Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/9bd5404c-78b1-343d-8c04-b9040ea49c89.roa
File:                     9bd5404c-78b1-343d-8c04-b9040ea49c89.roa (raw, json)
Hash identifier:          kZIy/A5IeW1KXxhPH4AhWfOOYdySyh/sVIaxT/9Z59g=
Subject key identifier:   0B:55:2D:30:F7:1B:B6:F2:CA:F3:2B:73:51:2D:1C:6D:75:3F:BA:42
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583E92B4F7110BECFAC0DE2AFD40
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/9bd5404c-78b1-343d-8c04-b9040ea49c89.roa
Signing time:             Thu 14 Jul 2022 12:00:00 +0000
ROA not before:           Thu 14 Jul 2022 12:00:00 +0000
ROA not after:            Fri 19 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        23.251.224.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:92:b4:f7:11:0b:ec:fa:c0:de:2a:fd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Jul 14 12:00:00 2022 GMT
            Not After : Aug 19 04:00:00 2022 GMT
        Subject: CN=15730007-d772-40f7-9341-ddeb0cf6f79c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:59:38:f5:68:48:4e:18:8c:6f:fb:88:34:97:
                    a5:4a:07:70:ee:d0:01:76:1e:77:37:79:1e:49:ca:
                    c6:80:ca:ef:d1:10:60:33:24:e3:12:70:a7:f1:3c:
                    91:97:32:94:b2:d2:31:40:24:69:bc:4a:a6:29:67:
                    0d:a0:ae:b8:c9:15:62:fa:e6:9d:a5:44:45:21:95:
                    66:de:71:f2:07:80:c2:96:93:bd:78:de:eb:a5:08:
                    81:15:40:ae:a4:27:42:39:1b:b8:63:a1:b5:77:74:
                    dd:a4:d8:d7:be:3e:d3:a7:2e:24:50:14:90:35:10:
                    7a:e5:5c:9b:ef:c6:63:15:2a:88:f5:86:77:cc:ce:
                    25:3d:ca:d7:7a:f9:53:47:cb:54:0a:ba:5e:39:d3:
                    07:07:8e:c7:75:f1:d0:a9:5b:60:ab:a9:71:26:a4:
                    5c:8b:e7:49:3c:8a:df:ef:76:16:50:68:c2:b7:0f:
                    03:16:23:32:d6:d9:0a:bc:ba:53:9a:55:c0:8d:a8:
                    e5:e3:98:70:6f:51:5d:4e:c1:ef:c2:dc:b8:2d:c3:
                    2e:30:ff:f9:a4:98:57:c4:70:ab:ab:8f:1c:6f:36:
                    91:30:37:7e:5b:a5:90:ae:a2:86:5c:8c:12:e5:a0:
                    8c:51:ac:dd:21:81:58:fc:29:82:77:b8:59:f7:62:
                    a9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:55:2D:30:F7:1B:B6:F2:CA:F3:2B:73:51:2D:1C:6D:75:3F:BA:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/9bd5404c-78b1-343d-8c04-b9040ea49c89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:14:c0:0f:0e:e7:28:0a:38:db:c1:ef:bf:49:99:36:3c:83:
         9a:10:8b:26:04:f0:7a:0a:fc:71:ec:c3:f0:ba:67:45:e9:d3:
         7b:5e:8a:42:1e:1d:42:81:94:cd:2d:0e:ed:4f:3a:ed:52:78:
         85:f5:59:b1:32:77:06:39:84:de:af:45:21:cc:07:93:a6:eb:
         49:1a:eb:e2:eb:60:73:f3:6b:14:9a:aa:9e:c6:14:4a:96:e7:
         6f:ab:2e:b2:c1:29:04:8a:43:9d:c0:cb:74:fb:7c:cd:da:7a:
         3a:d0:9d:e2:11:b1:95:10:ed:4e:59:bf:4c:e2:3e:2a:0d:16:
         91:db:c0:a6:66:ca:07:e9:1e:a0:29:e0:3c:62:fc:10:af:35:
         ef:56:6c:5d:6b:ff:19:4d:41:17:86:33:31:2c:bb:b4:18:ad:
         6e:a8:c5:3b:f1:6a:ef:83:f0:fc:2b:6a:56:f5:5e:6e:8a:fa:
         44:52:70:19:cd:8d:cc:ac:d1:4e:a2:a9:09:98:d4:83:a6:0d:
         84:9b:0e:25:dd:bb:ff:0d:c2:d3:66:fd:12:44:4b:52:18:ed:
         f5:32:0e:67:c2:18:c2:39:7d:07:cc:41:0b:b8:7f:9e:33:89:
         8c:14:9b:4a:ed:86:fb:91:2e:96:4b:f2:0c:d8:e3:50:3d:0d:
         98:43:80:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----