Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/527df878-fa3b-38d3-b0f3-fc7380f1296b.roa
File:                     527df878-fa3b-38d3-b0f3-fc7380f1296b.roa (raw, json)
Hash identifier:          Weeq5Eljop+DfrUVhP+92fuy7zxwgGxjjOvC1B5vbBk=
Subject key identifier:   65:73:58:F4:FF:17:EB:4A:7D:1C:36:BF:56:12:6B:7A:91:C5:EA:C9
Certificate issuer:       /CN=505332f5-c843-4e04-add6-4ef51984b8f2
Certificate serial:       010D0C9F4328583D3308DE0845FF4E4B4B77E600
Authority key identifier: 4B:AF:0A:76:57:5E:C4:4D:30:4D:82:DE:3B:0F:0E:02:60:57:28:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/527df878-fa3b-38d3-b0f3-fc7380f1296b.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        96.127.0.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:33:08:de:08:45:ff:4e:4b:4b:77:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505332f5-c843-4e04-add6-4ef51984b8f2
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=6b8e79d5-100b-4d9d-8490-c4927cac965a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:68:cd:ed:62:68:e2:b1:fe:d7:bc:02:aa:97:
                    75:3e:10:57:a5:16:46:fa:38:bd:56:dd:4e:f7:80:
                    8d:3d:c1:5d:f1:a2:76:ca:0f:a2:a0:1c:42:1a:d6:
                    5f:bc:03:85:67:e5:74:6d:a2:8b:2d:12:88:10:c7:
                    59:a0:5d:2c:b4:a1:79:9d:d4:9b:fc:7e:20:54:f1:
                    42:10:f2:12:1d:2d:6c:d2:4d:20:e6:d3:d1:b6:c6:
                    fb:9a:a0:fe:67:07:52:84:86:e5:77:e0:80:7e:96:
                    9f:68:73:f7:9a:a3:94:63:78:72:9e:ad:49:e8:4a:
                    5b:47:49:cf:5c:75:8d:2e:49:a3:f2:f3:08:99:27:
                    03:36:db:02:3b:d9:58:ac:66:d4:dc:cc:45:7f:d2:
                    44:6d:ad:7e:8a:6d:1f:4f:48:a2:c4:38:ec:e9:45:
                    10:ec:61:e3:35:8c:45:bb:a2:fd:34:ed:c7:a8:eb:
                    5b:cb:bd:bc:e6:3b:a6:f6:a7:98:b7:ed:be:c8:c8:
                    e1:4a:48:3c:d8:76:a8:c7:5f:22:65:35:f2:9a:d4:
                    95:88:4e:48:a7:02:c5:e2:cd:ff:f2:46:9f:8b:15:
                    ec:f8:57:f3:5c:31:69:9f:8c:11:74:64:bf:c8:16:
                    81:5d:7a:60:55:29:28:d2:74:7a:20:fe:44:49:74:
                    77:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:73:58:F4:FF:17:EB:4A:7D:1C:36:BF:56:12:6B:7A:91:C5:EA:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/527df878-fa3b-38d3-b0f3-fc7380f1296b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/505332f5-c843-4e04-add6-4ef51984b8f2.crl

            X509v3 Authority Key Identifier:
                keyid:4B:AF:0A:76:57:5E:C4:4D:30:4D:82:DE:3B:0F:0E:02:60:57:28:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.127.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:3a:a1:ee:07:86:c0:f5:c1:70:01:54:aa:08:fd:4f:29:17:
         77:24:96:59:19:2d:2f:00:fe:16:84:3b:27:ff:aa:6e:26:b2:
         16:b5:ef:ff:eb:74:5a:73:79:0d:bb:75:e1:82:26:80:58:08:
         5b:e1:d8:e2:3a:10:a6:95:4a:cc:42:92:c2:42:95:1b:72:98:
         a4:84:56:79:39:91:57:29:29:64:2a:fa:eb:eb:c1:27:6d:d8:
         b4:b2:1b:fa:11:17:24:16:f5:68:6b:08:75:1a:d0:9f:2a:f4:
         c2:c7:87:bd:7b:c0:10:59:e4:ec:12:42:3b:75:65:41:71:26:
         ce:01:2e:58:76:2e:16:82:a2:b1:73:9e:14:2a:65:fe:6e:8c:
         70:db:2a:3c:83:49:59:21:02:3a:d5:56:b0:d8:7f:fd:c8:71:
         e2:d6:eb:48:fb:57:f8:aa:6e:63:f8:b0:f8:e7:af:73:f1:af:
         79:40:b8:8a:41:0b:3d:f3:7b:0e:4a:f6:3a:60:f4:1c:a7:22:
         2e:a2:51:77:6c:ff:2d:09:88:27:7f:cc:dd:10:0e:e4:23:a7:
         68:67:ea:c7:a4:f8:35:ea:e6:b7:a0:ce:b4:3a:45:69:f3:aa:
         9f:2d:dd:83:e1:ed:8d:76:90:e1:13:f1:2c:9c:89:0c:15:58:
         8a:25:b3:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD0zCN4IRf9OS0t35gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTA1MzMyZjUtYzg0My00ZTA0LWFkZDYtNGVmNTE5ODRi
OGYyMB4XDTIyMDMxMTA1MDAwMFoXDTIyMDQxNTA0MDAwMFowLzEtMCsGA1UEAxMk
NmI4ZTc5ZDUtMTAwYi00ZDlkLTg0OTAtYzQ5MjdjYWM5NjVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWjN7WJo4rH+17wCqpd1PhBXpRZG+ji9Vt1O
94CNPcFd8aJ2yg+ioBxCGtZfvAOFZ+V0baKLLRKIEMdZoF0stKF5ndSb/H4gVPFC
EPISHS1s0k0g5tPRtsb7mqD+ZwdShIbld+CAfpafaHP3mqOUY3hynq1J6EpbR0nP
XHWNLkmj8vMImScDNtsCO9lYrGbU3MxFf9JEba1+im0fT0iixDjs6UUQ7GHjNYxF
u6L9NO3HqOtby7285jum9qeYt+2+yMjhSkg82Haox18iZTXymtSViE5IpwLF4s3/
8kafixXs+FfzXDFpn4wRdGS/yBaBXXpgVSko0nR6IP5ESXR3ywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGVzWPT/F+tKfRw2v1YSa3qRxerJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81MDUz
MzJmNS1jODQzLTRlMDQtYWRkNi00ZWY1MTk4NGI4ZjIvNTI3ZGY4NzgtZmEzYi0z
OGQzLWIwZjMtZmM3MzgwZjEyOTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTA1MzMyZjUtYzg0My00ZTA0LWFk
ZDYtNGVmNTE5ODRiOGYyLzUwNTMzMmY1LWM4NDMtNGUwNC1hZGQ2LTRlZjUxOTg0
YjhmMi5jcmwwHwYDVR0jBBgwFoAUS68KdldexE0wTYLeOw8OAmBXKEYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81MDUzMzJmNS1jODQzLTRlMDQtYWRkNi00ZWY1
MTk4NGI4ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHYH8AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEE6oe4HhsD1wXABVKoI/U8pF3ckllkZLS8A/haEOyf/qm4msha17//r
dFpzeQ27deGCJoBYCFvh2OI6EKaVSsxCksJClRtymKSEVnk5kVcpKWQq+uvrwSdt
2LSyG/oRFyQW9WhrCHUa0J8q9MLHh717wBBZ5OwSQjt1ZUFxJs4BLlh2LhaCorFz
nhQqZf5ujHDbKjyDSVkhAjrVVrDYf/3IceLW60j7V/iqbmP4sPjnr3Pxr3lAuIpB
Cz3zew5K9jpg9BynIi6iUXds/y0JiCd/zN0QDuQjp2hn6sek+DXq5regzrQ6RWnz
qp8t3YPh7Y12kOET8SyciQwVWIols7Y=
-----END CERTIFICATE-----