Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7d82b70a-1d8c-4526-b2c3-d9e15479f4c0/a12a19da-69b6-3e64-b649-0714ee096feb.roa
File:                     a12a19da-69b6-3e64-b649-0714ee096feb.roa (raw, json)
Hash identifier:          mDwXqj7p4W3PqwQ1qU3ZYq6bq+7WiFQfjiSh+0hKKoU=
Subject key identifier:   8E:0F:59:5A:FF:61:8C:83:F8:65:30:BF:4D:06:FA:58:DE:0E:2D:0F
Certificate issuer:       /CN=7d82b70a-1d8c-4526-b2c3-d9e15479f4c0
Certificate serial:       010D0C9F43285838754B80E758D6152024EB2460
Authority key identifier: 70:2D:81:B2:BA:38:CB:AD:32:55:D6:96:44:BE:BF:46:E8:4A:8F:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7d82b70a-1d8c-4526-b2c3-d9e15479f4c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7d82b70a-1d8c-4526-b2c3-d9e15479f4c0/a12a19da-69b6-3e64-b649-0714ee096feb.roa
Signing time:             Thu 31 Dec 2020 05:00:00 +0000
ROA not before:           Thu 31 Dec 2020 05:00:00 +0000
ROA not after:            Sat 31 Dec 2022 05:00:00 +0000
asID:                     61317
IP address blocks:        74.120.120.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:75:4b:80:e7:58:d6:15:20:24:eb:24:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d82b70a-1d8c-4526-b2c3-d9e15479f4c0
        Validity
            Not Before: Dec 31 05:00:00 2020 GMT
            Not After : Dec 31 05:00:00 2022 GMT
        Subject: CN=1a58665e-379c-4659-9c4b-6d1acf1c95a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d4:20:e4:ba:9b:7c:50:41:5e:2f:74:f6:e7:
                    b3:dd:16:f6:57:90:bc:50:39:0b:be:da:82:38:ad:
                    16:76:24:03:af:7b:2c:ae:1a:23:1a:1a:f9:7f:0d:
                    70:94:d7:e6:0b:24:8e:75:21:bd:6f:a2:a0:0c:ed:
                    31:62:0e:09:fa:bc:1d:86:70:5c:e7:72:0e:2a:ec:
                    ae:8c:75:e2:14:64:43:be:70:a6:86:70:80:13:a8:
                    0a:d8:52:80:65:d4:7f:ca:f2:9b:29:c2:6d:44:9f:
                    b5:82:6a:97:a2:de:ab:c5:89:84:dc:38:20:0e:c5:
                    c2:2a:ca:b3:ea:53:df:b2:15:32:64:bb:72:17:19:
                    f9:48:2e:b2:ce:84:47:41:60:87:2c:a7:24:c9:b8:
                    5a:cb:6a:ea:ff:d6:e3:5d:af:68:6e:3a:48:b6:f3:
                    56:82:34:4a:24:f2:72:9c:84:8a:94:21:bb:97:eb:
                    95:eb:da:6a:df:79:1a:71:f7:3e:d8:44:65:22:3c:
                    dd:55:1d:e7:5f:62:a9:bc:80:6e:c4:53:b5:de:15:
                    30:f3:2d:57:10:92:ef:ce:3c:b4:86:6c:aa:0f:03:
                    61:c2:cf:9b:c6:75:ac:dd:d2:a7:2e:f7:5f:06:3b:
                    49:24:f7:43:52:f9:b9:b8:67:7d:4a:af:ec:af:a3:
                    a2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0F:59:5A:FF:61:8C:83:F8:65:30:BF:4D:06:FA:58:DE:0E:2D:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7d82b70a-1d8c-4526-b2c3-d9e15479f4c0/a12a19da-69b6-3e64-b649-0714ee096feb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7d82b70a-1d8c-4526-b2c3-d9e15479f4c0/7d82b70a-1d8c-4526-b2c3-d9e15479f4c0.crl

            X509v3 Authority Key Identifier:
                keyid:70:2D:81:B2:BA:38:CB:AD:32:55:D6:96:44:BE:BF:46:E8:4A:8F:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7d82b70a-1d8c-4526-b2c3-d9e15479f4c0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:fb:b5:4c:18:57:5b:ac:aa:b8:31:6d:e6:32:e7:f0:7c:6c:
         88:ac:13:9d:a6:7b:6a:c0:96:f6:68:92:f6:94:8a:26:de:b6:
         85:6f:a1:ec:60:c6:04:7b:be:ee:df:40:66:10:aa:0b:0a:b2:
         48:29:8d:02:94:8c:85:36:db:d4:5b:ed:96:80:ab:fd:d8:23:
         0d:16:8d:a1:6d:18:1a:29:3f:d0:8f:56:2e:5f:fd:26:27:f7:
         86:fd:9e:ff:ef:64:00:b1:55:d6:de:ce:87:90:ad:b7:56:31:
         9e:4c:e2:49:7f:46:9c:7c:94:16:6e:01:44:04:2b:c3:d0:1e:
         df:b3:54:c1:a0:e5:78:a8:2c:54:a5:b6:4a:5d:8f:2c:42:84:
         20:04:be:f7:65:8e:3f:d3:5f:01:ca:ab:58:cb:ee:7a:0a:25:
         d3:4f:a9:58:67:4a:b3:e9:0b:e6:42:f5:87:3a:7d:ee:56:f3:
         de:87:37:45:52:50:14:bb:3e:3d:87:45:62:db:b2:71:55:9e:
         cf:58:1d:0f:8f:d0:c7:88:49:fd:ae:bd:54:c7:07:81:92:94:
         c3:ef:9b:b3:03:1f:31:5e:ff:11:97:05:92:d5:f4:8c:6d:3e:
         58:7d:19:1c:29:68:9d:f6:50:8e:21:e1:ca:7f:a6:22:f9:c1:
         31:0b:3a:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDh1S4DnWNYVICTrJGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2Q4MmI3MGEtMWQ4Yy00NTI2LWIyYzMtZDllMTU0Nzlm
NGMwMB4XDTIwMTIzMTA1MDAwMFoXDTIyMTIzMTA1MDAwMFowLzEtMCsGA1UEAxMk
MWE1ODY2NWUtMzc5Yy00NjU5LTljNGItNmQxYWNmMWM5NWE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNQg5LqbfFBBXi909uez3Rb2V5C8UDkLvtqC
OK0WdiQDr3ssrhojGhr5fw1wlNfmCySOdSG9b6KgDO0xYg4J+rwdhnBc53IOKuyu
jHXiFGRDvnCmhnCAE6gK2FKAZdR/yvKbKcJtRJ+1gmqXot6rxYmE3DggDsXCKsqz
6lPfshUyZLtyFxn5SC6yzoRHQWCHLKckybhay2rq/9bjXa9objpItvNWgjRKJPJy
nISKlCG7l+uV69pq33kacfc+2ERlIjzdVR3nX2KpvIBuxFO13hUw8y1XEJLvzjy0
hmyqDwNhws+bxnWs3dKnLvdfBjtJJPdDUvm5uGd9Sq/sr6OiKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI4PWVr/YYyD+GUwv00G+ljeDi0PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83ZDgy
YjcwYS0xZDhjLTQ1MjYtYjJjMy1kOWUxNTQ3OWY0YzAvYTEyYTE5ZGEtNjliNi0z
ZTY0LWI2NDktMDcxNGVlMDk2ZmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2Q4MmI3MGEtMWQ4Yy00NTI2LWIy
YzMtZDllMTU0NzlmNGMwLzdkODJiNzBhLTFkOGMtNDUyNi1iMmMzLWQ5ZTE1NDc5
ZjRjMC5jcmwwHwYDVR0jBBgwFoAUcC2Bsro4y60yVdaWRL6/RuhKjwYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83ZDgyYjcwYS0xZDhjLTQ1MjYtYjJjMy1kOWUx
NTQ3OWY0YzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnh4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFn7tUwYV1usqrgxbeYy5/B8bIisE52me2rAlvZokvaUiibetoVvoexg
xgR7vu7fQGYQqgsKskgpjQKUjIU229Rb7ZaAq/3YIw0WjaFtGBopP9CPVi5f/SYn
94b9nv/vZACxVdbezoeQrbdWMZ5M4kl/Rpx8lBZuAUQEK8PQHt+zVMGg5XioLFSl
tkpdjyxChCAEvvdljj/TXwHKq1jL7noKJdNPqVhnSrPpC+ZC9Yc6fe5W896HN0VS
UBS7Pj2HRWLbsnFVns9YHQ+P0MeISf2uvVTHB4GSlMPvm7MDHzFe/xGXBZLV9Ixt
Plh9GRwpaJ32UI4h4cp/piL5wTELOqA=
-----END CERTIFICATE-----