Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/4a7d957c-9976-3646-b23a-dabbf0637040.roa
File:                     4a7d957c-9976-3646-b23a-dabbf0637040.roa (raw, json)
Hash identifier:          25gOVBvxizq3FzUqaDMfVZa8MAjXwhESRxAlX6z0seE=
Subject key identifier:   BB:28:4D:14:58:83:FA:8C:19:64:1A:3E:98:44:8E:2F:19:31:90:F2
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583DCF23DDDCEFC160E15410F580
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/4a7d957c-9976-3646-b23a-dabbf0637040.roa
Signing time:             Thu 05 May 2022 12:00:00 +0000
ROA not before:           Thu 05 May 2022 12:00:00 +0000
ROA not after:            Fri 10 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        23.251.224.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cf:23:dd:dc:ef:c1:60:e1:54:10:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: May  5 12:00:00 2022 GMT
            Not After : Jun 10 04:00:00 2022 GMT
        Subject: CN=ae09b84e-4b39-485e-9810-de889cc7a22d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0d:cd:ae:1c:2a:a0:cc:f4:b1:9e:98:75:8a:
                    59:3b:b8:65:f5:4e:c6:a5:f3:90:d7:26:ea:9b:3c:
                    cb:c2:fc:6e:07:26:2e:f6:03:78:ca:b7:60:cd:5c:
                    12:c1:81:7d:5d:f3:77:d5:89:04:fb:5a:14:a2:83:
                    13:f9:ab:39:86:10:79:e1:3a:79:c7:3c:cd:e4:37:
                    59:a2:58:51:f2:db:6c:2b:ce:f4:21:73:df:2e:81:
                    7e:5c:20:00:86:b6:b2:0a:e4:23:85:49:e0:c9:d5:
                    aa:92:cf:71:05:cf:2a:f6:ae:6a:ef:ac:40:b4:4e:
                    1d:f0:2b:7f:84:3e:b6:48:77:87:5d:d3:b9:23:83:
                    6a:fd:d5:85:8d:10:62:42:60:e3:f1:10:1b:1f:5f:
                    3f:85:ae:9a:44:fd:ce:2a:13:ba:2a:d0:4a:5b:9f:
                    6a:82:ff:aa:e8:59:4a:9a:90:cd:3e:14:5c:91:c4:
                    1d:eb:71:ae:65:62:ea:d4:33:1d:96:39:94:50:81:
                    55:1e:d1:3c:7e:c7:8a:10:fd:3d:bb:c6:ec:02:9e:
                    cf:cd:9a:8a:42:9d:7b:85:95:1f:5c:fd:00:13:1f:
                    23:23:c4:87:2f:55:1f:4c:46:fb:5b:bf:3a:40:7e:
                    1c:3b:22:65:6b:49:0a:ab:4e:0b:2a:ea:e0:de:73:
                    15:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:28:4D:14:58:83:FA:8C:19:64:1A:3E:98:44:8E:2F:19:31:90:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/4a7d957c-9976-3646-b23a-dabbf0637040.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:72:a0:ba:18:cb:f3:f3:ef:c6:8c:ff:ad:a9:33:90:e7:4b:
         16:4e:8f:bc:d5:8e:09:05:05:61:42:87:de:19:dc:e3:92:41:
         2c:d4:32:7d:02:57:df:bb:79:06:64:bd:e1:95:3b:70:29:9d:
         60:2b:47:26:ec:e9:f8:22:16:6d:94:02:87:74:c1:fe:a4:32:
         87:33:ad:5a:0e:6d:26:35:4a:d0:41:72:30:24:7e:02:99:7e:
         37:70:8b:b1:8c:63:74:8e:04:4c:59:51:2b:36:59:c6:df:12:
         a4:3d:88:59:2a:cf:e5:e0:6a:9a:3f:2a:b7:7c:1a:92:cf:37:
         65:9f:d0:c1:c3:ad:23:3c:c5:c5:71:a9:bf:8d:7b:d9:16:88:
         56:1b:52:a7:82:d9:74:a6:65:96:9e:a8:8c:8b:c1:88:06:de:
         3d:e5:a5:fc:63:02:4e:3d:c5:e2:94:49:94:94:9a:a0:b1:45:
         e3:03:24:63:5f:a1:db:5e:d7:28:bf:ca:8a:61:5d:72:65:e5:
         c6:07:5f:2e:49:54:79:7b:7b:42:21:02:6b:c3:ce:c7:08:36:
         22:e9:c3:76:99:76:83:7e:78:66:80:c4:ec:33:9d:81:d8:24:
         92:d6:03:60:54:f6:3e:b5:12:5d:c5:22:81:5a:67:fa:4b:17:
         fb:b9:8a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----