Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/6d0f8fd1-1a6e-3052-a3af-9ee4370cb6b3.roa
File:                     6d0f8fd1-1a6e-3052-a3af-9ee4370cb6b3.roa (raw, json)
Hash identifier:          28n3ChugKOKXW0iZ8UrE7sljGgaUCTgtgESdjcN2XRg=
Subject key identifier:   0C:96:BD:24:0E:2C:98:88:60:95:F1:82:2D:D4:6C:E8:2B:6B:17:15
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583E447AF716AF49B20A81139880
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/6d0f8fd1-1a6e-3052-a3af-9ee4370cb6b3.roa
Signing time:             Thu 16 Jun 2022 12:00:00 +0000
ROA not before:           Thu 16 Jun 2022 12:00:00 +0000
ROA not after:            Fri 22 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        23.251.224.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:44:7a:f7:16:af:49:b2:0a:81:13:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Jun 16 12:00:00 2022 GMT
            Not After : Jul 22 04:00:00 2022 GMT
        Subject: CN=8f4da005-58a3-4e24-8cca-61a5432c05fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ee:1e:a3:6c:82:ae:05:95:4f:f8:07:1b:7b:
                    70:fa:d5:59:43:47:ba:cd:6b:1d:46:64:25:49:c9:
                    0f:d0:33:80:ae:fd:94:eb:b1:df:bf:31:ed:df:17:
                    39:fd:7b:35:ea:b7:e9:00:de:16:20:6d:6a:96:97:
                    4a:a0:3e:80:d9:fa:b6:79:4a:62:87:fb:91:19:3d:
                    90:ca:e8:06:62:a1:8c:d5:85:f6:f4:fe:9d:ee:2b:
                    36:fb:a5:2e:c8:17:cc:07:01:6b:b7:1b:8a:70:a8:
                    49:99:a2:86:c0:68:53:4a:17:83:68:fd:b3:d2:98:
                    17:4b:e2:27:10:3f:d4:69:5b:83:98:43:92:9e:0f:
                    58:d5:9d:1f:ab:eb:03:e6:6e:d1:3e:b1:df:51:31:
                    de:92:16:c4:01:20:91:a1:d1:3f:15:dd:2d:86:03:
                    e3:68:4f:95:d9:88:f7:32:39:bb:ee:e5:f5:e4:62:
                    6f:7c:b3:00:28:82:ff:a4:f0:62:c6:5c:4b:54:6c:
                    fa:13:9b:53:16:34:97:80:0f:da:8c:f9:6d:e7:53:
                    b3:5c:35:ad:d8:07:3e:fb:14:8b:70:99:0e:fa:57:
                    0d:29:a3:cb:22:3b:1b:f4:7f:d4:8a:e2:3f:8f:7c:
                    7d:10:27:5f:92:0c:5a:bf:ec:cf:0c:4c:87:d0:17:
                    f5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:96:BD:24:0E:2C:98:88:60:95:F1:82:2D:D4:6C:E8:2B:6B:17:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/6d0f8fd1-1a6e-3052-a3af-9ee4370cb6b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:e0:4e:45:9d:f0:ee:30:a0:30:fb:71:7c:21:b1:64:aa:d0:
         cc:1e:de:d7:b0:7a:75:b0:fa:31:d7:32:3e:c4:a4:da:b0:75:
         57:2e:53:ce:12:20:86:02:04:ec:59:31:fa:1f:e6:8b:5d:eb:
         52:1a:74:01:f0:f8:b0:fd:9e:cb:e3:0d:9a:f6:96:07:50:fb:
         83:f3:bf:c0:90:87:b4:30:d7:78:f1:61:73:34:17:cb:7e:95:
         09:c8:0e:9a:8f:f1:a1:0d:7a:35:93:9b:06:68:45:30:c7:23:
         56:76:90:ee:c2:28:e5:5f:94:40:a1:ef:9e:36:8d:42:0d:db:
         d3:4d:37:0e:a5:7d:5f:de:de:ae:3c:3e:b8:7e:fa:06:97:e3:
         e9:cb:c2:71:58:7c:e8:df:6f:20:1a:ce:a6:33:73:65:77:b7:
         99:88:2e:3a:d8:b3:16:19:ba:c0:d1:35:a0:01:64:47:86:50:
         93:48:b3:ac:11:c0:4c:18:72:b6:92:ad:8d:78:f5:95:10:cc:
         aa:07:6c:57:24:fa:ab:65:66:b4:84:82:eb:de:1d:d0:d5:b4:
         0f:99:a3:fb:6a:4c:3a:6a:c9:6d:00:01:d5:ab:0e:43:ee:8d:
         98:14:09:53:f0:05:4f:43:d5:7c:16:da:aa:e1:11:da:76:ae:
         78:64:57:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----