Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/9f6c5611-df9a-3405-8eb0-449bf9306907.roa
File:                     9f6c5611-df9a-3405-8eb0-449bf9306907.roa (raw, json)
Hash identifier:          puEhFRee3jbrDXtjHwwMfvFfd1OrlihTWvGeTyd2vDM=
Subject key identifier:   EB:EE:75:EF:6B:78:7B:9A:A7:2F:00:D8:79:A7:F8:C1:6B:F9:C1:47
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583D338037CE76E5DF78522ECC80
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/9f6c5611-df9a-3405-8eb0-449bf9306907.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        199.127.232.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:33:80:37:ce:76:e5:df:78:52:2e:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=2164f18e-6a82-45dd-9503-19e65c56451d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:46:8a:a3:50:f6:6c:0f:1f:19:8f:4f:3d:15:
                    ce:92:ff:97:38:0f:13:c2:a2:8d:3b:7d:bf:9d:c1:
                    a4:72:03:a0:15:44:38:59:a4:be:e8:02:08:fe:fc:
                    47:b3:e1:d2:b9:26:eb:b6:ec:f4:1c:f7:73:2d:13:
                    59:31:1c:15:2e:51:6c:08:9a:b6:92:a5:9e:6b:c6:
                    3e:9a:a7:c1:1f:0b:94:4f:0d:1e:84:f8:80:fa:cd:
                    59:18:68:fe:32:cf:b1:fa:f5:3f:65:a4:45:c6:f5:
                    d4:36:1e:89:b6:cd:09:84:30:2e:93:2d:41:74:7c:
                    d9:30:9f:f3:e7:39:0b:fd:ba:88:be:fc:83:94:0b:
                    c8:b4:a2:31:bc:7a:bc:90:90:76:3a:0e:df:03:bb:
                    ca:f7:cc:9d:57:7e:4f:2b:f4:df:e0:7b:07:32:76:
                    9e:56:0f:6d:40:92:e1:aa:f3:4f:35:80:07:60:46:
                    3b:38:07:b0:0f:a7:7c:db:a7:97:ec:da:a4:c4:b6:
                    bd:8c:09:3a:bd:d0:53:d9:af:a8:19:f7:6d:5c:dc:
                    29:d8:66:fd:69:78:07:18:2f:75:ba:b2:9b:07:31:
                    26:a8:7e:ef:ca:ee:a8:dd:ad:fa:04:f7:ea:a0:77:
                    ea:71:8c:72:2a:97:31:4f:09:33:bc:37:bb:0d:9f:
                    c2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:EE:75:EF:6B:78:7B:9A:A7:2F:00:D8:79:A7:F8:C1:6B:F9:C1:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/9f6c5611-df9a-3405-8eb0-449bf9306907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.127.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:bf:60:be:2a:90:6e:2c:9b:48:03:d5:38:14:6b:87:6b:ce:
         c6:51:a0:4f:bd:6e:4e:2e:a0:a8:9e:f0:b9:14:4d:00:33:ab:
         a0:8c:e0:2d:d6:be:c2:fb:7f:c7:ac:d0:5a:62:1b:8e:fa:88:
         26:f3:7c:25:b4:d2:a8:47:68:db:3b:49:fc:a6:2b:84:09:8d:
         b3:a7:92:18:eb:25:ac:10:d1:66:ae:c8:91:2a:a4:97:a3:b9:
         b3:37:81:a7:56:2f:7a:f6:dd:1a:e7:0c:2a:f4:af:5c:ec:21:
         d9:a0:e6:fb:63:07:df:fe:c9:c9:93:e4:2f:fd:f2:79:26:79:
         f0:c8:46:0b:e5:b5:d9:92:29:26:e6:b7:1f:92:f1:58:ab:be:
         18:39:32:f5:ba:d1:c9:4b:3f:a6:dd:cc:95:3e:a3:2a:35:a0:
         1a:73:53:f8:26:fe:e9:18:83:0b:da:f5:1a:9b:66:dc:1b:41:
         95:2e:a7:91:b0:da:19:47:88:a5:06:55:70:79:1f:00:c2:dc:
         63:e9:24:dd:a9:9c:94:5c:69:1e:8e:33:4b:c9:65:7b:81:54:
         31:3b:3f:95:2a:71:58:b0:25:7a:dc:4a:6c:d7:a9:46:c1:11:
         98:bf:c3:fc:50:7f:dd:ee:9a:ee:6a:bb:da:73:b9:17:70:b0:
         4f:5f:b2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----