Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/689d6c9e-cbf2-3593-9b75-4bb15d359b70.roa
File:                     689d6c9e-cbf2-3593-9b75-4bb15d359b70.roa (raw, json)
Hash identifier:          TxIba6+ysW3BCzAs8j0yvlHbiqLTFKkycFLWia47kbg=
Subject key identifier:   35:8E:4B:1D:46:B6:D5:86:4D:5C:87:6A:16:5C:23:ED:16:BA:C4:08
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583DCF23D122DEE457D80C9C7BF0
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/689d6c9e-cbf2-3593-9b75-4bb15d359b70.roa
Signing time:             Thu 05 May 2022 12:00:00 +0000
ROA not before:           Thu 05 May 2022 12:00:00 +0000
ROA not after:            Fri 10 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        23.251.224.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cf:23:d1:22:de:e4:57:d8:0c:9c:7b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: May  5 12:00:00 2022 GMT
            Not After : Jun 10 04:00:00 2022 GMT
        Subject: CN=bfbb99dc-bcbe-4422-8ae9-0061ec454ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b5:00:d1:6a:00:cf:7f:45:f3:1f:00:a2:dc:
                    01:44:e8:fa:1a:66:c7:d0:80:11:e7:11:cf:37:be:
                    e9:51:1c:aa:79:dd:5e:9d:e0:9e:49:e3:39:96:48:
                    5c:a0:12:92:d0:77:c0:c6:da:01:1b:0f:d3:8f:97:
                    21:fb:2f:8d:bb:ca:22:44:15:7f:99:1f:72:4e:89:
                    8d:ed:f9:91:08:e1:68:82:c5:d4:47:ae:1b:b1:a8:
                    55:12:f6:04:fc:cd:39:f0:be:a6:46:02:59:67:b8:
                    5e:bb:0c:ec:0b:c1:35:c9:62:24:24:e0:d8:fe:8b:
                    cd:b9:1b:98:c0:d0:b1:5e:22:1f:08:67:87:54:2a:
                    b4:b6:ee:2f:16:4b:f5:a9:2e:23:c6:1d:93:aa:06:
                    d0:3d:c6:ca:49:ff:dd:3d:bb:6c:1c:fb:2c:a0:c7:
                    73:76:fa:5f:71:82:8d:4c:4d:f0:1b:90:c1:8b:20:
                    e5:94:62:00:41:ee:71:f3:12:15:8e:39:4d:da:c9:
                    84:89:d7:5a:22:fc:8d:e5:b3:e3:39:9e:04:13:0c:
                    e9:62:9e:0c:e5:96:74:ea:aa:8e:da:04:71:9e:20:
                    70:60:6f:6c:4d:79:13:4b:b5:57:dc:73:b3:5e:27:
                    5e:3a:74:c8:0a:1e:9a:70:65:7c:54:66:4c:a7:bf:
                    8f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8E:4B:1D:46:B6:D5:86:4D:5C:87:6A:16:5C:23:ED:16:BA:C4:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/689d6c9e-cbf2-3593-9b75-4bb15d359b70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:18:9a:74:ff:89:43:71:87:d6:35:34:63:2d:d5:3c:bf:5f:
         27:fd:04:cb:b3:c1:ae:3b:2d:83:f5:b7:11:4e:c8:a5:01:d5:
         94:fb:e9:43:20:98:4c:b2:ed:37:83:f2:ac:22:30:0b:9e:27:
         e7:a3:43:fd:f5:c2:e9:0a:5f:1e:17:ba:68:46:6b:18:0c:b5:
         8d:8d:4f:6e:73:e8:dd:79:bb:88:a6:a4:af:32:65:d9:17:38:
         7e:dd:2b:6f:21:19:28:70:f6:12:da:4c:80:de:f8:fc:b6:3b:
         d2:b7:24:6d:12:24:39:e5:27:f3:af:3b:f6:88:01:da:1e:8d:
         f1:c8:e9:2c:4c:45:96:91:53:90:c3:7a:8c:cf:b5:46:2b:84:
         d5:ca:ef:78:4e:78:72:b8:e3:de:2e:c5:cd:20:a5:e5:42:34:
         d8:f2:5e:f8:72:14:18:f5:74:0a:b9:bf:d3:a0:68:98:4d:3b:
         b8:e1:bb:5e:cf:79:9e:02:f8:4e:0d:fc:0b:1a:9a:ea:19:55:
         34:53:59:b9:b1:be:c3:e4:5e:ef:80:62:01:fe:04:e1:15:cc:
         ea:aa:e6:b8:b6:24:1e:0e:e7:1b:cc:52:15:31:f6:0d:9b:ad:
         c5:5b:28:41:84:5b:14:bf:6b:0d:8c:e4:15:5c:c5:ab:0d:85:
         4a:fb:20:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD3PI9Ei3uRX2Ayce/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWQ4NzNmZjUtYzZkZS00MjhmLTk5ZWEtMTRlZWQ4YzVm
ZWRjMB4XDTIyMDUwNTEyMDAwMFoXDTIyMDYxMDA0MDAwMFowLzEtMCsGA1UEAxMk
YmZiYjk5ZGMtYmNiZS00NDIyLThhZTktMDA2MWVjNDU0ZWY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbUA0WoAz39F8x8AotwBROj6GmbH0IAR5xHP
N77pURyqed1eneCeSeM5lkhcoBKS0HfAxtoBGw/Tj5ch+y+Nu8oiRBV/mR9yTomN
7fmRCOFogsXUR64bsahVEvYE/M058L6mRgJZZ7heuwzsC8E1yWIkJODY/ovNuRuY
wNCxXiIfCGeHVCq0tu4vFkv1qS4jxh2TqgbQPcbKSf/dPbtsHPssoMdzdvpfcYKN
TE3wG5DBiyDllGIAQe5x8xIVjjlN2smEiddaIvyN5bPjOZ4EEwzpYp4M5ZZ06qqO
2gRxniBwYG9sTXkTS7VX3HOzXideOnTICh6acGV8VGZMp7+PzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDWOSx1GttWGTVyHahZcI+0WusQIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3
M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVlZDhjNWZlZGMvNjg5ZDZjOWUtY2JmMi0z
NTkzLTliNzUtNGJiMTVkMzU5YjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWQ4NzNmZjUtYzZkZS00MjhmLTk5
ZWEtMTRlZWQ4YzVmZWRjL2VkODczZmY1LWM2ZGUtNDI4Zi05OWVhLTE0ZWVkOGM1
ZmVkYy5jcmwwHwYDVR0jBBgwFoAUHLTMIzzDmH15qyl3uMU7Z2qmxrEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVl
ZDhjNWZlZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF/vgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEkYmnT/iUNxh9Y1NGMt1Ty/Xyf9BMuzwa47LYP1txFOyKUB1ZT76UMg
mEyy7TeD8qwiMAueJ+ejQ/31wukKXx4XumhGaxgMtY2NT25z6N15u4impK8yZdkX
OH7dK28hGShw9hLaTIDe+Py2O9K3JG0SJDnlJ/OvO/aIAdoejfHI6SxMRZaRU5DD
eozPtUYrhNXK73hOeHK4494uxc0gpeVCNNjyXvhyFBj1dAq5v9OgaJhNO7jhu17P
eZ4C+E4N/AsamuoZVTRTWbmxvsPkXu+AYgH+BOEVzOqq5ri2JB4O5xvMUhUx9g2b
rcVbKEGEWxS/aw2M5BVcxasNhUr7IBs=
-----END CERTIFICATE-----