Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bdffd03b-63de-4897-bce0-96cc8838b28e/eddcab8a-94c6-32a8-9c72-2b7b011f6685.roa
File:                     eddcab8a-94c6-32a8-9c72-2b7b011f6685.roa (raw, json)
Hash identifier:          zuAyQskcBrm0q5lMuKxv0/H3KKcnUOO7a6RNuKpK6ag=
Subject key identifier:   4B:48:2E:54:73:26:01:97:7E:0C:49:A1:32:9B:45:61:84:24:4F:6E
Certificate issuer:       /CN=bdffd03b-63de-4897-bce0-96cc8838b28e
Certificate serial:       010D0C9F4328583D8D9C2C04CCA63A8AFE5AD100
Authority key identifier: AF:E5:86:40:67:69:C8:11:B0:A2:FC:EB:D7:43:D8:72:B2:CC:5F:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bdffd03b-63de-4897-bce0-96cc8838b28e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bdffd03b-63de-4897-bce0-96cc8838b28e/eddcab8a-94c6-32a8-9c72-2b7b011f6685.roa
Signing time:             Tue 12 Apr 2022 04:00:00 +0000
ROA not before:           Tue 12 Apr 2022 04:00:00 +0000
ROA not after:            Mon 15 Jul 2024 04:00:00 +0000
asID:                     22281
IP address blocks:        23.153.192.0/24 maxlen: 24
                          2602:feaa::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:8d:9c:2c:04:cc:a6:3a:8a:fe:5a:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdffd03b-63de-4897-bce0-96cc8838b28e
        Validity
            Not Before: Apr 12 04:00:00 2022 GMT
            Not After : Jul 15 04:00:00 2024 GMT
        Subject: CN=165d25a6-0d41-4196-bbd1-f622484722ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f9:22:c0:20:b9:92:b5:f0:25:dc:8f:91:8b:
                    7c:9f:27:61:a7:43:a3:32:6c:2f:66:3b:b9:8d:eb:
                    61:fb:20:da:3e:3b:07:61:f3:6e:06:8f:7e:a0:4f:
                    4b:4f:16:44:cb:c8:7f:d1:85:43:8c:0b:ba:83:b3:
                    42:fb:18:19:dd:20:1b:11:d5:cb:4f:16:de:0c:49:
                    23:e7:03:a0:31:7f:b2:08:fd:a6:ab:3b:26:fa:c5:
                    ab:83:18:4b:6c:2e:f1:21:18:1d:57:e9:a7:8e:0a:
                    8f:be:e2:c1:48:d2:1a:54:ba:40:b5:04:48:77:65:
                    b6:f2:f2:19:34:bc:38:ae:7d:ec:2e:c5:0c:e0:46:
                    ec:c2:5d:0b:a7:f3:9f:55:be:8c:a7:1f:3c:a2:ec:
                    45:97:5a:1c:59:fd:b2:87:21:33:5d:2e:37:de:4e:
                    77:ae:76:ad:3b:a4:7a:98:30:c5:a7:4b:b4:48:27:
                    6d:20:d8:ce:52:6a:2e:d2:7c:cc:8c:a7:aa:67:ae:
                    0e:d3:95:6c:ad:98:cf:ea:80:36:8f:37:a4:44:c5:
                    c3:c5:37:27:78:8f:a1:fa:b1:44:6f:b3:72:0c:b2:
                    e1:65:d8:e9:67:d8:7a:ba:61:db:75:9a:64:e7:62:
                    76:f6:cc:c2:61:8c:69:b1:39:d7:8b:95:f2:4f:44:
                    1b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:48:2E:54:73:26:01:97:7E:0C:49:A1:32:9B:45:61:84:24:4F:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bdffd03b-63de-4897-bce0-96cc8838b28e/eddcab8a-94c6-32a8-9c72-2b7b011f6685.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bdffd03b-63de-4897-bce0-96cc8838b28e/bdffd03b-63de-4897-bce0-96cc8838b28e.crl

            X509v3 Authority Key Identifier:
                keyid:AF:E5:86:40:67:69:C8:11:B0:A2:FC:EB:D7:43:D8:72:B2:CC:5F:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bdffd03b-63de-4897-bce0-96cc8838b28e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.153.192.0/24
                IPv6:
                  2602:feaa::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:b4:94:f5:05:6a:4f:89:77:4c:31:39:69:cf:96:80:3a:36:
         81:e0:45:f5:6a:4d:df:9b:6e:c9:9c:1d:6b:c1:20:da:11:24:
         66:a7:69:af:35:55:b0:73:cb:b8:c1:1a:d3:f7:9b:7c:b5:9b:
         31:1d:6b:3a:a8:e1:7a:64:23:63:78:05:e1:de:42:73:81:0b:
         e8:cb:4f:bf:9b:a1:0c:51:60:c4:97:ea:82:b6:77:58:2d:a1:
         d5:93:8c:30:08:7d:e7:4b:2c:f8:13:dc:e8:8d:0d:d1:f4:a9:
         75:f7:01:3c:40:d2:1b:ff:cb:77:1c:2f:8b:dc:b6:62:54:a3:
         4a:0b:60:8c:6e:2d:c9:4e:49:6e:db:f9:b7:1f:a0:0a:43:ad:
         08:5e:e7:85:77:aa:07:a1:d2:e1:a3:04:a9:ea:d6:46:f4:7a:
         99:df:7e:95:47:4e:14:6b:3b:5e:a3:39:6a:04:63:67:9e:d0:
         99:40:d2:61:73:9e:09:df:d1:09:c5:be:79:de:14:14:0b:eb:
         02:17:7a:2b:24:4b:62:36:3e:f5:b5:14:c1:4d:77:db:ee:d7:
         ce:d7:48:8f:15:e0:66:6d:b7:ca:ae:28:a3:ea:89:93:21:ac:
         2d:78:08:b3:ed:46:15:fe:31:47:51:1a:37:fb:6e:ec:37:2d:
         dc:3d:98:10
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWD2NnCwEzKY6iv5a0QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmRmZmQwM2ItNjNkZS00ODk3LWJjZTAtOTZjYzg4Mzhi
MjhlMB4XDTIyMDQxMjA0MDAwMFoXDTI0MDcxNTA0MDAwMFowLzEtMCsGA1UEAxMk
MTY1ZDI1YTYtMGQ0MS00MTk2LWJiZDEtZjYyMjQ4NDcyMmVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvkiwCC5krXwJdyPkYt8nydhp0OjMmwvZju5
jeth+yDaPjsHYfNuBo9+oE9LTxZEy8h/0YVDjAu6g7NC+xgZ3SAbEdXLTxbeDEkj
5wOgMX+yCP2mqzsm+sWrgxhLbC7xIRgdV+mnjgqPvuLBSNIaVLpAtQRId2W28vIZ
NLw4rn3sLsUM4Ebswl0Lp/OfVb6Mpx88ouxFl1ocWf2yhyEzXS433k53rnatO6R6
mDDFp0u0SCdtINjOUmou0nzMjKeqZ64O05VsrZjP6oA2jzekRMXDxTcneI+h+rFE
b7NyDLLhZdjpZ9h6umHbdZpk52J29szCYYxpsTnXi5XyT0QbsQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFEtILlRzJgGXfgxJoTKbRWGEJE9uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZGZm
ZDAzYi02M2RlLTQ4OTctYmNlMC05NmNjODgzOGIyOGUvZWRkY2FiOGEtOTRjNi0z
MmE4LTljNzItMmI3YjAxMWY2Njg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmRmZmQwM2ItNjNkZS00ODk3LWJj
ZTAtOTZjYzg4MzhiMjhlL2JkZmZkMDNiLTYzZGUtNDg5Ny1iY2UwLTk2Y2M4ODM4
YjI4ZS5jcmwwHwYDVR0jBBgwFoAUr+WGQGdpyBGwovzr10PYcrLMX70wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9iZGZmZDAzYi02M2RlLTQ4OTctYmNlMC05NmNj
ODgzOGIyOGUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5nAMA4E
AgACMAgDBgQmAv6qADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB1tJT1BWpPiXdMMTlpz5aAOjaB4EX1ak3f
m27JnB1rwSDaESRmp2mvNVWwc8u4wRrT95t8tZsxHWs6qOF6ZCNjeAXh3kJzgQvo
y0+/m6EMUWDEl+qCtndYLaHVk4wwCH3nSyz4E9zojQ3R9Kl19wE8QNIb/8t3HC+L
3LZiVKNKC2CMbi3JTklu2/m3H6AKQ60IXueFd6oHodLhowSp6tZG9HqZ336VR04U
azteozlqBGNnntCZQNJhc54J39EJxb553hQUC+sCF3orJEtiNj71tRTBTXfb7tfO
10iPFeBmbbfKriij6omTIawteAiz7UYV/jFHURo3+27sNy3cPZgQ
-----END CERTIFICATE-----