Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/7d01679e-3c13-35ff-b5bf-f46304830150.roa
File:                     7d01679e-3c13-35ff-b5bf-f46304830150.roa (raw, json)
Hash identifier:          iFUkZrcEztRwNDJGEFCBQIppZTcn4v0d56mZT0UaRww=
Subject key identifier:   42:3E:96:29:E1:6F:CC:B3:3D:40:F8:3B:70:3A:11:EA:CF:73:56:17
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583E937DF41768DCF2D1CB443960
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/7d01679e-3c13-35ff-b5bf-f46304830150.roa
Signing time:             Thu 14 Jul 2022 12:00:00 +0000
ROA not before:           Thu 14 Jul 2022 12:00:00 +0000
ROA not after:            Fri 19 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        199.255.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:93:7d:f4:17:68:dc:f2:d1:cb:44:39:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Jul 14 12:00:00 2022 GMT
            Not After : Aug 19 04:00:00 2022 GMT
        Subject: CN=b062dd15-b143-4c1d-9357-fe87f57cde1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ed:26:7d:df:3d:8c:08:76:ea:8b:c0:26:55:
                    16:75:c1:82:af:cf:8e:cf:8d:41:47:90:95:0e:3b:
                    91:df:d6:a3:5d:b3:1b:22:31:a7:b6:ca:95:9f:80:
                    df:61:0a:5a:af:6e:b2:45:b6:3e:cb:d2:2b:e1:23:
                    43:10:d3:61:52:8a:16:0e:5d:85:d8:9b:37:aa:b6:
                    bf:40:19:79:01:0d:91:af:c6:90:35:d0:c3:53:42:
                    3f:2a:10:8e:de:0a:db:df:2f:d6:f6:2b:20:82:57:
                    6e:bb:17:7e:9c:d8:e1:81:be:7c:0e:28:23:c7:9c:
                    af:cf:43:bd:f3:e9:5e:c1:14:4c:56:d5:30:b6:8b:
                    64:18:29:15:47:cf:db:b0:bc:8a:61:a0:ef:22:88:
                    33:53:d9:23:48:09:b8:16:73:da:6e:45:5d:8c:27:
                    c4:5e:2b:3c:3c:2c:13:15:53:74:27:4a:3a:bd:b5:
                    f1:d0:1a:54:06:24:69:e5:97:9b:e4:8a:92:8f:6f:
                    d0:f4:f5:b9:62:29:b9:e7:eb:d6:62:89:b1:0b:53:
                    fc:eb:3b:4f:0b:f0:0f:a0:d3:c0:01:36:9c:d4:00:
                    73:a7:f0:3f:3b:81:52:2b:d0:26:14:d6:8b:9e:41:
                    ce:f2:a6:44:c2:b8:42:61:37:8c:64:f0:cb:9a:f5:
                    5d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:3E:96:29:E1:6F:CC:B3:3D:40:F8:3B:70:3A:11:EA:CF:73:56:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/7d01679e-3c13-35ff-b5bf-f46304830150.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:4e:18:04:5c:9b:35:76:1e:2f:d3:d4:7b:e4:0e:c1:c4:10:
         9e:78:1f:96:52:ae:00:2f:05:7c:12:3e:44:be:77:08:6d:d0:
         22:f8:a6:b2:e7:20:a0:f4:45:ab:d0:5f:e4:f2:cb:b5:a6:92:
         84:11:11:52:78:0f:45:c0:ef:70:ff:f8:35:6e:e4:6a:c3:a3:
         9e:43:f5:44:aa:97:6c:d0:d3:92:ae:35:70:03:52:0d:ba:8d:
         8e:c9:09:8b:ab:65:fd:11:9e:35:30:e3:3e:78:46:75:a5:cf:
         e7:3d:91:c9:03:f5:69:81:45:76:e7:04:2b:e9:a7:35:ac:7b:
         42:40:20:b9:30:00:4c:25:c8:c3:7c:59:52:a5:cb:e0:68:04:
         dc:9e:a7:9e:5c:33:71:84:32:c3:9d:45:59:2e:48:af:3a:1f:
         4b:f5:8a:0f:c4:1d:1e:a4:91:d7:c0:45:44:5f:ae:e7:46:e5:
         44:bc:da:ff:69:21:e4:6a:6f:d6:52:3f:5e:02:f9:73:95:44:
         2d:2f:0a:86:41:63:7e:c0:35:a9:48:27:7b:5c:02:c0:ed:5b:
         23:7b:10:f1:cc:e0:c8:bc:15:7f:91:47:04:e5:44:c0:46:25:
         98:12:ad:d8:3e:5b:44:6f:f2:90:d0:5e:e2:1a:67:a2:6c:d8:
         57:0c:73:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD6TffQXaNzy0ctEOWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWQ4NzNmZjUtYzZkZS00MjhmLTk5ZWEtMTRlZWQ4YzVm
ZWRjMB4XDTIyMDcxNDEyMDAwMFoXDTIyMDgxOTA0MDAwMFowLzEtMCsGA1UEAxMk
YjA2MmRkMTUtYjE0My00YzFkLTkzNTctZmU4N2Y1N2NkZTFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAge0mfd89jAh26ovAJlUWdcGCr8+Oz41BR5CV
DjuR39ajXbMbIjGntsqVn4DfYQpar26yRbY+y9Ir4SNDENNhUooWDl2F2Js3qra/
QBl5AQ2Rr8aQNdDDU0I/KhCO3grb3y/W9isgglduuxd+nNjhgb58Digjx5yvz0O9
8+lewRRMVtUwtotkGCkVR8/bsLyKYaDvIogzU9kjSAm4FnPabkVdjCfEXis8PCwT
FVN0J0o6vbXx0BpUBiRp5Zeb5IqSj2/Q9PW5Yim55+vWYomxC1P86ztPC/APoNPA
ATac1ABzp/A/O4FSK9AmFNaLnkHO8qZEwrhCYTeMZPDLmvVd9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEI+linhb8yzPUD4O3A6EerPc1YXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3
M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVlZDhjNWZlZGMvN2QwMTY3OWUtM2MxMy0z
NWZmLWI1YmYtZjQ2MzA0ODMwMTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWQ4NzNmZjUtYzZkZS00MjhmLTk5
ZWEtMTRlZWQ4YzVmZWRjL2VkODczZmY1LWM2ZGUtNDI4Zi05OWVhLTE0ZWVkOGM1
ZmVkYy5jcmwwHwYDVR0jBBgwFoAUHLTMIzzDmH15qyl3uMU7Z2qmxrEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVl
ZDhjNWZlZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx//AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKROGARcmzV2Hi/T1HvkDsHEEJ54H5ZSrgAvBXwSPkS+dwht0CL4prLn
IKD0RavQX+Tyy7WmkoQREVJ4D0XA73D/+DVu5GrDo55D9USql2zQ05KuNXADUg26
jY7JCYurZf0RnjUw4z54RnWlz+c9kckD9WmBRXbnBCvppzWse0JAILkwAEwlyMN8
WVKly+BoBNyep55cM3GEMsOdRVkuSK86H0v1ig/EHR6kkdfARURfrudG5US82v9p
IeRqb9ZSP14C+XOVRC0vCoZBY37ANalIJ3tcAsDtWyN7EPHM4Mi8FX+RRwTlRMBG
JZgSrdg+W0Rv8pDQXuIaZ6Js2FcMcwo=
-----END CERTIFICATE-----