Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/a3e42bda-0f09-3da7-843d-6ebc9a75af83.roa
File:                     a3e42bda-0f09-3da7-843d-6ebc9a75af83.roa (raw, json)
Hash identifier:          4urPp3HFR4Z5hkO9H4O+Tm5sLEUUWnc87Yf+6OPbWlE=
Subject key identifier:   97:9A:04:D4:5B:E8:B4:89:F7:FF:BC:1C:3F:DA:A1:B4:C5:3B:81:C8
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583F8069518A977E9B782B8FAFC0
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/a3e42bda-0f09-3da7-843d-6ebc9a75af83.roa
Signing time:             Fri 07 Oct 2022 12:00:00 +0000
ROA not before:           Fri 07 Oct 2022 12:00:00 +0000
ROA not after:            Sat 12 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        76.223.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:80:69:51:8a:97:7e:9b:78:2b:8f:af:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Oct  7 12:00:00 2022 GMT
            Not After : Nov 12 05:00:00 2022 GMT
        Subject: CN=37ca2e1d-4728-474c-993c-cd77761fa4c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:af:30:07:1d:0b:65:f1:73:f4:b6:6a:34:cb:
                    27:5e:0c:f3:44:c4:60:1b:76:8e:91:7e:2b:f2:3f:
                    e9:73:ca:cb:51:65:b6:df:da:36:a6:4c:2e:52:60:
                    58:00:62:fc:1d:be:27:e0:5e:13:c4:d5:4d:ae:51:
                    66:5e:8e:26:9b:82:a3:65:9a:12:04:8a:99:b8:a1:
                    31:a9:07:18:95:47:6e:31:28:71:09:66:f2:30:af:
                    70:ba:9e:1b:b9:0a:63:3b:d0:f1:a2:c4:8b:1f:67:
                    ce:2d:d4:5a:24:ee:c0:20:2d:5d:24:b4:94:54:d4:
                    90:4f:54:19:78:ae:18:4c:50:6d:d2:9a:b6:fb:6b:
                    0d:a9:4a:65:d9:13:20:94:37:fd:8a:c4:9e:bc:7b:
                    a8:06:af:c6:ab:95:73:16:1e:7c:45:0f:5f:9a:cf:
                    17:77:e2:94:4b:91:fa:67:ff:4e:e2:53:3c:29:45:
                    d5:cf:0d:ef:8d:1c:33:45:4b:e7:23:fa:b9:16:9f:
                    8a:f3:1e:a4:b6:14:71:e2:94:10:8d:38:83:62:41:
                    7c:35:ec:32:2c:da:9c:a9:e4:08:9e:86:ae:c9:2f:
                    d0:79:66:58:4f:6c:91:31:c9:a0:f7:5e:a3:e7:ef:
                    18:30:cd:b4:7f:6b:ef:a7:29:09:da:d3:28:88:b6:
                    8f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:9A:04:D4:5B:E8:B4:89:F7:FF:BC:1C:3F:DA:A1:B4:C5:3B:81:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/a3e42bda-0f09-3da7-843d-6ebc9a75af83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:ab:bc:d2:d5:bd:09:d7:8a:0c:39:2e:47:29:65:38:9b:ab:
         07:b9:35:f9:cc:75:b0:89:a8:0e:68:6d:d9:81:c0:c5:69:e5:
         86:f1:fc:aa:c3:ad:7d:26:01:d2:9d:88:9d:c9:c7:b1:c5:2c:
         62:88:34:0b:f3:37:a6:68:ec:8e:e8:02:41:cc:80:e1:f3:6f:
         e2:e8:17:5e:9b:89:61:ef:f7:cd:76:73:f0:25:96:43:72:b4:
         26:08:7e:ce:a7:32:67:0d:28:91:62:d0:d6:de:e6:6e:e8:99:
         82:25:aa:2a:87:8c:55:6f:b2:67:35:3b:ef:4f:36:0b:a7:ad:
         94:11:bc:19:ab:f8:64:2d:fa:16:62:8a:5f:58:c6:2c:38:4b:
         92:d8:6c:ff:31:a5:57:55:ba:70:b9:ee:5b:28:8f:dd:0c:fc:
         d9:45:88:dc:98:ce:4d:a9:96:67:6d:60:d7:a4:87:7b:1c:82:
         2c:37:53:83:b8:d4:39:29:a3:36:b0:b2:5e:8d:70:cb:78:83:
         05:ab:fb:5d:ad:a1:2f:c1:43:0d:d8:86:ad:60:28:d2:f3:a8:
         a2:84:26:72:15:fd:ce:eb:b8:6f:21:ac:21:d7:c7:32:bb:c3:
         7f:27:94:64:7f:c9:aa:e8:f2:12:2f:32:bd:da:6e:2a:54:91:
         cd:d4:c8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----