.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:cb:92:b3:9b:9d:01:bb:8c:2f:d8:e8:44:76:dc:44:7f:0e:
         dd:24:9f:51:42:6a:cb:7e:2e:eb:35:04:ba:93:ae:2f:0c:3f:
         c3:6b:40:d6:55:b4:2b:86:6c:35:89:46:67:06:b5:e3:0a:cc:
         1a:6f:59:64:96:1f:e1:ec:cb:a3:3b:15:56:dd:3e:17:14:b8:
         57:04:51:17:51:f1:39:5e:bc:97:80:01:f1:66:03:42:b1:6e:
         1d:76:f9:28:db:94:f4:d4:29:bd:e1:b9:3b:ea:19:62:84:16:
         95:91:39:ac:3f:0f:18:92:9b:8d:6c:57:18:cd:87:26:19:1c:
         d5:e7:d6:57:69:d7:d6:bf:8f:8b:bc:1c:3f:47:e3:9c:6c:dd:
         a9:51:42:2a:2f:d3:ea:83:bc:4e:2f:e6:55:a6:a3:8c:ec:4d:
         b5:4b:50:75:92:1f:49:64:b5:9e:2b:f0:da:43:01:28:5c:4f:
         ad:82:ec:8a:11:03:ab:12:a3:89:33:4c:5a:b2:27:dc:c4:39:
         41:aa:23:aa:d7:41:0c:df:7e:d4:cc:7c:e7:54:c7:f4:f9:76:
         08:4e:3b:d3:8f:84:d3:f9:4b:33:99:e3:5e:04:27:ee:8f:4f:
         e8:a4:f8:7a:7e:b2:af:d7:c5:77:fc:a4:1c:08:66:64:a7:23:
         c4:87:09:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----