Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80f0e919-8ed6-4b5f-bc05-1b833ab626da/1c7807b5-f32b-3a7f-b729-d18729621520.roa
File:                     1c7807b5-f32b-3a7f-b729-d18729621520.roa (raw, json)
Hash identifier:          1PKVuB9P3GpqMEV38pXGZOj12JW0KkrlADJ75hhuTq8=
Subject key identifier:   10:08:15:19:CE:F5:67:5A:83:D2:37:39:2B:A5:0E:E9:57:FC:55:A3
Certificate issuer:       /CN=80f0e919-8ed6-4b5f-bc05-1b833ab626da
Certificate serial:       010D0C9F4328583F557CACB760032B8427B7AC00
Authority key identifier: A7:02:98:3F:AE:FA:FE:7F:00:28:35:A9:4C:B2:34:5D:C9:C2:81:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80f0e919-8ed6-4b5f-bc05-1b833ab626da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80f0e919-8ed6-4b5f-bc05-1b833ab626da/1c7807b5-f32b-3a7f-b729-d18729621520.roa
Signing time:             Wed 24 Aug 2022 18:39:08 +0000
ROA not before:           Wed 24 Aug 2022 18:39:08 +0000
ROA not after:            Mon 25 Dec 2023 05:00:00 +0000
asID:                     61317
IP address blocks:        140.99.26.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:55:7c:ac:b7:60:03:2b:84:27:b7:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80f0e919-8ed6-4b5f-bc05-1b833ab626da
        Validity
            Not Before: Aug 24 18:39:08 2022 GMT
            Not After : Dec 25 05:00:00 2023 GMT
        Subject: CN=01244066-a17c-45be-9534-04e8cddffa7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:60:55:d6:15:89:c5:ef:3f:7a:32:09:75:ec:
                    33:fa:bc:1c:c0:0a:09:91:c0:f0:8d:62:bc:a6:8d:
                    5f:af:e3:8b:db:50:08:0f:00:1f:1b:4b:9e:63:6b:
                    a0:b1:13:c5:95:4f:27:ba:40:10:10:1c:7c:43:b2:
                    a2:a1:cc:0a:26:da:35:2c:8e:f3:6b:0a:e1:2d:cf:
                    ef:c7:60:8a:0c:b0:5d:58:29:d5:d4:eb:96:22:be:
                    87:60:63:c6:31:20:55:7c:aa:0c:c5:95:99:1c:71:
                    09:f9:b3:e0:08:88:b0:c4:f5:b3:12:bc:b2:41:65:
                    ed:e8:ee:bd:c3:ee:d5:d6:ea:5b:1b:90:e5:67:50:
                    68:8e:77:1b:da:4d:4e:d2:70:14:3d:84:1b:cb:ec:
                    e4:78:b2:9e:90:63:ed:77:32:87:bb:6c:60:7e:eb:
                    16:37:b8:93:51:ae:d8:36:c2:b3:08:01:8c:3a:5f:
                    bb:24:cd:da:41:50:6b:98:d4:f0:d7:d4:9a:4f:e5:
                    cd:39:ec:fa:de:bb:85:00:99:c1:71:73:ae:e3:cb:
                    e5:b5:5c:1b:22:94:dd:1c:bb:47:4e:c8:65:90:45:
                    58:95:a2:ff:ae:13:17:40:46:27:f6:f7:40:f9:44:
                    35:40:e1:e8:07:e5:e8:57:be:53:f6:3d:99:a4:6b:
                    eb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:08:15:19:CE:F5:67:5A:83:D2:37:39:2B:A5:0E:E9:57:FC:55:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80f0e919-8ed6-4b5f-bc05-1b833ab626da/1c7807b5-f32b-3a7f-b729-d18729621520.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80f0e919-8ed6-4b5f-bc05-1b833ab626da/80f0e919-8ed6-4b5f-bc05-1b833ab626da.crl

            X509v3 Authority Key Identifier:
                keyid:A7:02:98:3F:AE:FA:FE:7F:00:28:35:A9:4C:B2:34:5D:C9:C2:81:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80f0e919-8ed6-4b5f-bc05-1b833ab626da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:be:83:e7:77:78:f9:da:fa:0e:44:c8:26:dd:fd:a3:72:7f:
         4b:67:31:93:08:25:72:bf:da:2d:f0:ad:4a:d3:1f:e9:72:da:
         4d:20:7c:96:07:4b:5a:03:e3:88:3f:85:d3:91:ad:b0:c2:70:
         22:20:b4:92:a6:9e:82:84:52:59:4a:e5:b0:1b:04:35:96:b7:
         20:d4:ee:c4:5d:1c:1b:e5:17:e6:58:7b:3d:56:a5:8e:bd:9e:
         b0:72:ac:aa:8b:71:7d:93:9e:89:b0:4f:1f:63:9d:48:38:60:
         a9:fc:ea:07:7c:05:76:47:65:47:14:7f:37:09:99:3f:af:59:
         db:44:0f:d3:25:ab:d9:8a:c5:d1:61:99:a7:eb:92:51:3e:22:
         29:12:95:5b:58:51:e7:b2:9f:7e:38:31:b6:13:e5:66:66:a4:
         82:fd:35:2f:f3:71:f5:20:b4:dd:f1:98:3c:a5:d7:61:8f:d0:
         54:4c:1a:39:d5:0f:28:2b:b0:45:26:11:1a:ad:26:a5:9a:f2:
         cf:5a:74:d0:19:1c:89:94:27:23:e1:f1:71:0c:d4:91:e8:3a:
         b2:8b:ee:fe:9c:3b:31:83:69:7f:c2:46:45:96:7f:3f:51:a0:
         0a:81:cb:40:75:da:e3:3f:c4:8b:aa:67:64:8a:e5:60:37:a5:
         5e:9d:a8:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD9VfKy3YAMrhCe3rAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODBmMGU5MTktOGVkNi00YjVmLWJjMDUtMWI4MzNhYjYy
NmRhMB4XDTIyMDgyNDE4MzkwOFoXDTIzMTIyNTA1MDAwMFowLzEtMCsGA1UEAxMk
MDEyNDQwNjYtYTE3Yy00NWJlLTk1MzQtMDRlOGNkZGZmYTdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWBV1hWJxe8/ejIJdewz+rwcwAoJkcDwjWK8
po1fr+OL21AIDwAfG0ueY2ugsRPFlU8nukAQEBx8Q7KiocwKJto1LI7zawrhLc/v
x2CKDLBdWCnV1OuWIr6HYGPGMSBVfKoMxZWZHHEJ+bPgCIiwxPWzEryyQWXt6O69
w+7V1upbG5DlZ1Bojncb2k1O0nAUPYQby+zkeLKekGPtdzKHu2xgfusWN7iTUa7Y
NsKzCAGMOl+7JM3aQVBrmNTw19SaT+XNOez63ruFAJnBcXOu48vltVwbIpTdHLtH
TshlkEVYlaL/rhMXQEYn9vdA+UQ1QOHoB+XoV75T9j2ZpGvr3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBAIFRnO9Wdag9I3OSulDulX/FWjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MGYw
ZTkxOS04ZWQ2LTRiNWYtYmMwNS0xYjgzM2FiNjI2ZGEvMWM3ODA3YjUtZjMyYi0z
YTdmLWI3MjktZDE4NzI5NjIxNTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODBmMGU5MTktOGVkNi00YjVmLWJj
MDUtMWI4MzNhYjYyNmRhLzgwZjBlOTE5LThlZDYtNGI1Zi1iYzA1LTFiODMzYWI2
MjZkYS5jcmwwHwYDVR0jBBgwFoAUpwKYP676/n8AKDWpTLI0XcnCgWUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84MGYwZTkxOS04ZWQ2LTRiNWYtYmMwNS0xYjgz
M2FiNjI2ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjGMaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADq+g+d3ePna+g5EyCbd/aNyf0tnMZMIJXK/2i3wrUrTH+ly2k0gfJYH
S1oD44g/hdORrbDCcCIgtJKmnoKEUllK5bAbBDWWtyDU7sRdHBvlF+ZYez1WpY69
nrByrKqLcX2TnomwTx9jnUg4YKn86gd8BXZHZUcUfzcJmT+vWdtED9Mlq9mKxdFh
mafrklE+IikSlVtYUeeyn344MbYT5WZmpIL9NS/zcfUgtN3xmDyl12GP0FRMGjnV
DygrsEUmERqtJqWa8s9adNAZHImUJyPh8XEM1JHoOrKL7v6cOzGDaX/CRkWWfz9R
oAqBy0B12uM/xIuqZ2SK5WA3pV6dqFE=
-----END CERTIFICATE-----