Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/025c9cf0-4176-367a-a744-11d30883d4aa.roa
File:                     025c9cf0-4176-367a-a744-11d30883d4aa.roa (raw, json)
Hash identifier:          gXmRHWyAgZfVH6F6Yf9Fj5AbKll3U0qY/S1ZHmjY0Sw=
Subject key identifier:   1B:60:1C:33:41:57:40:A8:78:B5:9B:40:8F:E0:6D:D1:CE:AB:E8:0D
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583E2125A60E8E51790FEB1E08C0
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/025c9cf0-4176-367a-a744-11d30883d4aa.roa
Signing time:             Fri 03 Jun 2022 12:00:00 +0000
ROA not before:           Fri 03 Jun 2022 12:00:00 +0000
ROA not after:            Sat 09 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        23.249.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:21:25:a6:0e:8e:51:79:0f:eb:1e:08:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Jun  3 12:00:00 2022 GMT
            Not After : Jul  9 04:00:00 2022 GMT
        Subject: CN=56442d77-c59b-4d9c-9b18-956cc1485658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e7:fb:90:ca:cf:71:da:98:ca:bd:e2:a2:23:
                    c3:b7:8c:9e:86:93:65:d9:a6:a7:cf:dd:53:2e:4d:
                    46:1c:be:d0:ea:de:90:2e:09:97:db:0b:78:32:a2:
                    2f:6b:75:bc:ff:4c:fc:83:96:f3:61:18:79:e5:1c:
                    bd:e2:e7:d3:57:fd:4d:02:c3:fb:09:74:42:a7:80:
                    01:81:62:a7:3b:65:eb:e1:79:c0:c7:ef:26:7b:db:
                    3d:e4:5d:09:64:d3:6e:ab:98:ac:b5:fb:3e:45:d7:
                    cd:48:81:e2:a9:fe:67:4a:50:f9:aa:d8:57:37:85:
                    8d:a6:e1:12:1b:fb:a3:57:45:15:a8:a0:ac:c8:48:
                    1e:18:7f:67:b4:84:5d:65:3c:f3:c3:cc:cb:f6:f9:
                    a6:21:8e:81:da:c9:52:44:2b:fb:a8:f2:8a:7e:26:
                    bf:92:54:9d:3a:8a:df:54:71:eb:84:58:a1:f6:32:
                    66:26:c1:59:51:11:79:c6:9b:d0:89:1c:11:47:23:
                    40:3b:82:ea:e0:42:0e:d7:21:f0:ac:85:f0:05:85:
                    cd:84:14:73:da:26:25:af:dd:87:27:ac:9c:df:be:
                    63:80:c9:0e:8a:9a:29:80:37:da:af:8c:33:2f:ee:
                    86:45:ed:04:11:0e:52:88:17:ab:ae:9c:5b:39:ba:
                    93:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:60:1C:33:41:57:40:A8:78:B5:9B:40:8F:E0:6D:D1:CE:AB:E8:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/025c9cf0-4176-367a-a744-11d30883d4aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:a3:c9:19:9a:f2:20:9a:ab:15:07:09:7a:2a:19:5c:70:aa:
         e1:2f:94:8d:62:6a:ee:cc:d5:20:8e:11:16:2c:06:c5:28:27:
         97:04:77:eb:4f:7b:61:de:46:58:84:23:58:6c:40:e6:23:e4:
         10:8f:3e:a8:e9:8f:f7:0e:b3:38:8a:e1:fe:7a:da:75:aa:bf:
         91:d3:87:83:f6:3d:a9:ba:2f:41:2c:55:e8:69:8f:85:6e:f4:
         44:4e:db:36:cd:9d:63:0f:17:bf:90:74:67:e8:be:26:a9:4f:
         b8:83:e9:1c:7c:9e:58:77:e8:03:36:cf:6f:4d:4a:31:3b:e2:
         1c:0c:16:c8:13:98:09:ac:86:c2:dc:fb:c9:5f:f4:93:3b:a7:
         82:11:52:a3:26:1a:1c:49:db:1b:f9:6e:05:20:01:d3:a5:2a:
         06:9b:26:c6:86:6c:2a:49:73:ed:d7:c7:e1:77:3e:3e:e9:e4:
         b5:be:22:0b:61:f3:68:17:92:e1:71:be:f6:fd:eb:94:f8:4e:
         34:01:e4:33:55:09:6f:cf:de:ea:d4:87:87:66:e3:57:18:2f:
         d3:1c:8c:10:61:f5:cf:36:5c:2e:cb:cf:95:34:d7:dc:ce:c4:
         55:ae:88:1d:d6:02:19:d7:31:54:10:8b:4b:19:ea:db:16:29:
         1b:b5:db:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----