Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/6a4c3045-390b-3aab-9c4f-559edf6400da.roa
File:                     6a4c3045-390b-3aab-9c4f-559edf6400da.roa (raw, json)
Hash identifier:          srKvcTDxeKLiPvlMYHz5EJm0Arizjwatos2ELxHdlhU=
Subject key identifier:   7E:F9:B2:A1:43:74:8D:63:17:32:D6:AF:B8:57:94:23:7E:55:70:46
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583F55C74F12CCA8FBB8467B2480
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/6a4c3045-390b-3aab-9c4f-559edf6400da.roa
Signing time:             Thu 22 Sep 2022 12:00:00 +0000
ROA not before:           Thu 22 Sep 2022 12:00:00 +0000
ROA not after:            Fri 28 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        23.251.224.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:55:c7:4f:12:cc:a8:fb:b8:46:7b:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Sep 22 12:00:00 2022 GMT
            Not After : Oct 28 04:00:00 2022 GMT
        Subject: CN=85542130-29d0-48e3-9b14-dba533f16909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0d:40:45:98:9b:b7:59:3e:64:22:d0:79:6d:
                    8c:c3:b4:27:f1:03:34:56:0b:52:ff:96:97:9f:56:
                    ca:23:3d:a9:30:a0:91:34:21:be:2b:e6:d9:12:02:
                    ce:13:f7:0e:44:84:6a:86:1f:25:21:c9:d1:67:cc:
                    79:38:9f:0d:1d:e7:b1:e2:59:f7:22:63:c3:fb:27:
                    ec:7e:5e:c4:ba:b3:d1:78:0b:23:ea:98:82:66:84:
                    da:e2:21:e7:31:91:a4:dc:03:e8:77:47:f6:36:9d:
                    8b:b4:31:de:9c:8f:fa:12:98:ff:2a:67:f1:83:cf:
                    25:02:23:ba:98:6c:af:d7:a4:81:fb:e0:5d:51:fc:
                    48:ef:de:e8:a4:29:10:3c:be:bb:47:db:6d:0a:15:
                    6d:37:73:83:2e:8b:ad:30:8c:53:63:8c:a2:f8:86:
                    40:b0:e9:6b:d9:57:02:8a:f8:22:88:3a:f9:99:68:
                    43:09:7a:38:0b:9e:75:12:c3:66:d6:e2:84:15:d3:
                    24:66:da:82:5e:47:8a:0c:3b:59:ae:5b:ae:30:c8:
                    2e:b0:ce:68:86:7d:5c:5f:50:0e:75:51:13:26:2b:
                    11:16:60:6d:08:69:ea:de:60:a1:2e:d0:3a:fa:fe:
                    e2:37:25:c0:d2:b7:a9:d6:be:f0:c7:58:79:80:69:
                    33:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F9:B2:A1:43:74:8D:63:17:32:D6:AF:B8:57:94:23:7E:55:70:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/6a4c3045-390b-3aab-9c4f-559edf6400da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:98:ef:38:74:8a:b1:79:85:cb:91:fa:78:87:cc:e5:f7:33:
         4d:63:bf:71:43:15:51:da:b9:ae:b6:7a:52:41:69:57:b3:dd:
         e2:e6:50:19:0e:1f:f7:88:14:23:30:69:1b:12:57:6f:95:e7:
         1f:70:05:65:8d:b9:39:ac:4e:dd:f2:39:19:4f:fd:cb:b1:dd:
         9e:1a:e2:f0:d6:68:52:35:1b:92:b3:50:02:fa:b9:2e:fd:a2:
         b3:9a:5b:0d:89:2c:91:b6:19:0a:60:34:0b:32:dc:2d:98:53:
         fe:6e:81:78:a7:5e:c2:b7:74:7c:85:e1:79:4d:36:80:ce:b1:
         fc:fb:f8:7e:e9:7f:0b:88:a4:31:07:f4:35:b3:73:2f:65:63:
         ff:d7:38:31:d8:5e:31:7c:c8:c5:7a:d2:93:6b:2d:e2:66:ad:
         a6:a8:1c:f2:28:05:d7:8b:85:94:f4:d6:7f:7d:ac:e3:0c:24:
         0b:f1:7c:a8:bd:b5:a1:3f:ed:7a:35:34:0a:84:e6:88:0d:69:
         45:57:b0:6f:ce:ec:14:5d:76:6d:0f:18:a8:91:cd:eb:a9:7d:
         d1:ba:a8:fc:91:65:dc:30:42:63:33:f1:47:d1:79:85:4c:d3:
         9e:b5:e1:a0:be:a3:69:fd:29:f3:1c:1e:8f:67:2b:d5:01:ef:
         24:59:d7:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD9Vx08SzKj7uEZ7JIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWQ4NzNmZjUtYzZkZS00MjhmLTk5ZWEtMTRlZWQ4YzVm
ZWRjMB4XDTIyMDkyMjEyMDAwMFoXDTIyMTAyODA0MDAwMFowLzEtMCsGA1UEAxMk
ODU1NDIxMzAtMjlkMC00OGUzLTliMTQtZGJhNTMzZjE2OTA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw1ARZibt1k+ZCLQeW2Mw7Qn8QM0VgtS/5aX
n1bKIz2pMKCRNCG+K+bZEgLOE/cORIRqhh8lIcnRZ8x5OJ8NHeex4ln3ImPD+yfs
fl7EurPReAsj6piCZoTa4iHnMZGk3APod0f2Np2LtDHenI/6Epj/Kmfxg88lAiO6
mGyv16SB++BdUfxI797opCkQPL67R9ttChVtN3ODLoutMIxTY4yi+IZAsOlr2VcC
ivgiiDr5mWhDCXo4C551EsNm1uKEFdMkZtqCXkeKDDtZrluuMMgusM5ohn1cX1AO
dVETJisRFmBtCGnq3mChLtA6+v7iNyXA0rep1r7wx1h5gGkzxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH75sqFDdI1jFzLWr7hXlCN+VXBGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3
M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVlZDhjNWZlZGMvNmE0YzMwNDUtMzkwYi0z
YWFiLTljNGYtNTU5ZWRmNjQwMGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWQ4NzNmZjUtYzZkZS00MjhmLTk5
ZWEtMTRlZWQ4YzVmZWRjL2VkODczZmY1LWM2ZGUtNDI4Zi05OWVhLTE0ZWVkOGM1
ZmVkYy5jcmwwHwYDVR0jBBgwFoAUHLTMIzzDmH15qyl3uMU7Z2qmxrEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVl
ZDhjNWZlZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF/vgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEuY7zh0irF5hcuR+niHzOX3M01jv3FDFVHaua62elJBaVez3eLmUBkO
H/eIFCMwaRsSV2+V5x9wBWWNuTmsTt3yORlP/cux3Z4a4vDWaFI1G5KzUAL6uS79
orOaWw2JLJG2GQpgNAsy3C2YU/5ugXinXsK3dHyF4XlNNoDOsfz7+H7pfwuIpDEH
9DWzcy9lY//XODHYXjF8yMV60pNrLeJmraaoHPIoBdeLhZT01n99rOMMJAvxfKi9
taE/7Xo1NAqE5ogNaUVXsG/O7BRddm0PGKiRzeupfdG6qPyRZdwwQmMz8UfReYVM
05614aC+o2n9KfMcHo9nK9UB7yRZ16Y=
-----END CERTIFICATE-----