Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/b2352cf7-de07-37fc-97e5-8936332b9e72.roa
File:                     b2352cf7-de07-37fc-97e5-8936332b9e72.roa (raw, json)
Hash identifier:          1uq66QfDMxdUXVDnZNX8ZeH7GWIH6+T+l8hvKuPoqmo=
Subject key identifier:   8B:1D:76:B8:B4:E4:2E:9F:91:9D:86:AC:A1:83:47:33:29:0B:90:7A
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583DFA088C71E9FB3D81F4F00640
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/b2352cf7-de07-37fc-97e5-8936332b9e72.roa
Signing time:             Fri 20 May 2022 12:00:00 +0000
ROA not before:           Fri 20 May 2022 12:00:00 +0000
ROA not after:            Sat 25 Jun 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        23.249.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:fa:08:8c:71:e9:fb:3d:81:f4:f0:06:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: May 20 12:00:00 2022 GMT
            Not After : Jun 25 04:00:00 2022 GMT
        Subject: CN=ea84907d-f629-4dc3-91ba-ffd54420b685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:76:71:45:df:63:63:ee:a7:80:1e:da:91:15:
                    0a:51:d4:7c:26:7f:6a:7e:39:09:d3:aa:06:50:78:
                    eb:b6:56:aa:d2:16:b4:40:87:ce:b5:31:8e:4c:c4:
                    64:3b:ed:cf:32:37:89:97:cb:c2:51:88:7b:f7:4e:
                    6c:cd:21:81:5e:2b:66:70:87:d8:24:6b:f4:c1:c7:
                    95:49:b1:05:dc:a8:94:56:9a:30:e0:92:96:c9:54:
                    b7:97:9f:26:55:3b:f2:7f:bf:42:39:b7:f1:41:df:
                    a5:50:79:f8:52:4c:e4:50:27:01:da:c3:85:6d:02:
                    97:77:28:71:33:65:a5:b9:26:5d:86:ea:59:ac:f7:
                    5d:3a:52:dc:9b:d7:08:e0:7f:0b:83:ff:71:27:6d:
                    90:c8:61:79:1c:2d:95:1e:c1:4b:09:27:21:85:5b:
                    48:15:1e:1e:08:e2:6f:0b:45:c8:a0:04:e6:38:2c:
                    b7:a1:00:60:89:a9:41:64:1c:7f:7c:76:aa:7f:d0:
                    21:79:2c:f5:b8:5f:d9:7e:1d:47:43:d1:0b:e6:17:
                    af:2c:af:ed:1f:3d:f2:37:ec:20:5f:7a:17:c6:47:
                    44:92:9f:d3:a3:ed:f1:95:2d:33:c2:13:e7:6a:c6:
                    ab:bb:48:7a:65:11:85:d4:9e:c2:6d:af:88:35:e0:
                    83:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1D:76:B8:B4:E4:2E:9F:91:9D:86:AC:A1:83:47:33:29:0B:90:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/b2352cf7-de07-37fc-97e5-8936332b9e72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:31:92:46:6e:f7:fc:5c:c3:c6:58:8b:04:24:bf:43:95:07:
         02:87:08:05:e2:28:27:86:cc:ce:f1:b7:36:03:8a:81:c5:b6:
         53:9b:7f:c2:2b:f0:89:55:77:ce:6b:57:e3:52:e3:7b:04:9f:
         3c:75:94:08:4a:77:fd:95:77:8d:cb:61:8d:79:8b:25:92:bd:
         ef:0c:82:76:41:f3:40:14:a9:f2:73:33:26:e5:fd:c4:53:fc:
         0d:96:1d:e5:e7:42:b7:9e:6f:26:42:76:52:8b:1f:94:47:2c:
         8c:d3:e9:d2:04:4f:f6:70:7b:03:ad:df:1a:6d:e1:13:1d:68:
         a4:6a:8e:c7:73:58:5d:77:d6:8d:b7:76:4e:e5:57:bb:4f:66:
         35:3f:d3:d3:14:cb:c2:9e:bc:52:cb:72:50:98:f8:49:a4:85:
         df:6a:01:f1:a4:2d:5d:01:d3:85:76:17:44:3e:b5:d2:c7:47:
         f3:2e:5a:80:5b:f5:5a:66:76:2d:d1:c7:1c:9a:1c:44:51:a4:
         bb:dd:75:e2:11:e7:8d:62:dc:81:e7:18:cc:9b:45:5b:2b:ab:
         1a:4f:99:35:d8:6a:da:23:73:79:b2:bd:99:7c:18:2b:3e:65:
         38:a4:64:33:43:b6:94:cf:d2:f1:75:07:fe:b7:1f:0e:15:31:
         9b:73:78:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----