Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/95605924-3c37-35ba-b962-45ee891a8d77.roa
File:                     95605924-3c37-35ba-b962-45ee891a8d77.roa (raw, json)
Hash identifier:          BKCl/fnKTqQEVxesHciGB0w+LMKkBAqsBoxNu/T8ltE=
Subject key identifier:   BE:31:AC:B4:AB:5D:40:8F:E7:09:03:C1:28:31:E8:B7:37:E0:00:39
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583EBA9AEFD271A66AEC33F32440
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/95605924-3c37-35ba-b962-45ee891a8d77.roa
Signing time:             Thu 28 Jul 2022 12:00:00 +0000
ROA not before:           Thu 28 Jul 2022 12:00:00 +0000
ROA not after:            Fri 02 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        199.255.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:ba:9a:ef:d2:71:a6:6a:ec:33:f3:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Jul 28 12:00:00 2022 GMT
            Not After : Sep  2 04:00:00 2022 GMT
        Subject: CN=e90193e7-2830-4cfa-acde-bd8e35a82a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:64:6a:e3:e7:40:58:ca:59:7e:ca:29:bd:ca:
                    06:88:65:ee:2b:57:1e:e7:42:8e:ec:02:6c:b7:68:
                    e4:c3:bc:13:cc:c6:5f:51:5e:99:77:58:01:eb:eb:
                    90:e7:5c:ee:5a:dc:99:20:18:f5:22:1d:05:fc:b4:
                    6c:5f:36:e7:a4:21:16:e8:e3:fa:67:1e:87:02:ab:
                    0c:1a:9f:85:e9:98:a7:53:38:0c:af:9c:4e:69:7d:
                    45:16:5a:d9:6c:a8:0b:dd:7b:4a:97:cf:0b:59:c9:
                    f6:d8:78:77:8f:64:4d:19:0d:4b:c1:9e:a6:79:41:
                    68:ac:63:fe:d7:0c:7e:47:13:28:08:0f:92:f4:d8:
                    89:b8:1a:a9:95:c3:05:0b:72:0f:fb:e3:68:2b:8d:
                    41:14:18:9f:36:b6:a0:aa:df:ff:36:c7:0a:cd:49:
                    0c:69:6c:d9:89:f0:a5:2b:55:e9:bc:1f:64:0b:44:
                    f7:2e:f8:12:cc:95:8b:81:06:a9:2c:81:22:bf:bd:
                    2a:4c:d7:ed:3f:8d:5c:91:47:67:0c:9b:0e:51:94:
                    ab:5d:1e:8d:c4:87:a3:01:74:d1:7e:24:3c:18:69:
                    19:1d:cf:db:fb:65:e1:24:38:a7:bf:3e:b5:75:c1:
                    88:c8:ed:aa:8c:2b:f4:5e:78:29:85:61:bc:51:18:
                    4a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:31:AC:B4:AB:5D:40:8F:E7:09:03:C1:28:31:E8:B7:37:E0:00:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/95605924-3c37-35ba-b962-45ee891a8d77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:28:ee:ac:9c:ef:df:b0:79:19:3d:1c:43:32:39:81:ea:d8:
         18:ea:d4:7f:27:db:7d:74:47:45:83:37:3a:1f:7f:20:01:0d:
         f6:34:48:5c:ec:dd:de:3a:cf:0c:7c:da:e2:66:ad:de:cc:5e:
         93:94:df:c6:2a:e7:0e:73:f8:67:e5:13:5c:40:28:71:e8:65:
         f5:4c:73:85:43:25:a0:ac:85:82:98:6a:30:47:5e:41:59:a3:
         3e:13:5b:ca:4b:11:d1:81:07:48:22:67:8d:f9:77:8e:d3:bc:
         45:01:12:cc:2c:4f:be:eb:b6:92:2e:6c:aa:7e:4e:50:22:5e:
         40:1f:d9:8c:f9:f2:0c:8b:29:2f:77:33:22:5e:46:3b:12:04:
         c5:d0:f7:76:ee:c9:78:be:50:35:1d:20:04:80:23:02:49:d6:
         2f:90:fa:98:08:bc:c9:1d:41:ae:ea:28:de:b7:46:2d:bf:28:
         97:5b:15:3b:0b:85:e8:49:c4:54:79:53:df:eb:e8:ad:4b:82:
         60:6c:a8:e5:3d:0f:f8:45:1f:8b:ac:86:03:2b:17:17:b1:85:
         d4:90:49:7d:b5:01:5a:8a:2f:b1:d3:2a:1a:f7:13:e5:20:94:
         f1:e4:e5:21:9c:93:59:9e:13:7f:e7:4f:a6:59:0f:c4:9d:91:
         ce:17:9e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:28 2023 by rpki-client on console-ams.rpki-client.org