Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/9a027ec5-91b3-3ef2-9c54-ce5df68a6e28.roa
File:                     9a027ec5-91b3-3ef2-9c54-ce5df68a6e28.roa (raw, json)
Hash identifier:          Q0Q9Y6Y/F3UBRJgcOXpXRj0AlTvhhvvyo4v0pu1HFhE=
Subject key identifier:   7A:23:B0:C4:0B:E8:F8:5E:E2:91:58:88:94:76:E8:B5:A3:92:D3:63
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583EE2E195255D244C50CA85D580
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/9a027ec5-91b3-3ef2-9c54-ce5df68a6e28.roa
Signing time:             Fri 12 Aug 2022 12:00:00 +0000
ROA not before:           Fri 12 Aug 2022 12:00:00 +0000
ROA not after:            Sat 17 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        199.127.232.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e2:e1:95:25:5d:24:4c:50:ca:85:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Aug 12 12:00:00 2022 GMT
            Not After : Sep 17 04:00:00 2022 GMT
        Subject: CN=dc1b5140-93c1-4e1e-a9e0-215ef23f9002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:48:23:57:86:40:6c:72:1a:5b:fe:3a:39:5b:
                    08:5f:4a:83:a8:7c:c4:ba:50:ca:44:61:13:f2:26:
                    1f:e7:db:fb:78:40:4f:04:04:ca:69:bc:13:89:7e:
                    5b:9a:09:8c:30:bb:94:ce:23:68:47:73:87:5c:04:
                    81:f0:07:ea:5d:d6:75:3b:e3:2c:f4:26:88:b1:69:
                    88:b3:2f:29:7c:2d:6d:07:fc:29:50:77:01:33:28:
                    2e:b4:db:d7:1d:20:22:b9:f7:ae:f5:f5:a4:07:8c:
                    f3:08:0d:c1:83:07:69:c9:b2:5e:48:eb:17:69:9b:
                    d4:d0:d0:7c:5c:91:38:51:9c:33:7d:2c:96:0e:20:
                    2b:53:fa:69:1a:da:10:c3:b7:38:2a:b3:97:b1:48:
                    30:b2:1c:60:c9:f8:a9:d3:03:f4:3b:9d:2d:10:46:
                    ee:0c:d8:72:52:1f:7f:21:e0:8e:1b:7c:87:78:24:
                    f5:21:de:97:f4:8c:1f:48:3b:9a:ac:37:43:da:3e:
                    99:4d:38:9e:d1:18:50:69:31:c1:ff:da:4f:9d:20:
                    de:77:14:a8:eb:a6:7d:9f:ec:92:96:34:cb:84:d3:
                    eb:63:d9:9b:cc:7e:0b:47:ee:4b:42:cc:d2:e6:1c:
                    7d:0f:89:46:fc:20:fa:4b:10:2d:1d:dc:b8:32:bb:
                    f7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:23:B0:C4:0B:E8:F8:5E:E2:91:58:88:94:76:E8:B5:A3:92:D3:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/9a027ec5-91b3-3ef2-9c54-ce5df68a6e28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.127.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:30:c0:dd:18:24:5e:c0:9b:53:58:9e:93:c0:26:03:24:f2:
         58:f9:15:89:37:23:f5:f5:d8:ed:a9:69:1f:a5:40:22:de:8d:
         7e:10:62:d4:dd:be:b4:ae:b0:3f:a8:02:ef:fd:6c:7f:22:12:
         e7:d2:3b:46:f7:38:5f:80:b0:44:53:0c:30:20:74:69:ac:0e:
         aa:d0:03:91:4e:99:3e:9a:b0:85:10:03:3a:1a:c9:c3:2e:50:
         4f:32:b7:27:69:8b:4e:1b:29:8a:98:8c:48:f5:c8:80:e3:eb:
         6a:00:e1:ec:57:fb:60:ef:53:64:56:41:bc:63:9d:50:ae:ff:
         11:b2:4d:da:c4:ab:63:d2:42:fd:97:64:d8:1f:a7:d3:02:c6:
         15:95:7b:cf:0e:ec:fe:aa:aa:21:2d:8c:75:9f:d9:9e:5b:df:
         f9:ec:2a:2a:e8:7b:e5:a5:fc:65:be:22:3f:09:05:73:49:45:
         bd:fb:f0:eb:99:d6:84:82:24:31:87:a6:c2:50:07:5a:1d:0e:
         09:ea:d6:0c:b5:9b:b7:5a:fa:48:0f:60:62:36:8f:dc:98:d7:
         7d:9e:29:2f:6f:7d:f0:fe:21:ba:97:12:77:d7:52:6f:5a:43:
         dd:50:f7:88:dd:80:61:62:3b:02:0b:84:5e:97:ee:82:b8:3c:
         37:72:3e:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD7i4ZUlXSRMUMqF1YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWQ4NzNmZjUtYzZkZS00MjhmLTk5ZWEtMTRlZWQ4YzVm
ZWRjMB4XDTIyMDgxMjEyMDAwMFoXDTIyMDkxNzA0MDAwMFowLzEtMCsGA1UEAxMk
ZGMxYjUxNDAtOTNjMS00ZTFlLWE5ZTAtMjE1ZWYyM2Y5MDAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EgjV4ZAbHIaW/46OVsIX0qDqHzEulDKRGET
8iYf59v7eEBPBATKabwTiX5bmgmMMLuUziNoR3OHXASB8AfqXdZ1O+Ms9CaIsWmI
sy8pfC1tB/wpUHcBMygutNvXHSAiufeu9fWkB4zzCA3BgwdpybJeSOsXaZvU0NB8
XJE4UZwzfSyWDiArU/ppGtoQw7c4KrOXsUgwshxgyfip0wP0O50tEEbuDNhyUh9/
IeCOG3yHeCT1Id6X9IwfSDuarDdD2j6ZTTie0RhQaTHB/9pPnSDedxSo66Z9n+yS
ljTLhNPrY9mbzH4LR+5LQszS5hx9D4lG/CD6SxAtHdy4Mrv3AQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHojsMQL6Phe4pFYiJR26LWjktNjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3
M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVlZDhjNWZlZGMvOWEwMjdlYzUtOTFiMy0z
ZWYyLTljNTQtY2U1ZGY2OGE2ZTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWQ4NzNmZjUtYzZkZS00MjhmLTk5
ZWEtMTRlZWQ4YzVmZWRjL2VkODczZmY1LWM2ZGUtNDI4Zi05OWVhLTE0ZWVkOGM1
ZmVkYy5jcmwwHwYDVR0jBBgwFoAUHLTMIzzDmH15qyl3uMU7Z2qmxrEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVl
ZDhjNWZlZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx3/oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE8wwN0YJF7Am1NYnpPAJgMk8lj5FYk3I/X12O2paR+lQCLejX4QYtTd
vrSusD+oAu/9bH8iEufSO0b3OF+AsERTDDAgdGmsDqrQA5FOmT6asIUQAzoaycMu
UE8ytydpi04bKYqYjEj1yIDj62oA4exX+2DvU2RWQbxjnVCu/xGyTdrEq2PSQv2X
ZNgfp9MCxhWVe88O7P6qqiEtjHWf2Z5b3/nsKiroe+Wl/GW+Ij8JBXNJRb378OuZ
1oSCJDGHpsJQB1odDgnq1gy1m7da+kgPYGI2j9yY132eKS9vffD+IbqXEnfXUm9a
Q91Q94jdgGFiOwILhF6X7oK4PDdyPuI=
-----END CERTIFICATE-----