Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/57cb2e03-ca0e-31e6-ae4b-dce2a4639fc6.roa
File:                     57cb2e03-ca0e-31e6-ae4b-dce2a4639fc6.roa (raw, json)
Hash identifier:          s+Ae7n6QokHA6eiLRjhpIm9CKxwdbmRDHRW/lqafuGE=
Subject key identifier:   64:C4:0B:7D:34:F8:1F:AB:1E:DB:16:CE:67:BD:8B:D3:E0:B0:53:4D
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583F55D630953937B3F0EB9CF4C0
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/57cb2e03-ca0e-31e6-ae4b-dce2a4639fc6.roa
Signing time:             Thu 22 Sep 2022 12:00:00 +0000
ROA not before:           Thu 22 Sep 2022 12:00:00 +0000
ROA not after:            Fri 28 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        199.255.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:55:d6:30:95:39:37:b3:f0:eb:9c:f4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Sep 22 12:00:00 2022 GMT
            Not After : Oct 28 04:00:00 2022 GMT
        Subject: CN=d8161375-eaed-4e81-9363-462763c24264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:76:12:06:6f:89:18:8c:b0:cd:8d:97:79:e3:
                    e8:fa:a6:eb:ee:c8:8f:80:f3:b3:d9:8a:90:89:e4:
                    55:05:c7:8e:dc:bc:5f:46:f1:8c:3d:42:02:19:fc:
                    a6:a2:79:79:e2:7e:77:1c:39:79:1e:fe:6c:83:ec:
                    b8:bc:be:f0:65:e2:ad:5c:63:d8:5a:b9:93:d2:38:
                    ea:68:b4:fd:e1:28:ac:6a:95:6b:43:c8:b6:3d:08:
                    7a:72:d0:fa:cb:29:4c:fd:6d:3b:0f:6d:0f:85:e0:
                    60:f6:04:16:36:7b:e7:07:aa:d6:26:2a:b8:90:3a:
                    e7:65:a2:62:9b:7d:ec:fe:c7:39:2c:1d:11:fb:04:
                    54:40:63:ae:22:49:ed:8c:9a:c3:c6:db:ee:0f:82:
                    b7:19:d5:77:33:f3:31:49:47:c0:8f:b8:8b:ea:2f:
                    e0:be:1c:55:e0:a0:75:81:91:02:23:b6:b7:b2:ab:
                    74:3f:d2:48:37:4b:5e:8a:03:90:bf:da:33:53:e8:
                    31:8f:f5:6d:85:e0:a7:4c:69:11:af:df:8a:20:0b:
                    0d:bd:96:1a:9d:c1:11:82:09:8a:42:f3:9c:1d:88:
                    96:8a:20:f3:6e:ef:80:c8:40:16:3a:c7:cb:59:6a:
                    15:b6:85:ae:02:ef:00:c8:44:d9:3a:2b:4c:98:59:
                    e1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C4:0B:7D:34:F8:1F:AB:1E:DB:16:CE:67:BD:8B:D3:E0:B0:53:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/57cb2e03-ca0e-31e6-ae4b-dce2a4639fc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:39:43:e5:ca:e1:eb:5b:0d:3d:82:25:77:fd:51:db:b8:35:
         16:8f:41:45:42:0d:50:01:22:e8:b6:d7:ba:de:f5:53:3b:95:
         d7:f5:77:c1:26:35:d5:bd:22:36:0a:07:77:b2:51:f8:90:2c:
         ae:9b:10:89:2c:ce:f0:fb:97:5e:80:51:4e:ae:4d:93:27:cc:
         52:78:ab:5f:5c:ad:55:81:88:a5:81:f7:10:d6:c6:40:ac:97:
         23:7c:c0:fb:98:0e:6b:57:69:0c:4c:4b:25:aa:da:45:64:4c:
         1d:bc:96:37:eb:e6:5c:a8:ca:d8:14:05:ee:bc:28:20:11:16:
         ca:7d:81:6f:4f:1f:f2:c3:70:29:bd:16:db:34:d4:8a:59:cc:
         01:9b:0e:fd:7d:99:18:cc:80:59:ac:aa:f9:5b:38:22:13:f5:
         37:0f:e2:4d:47:7d:21:06:1a:ca:c6:c2:b3:54:a4:7c:be:1e:
         dc:6d:3a:d1:ab:ab:b1:47:bd:2f:97:97:63:9a:dc:ec:36:5f:
         3f:cf:13:e2:ab:b5:d6:ce:f2:41:21:0e:e3:8f:6a:40:17:8c:
         78:ec:48:46:1c:5d:1b:6c:62:3d:3c:1a:81:59:f9:24:26:7b:
         b0:f3:e1:54:1e:e2:09:ef:8f:5c:70:76:ff:d4:bd:c1:5c:1e:
         20:68:e0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----