Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/b86b9634-3a36-38ee-aa45-703b78db29c0.roa
File:                     b86b9634-3a36-38ee-aa45-703b78db29c0.roa (raw, json)
Hash identifier:          3mYpRSrtXtYm7wXnKvOXMM2PebaBb33e33BkaVgd/8I=
Subject key identifier:   FD:05:48:53:BD:FF:3B:EC:25:B0:6A:14:81:0D:B2:F5:09:A8:D3:81
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583D813BCBAE4105538FD8A03500
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/b86b9634-3a36-38ee-aa45-703b78db29c0.roa
Signing time:             Fri 08 Apr 2022 04:00:00 +0000
ROA not before:           Fri 08 Apr 2022 04:00:00 +0000
ROA not after:            Fri 13 May 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        76.223.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:81:3b:cb:ae:41:05:53:8f:d8:a0:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Apr  8 04:00:00 2022 GMT
            Not After : May 13 04:00:00 2022 GMT
        Subject: CN=41cbd862-875a-410f-9a5e-b9a0dbc0a8b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b3:30:ac:72:48:54:c7:9f:e2:bd:74:70:19:
                    8b:23:9a:34:fd:8a:57:e4:79:9a:44:a7:55:c2:0e:
                    df:f3:e5:3e:be:9d:9c:f1:9d:0f:38:2d:92:dd:54:
                    4a:6d:e8:d6:c4:83:41:e4:bd:9e:d8:4f:d6:0f:93:
                    a2:87:86:25:77:16:ef:79:a9:8b:a1:55:aa:76:91:
                    38:88:08:1c:20:6d:53:bc:3d:ee:1b:32:c2:4f:2a:
                    6f:32:ae:39:a1:95:a7:f1:16:e9:23:b1:e4:dc:9f:
                    63:02:88:08:55:9f:f8:84:c4:5a:4c:43:1a:77:78:
                    c7:7e:8c:85:86:92:c7:d3:94:58:bd:ea:90:53:c5:
                    df:e3:12:7f:01:1f:b8:27:43:91:65:b0:94:ad:2b:
                    e5:b6:c6:f0:19:b1:2f:11:75:4f:92:0d:34:22:1c:
                    06:87:e3:b1:2e:ea:ea:5d:50:25:99:17:87:13:f8:
                    eb:b1:aa:07:c3:01:ef:94:36:a2:0c:9e:e2:d4:85:
                    59:55:0c:56:c0:d1:68:63:ae:4c:be:27:bf:57:88:
                    f3:c7:a4:f9:e7:93:2c:2b:5c:23:93:e9:7c:42:77:
                    84:c8:ce:9a:db:2d:ee:db:79:ad:d8:fb:ce:c6:5d:
                    64:56:8d:18:a9:3d:e0:39:c4:56:67:fc:b1:f4:20:
                    85:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:05:48:53:BD:FF:3B:EC:25:B0:6A:14:81:0D:B2:F5:09:A8:D3:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/b86b9634-3a36-38ee-aa45-703b78db29c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:64:57:ae:0d:d9:2b:fd:7e:ec:ac:e0:ae:61:bf:5c:64:3d:
         ba:0b:cf:7e:52:02:bd:1e:05:f7:63:63:20:c4:5e:55:bc:67:
         12:60:c2:54:b6:bc:b7:20:82:b4:9d:29:2d:7b:35:ec:1d:35:
         7b:b5:52:0e:84:41:e2:36:f7:f8:53:6c:51:28:8b:2c:bc:0d:
         0f:29:bd:5c:10:5f:a1:f0:15:02:d9:ac:30:fb:4d:f7:be:9e:
         c1:73:6a:a3:cd:f3:6c:6d:a5:3a:88:50:cc:bf:02:92:73:1a:
         5d:4e:94:60:bb:42:5d:ac:92:34:8f:e8:c4:5e:b7:f9:b5:40:
         15:9d:78:27:6c:02:7e:23:25:a6:6c:4a:ea:0e:35:c1:44:c2:
         4f:ab:32:2b:9a:0b:cf:cc:53:1f:37:88:87:e4:09:ab:0d:60:
         fd:b4:3e:13:60:b1:49:ee:7b:60:11:46:bd:1a:8c:4e:e6:04:
         9c:6b:d1:ac:1f:57:24:8d:dc:3a:a2:22:b5:81:71:7f:35:f7:
         66:5b:76:3b:93:29:04:c5:15:e2:ce:3c:df:90:05:fb:01:e7:
         77:b2:fb:41:94:a2:90:5e:f0:08:ac:56:46:d4:40:64:64:e1:
         99:c9:9d:7a:fa:64:5f:91:0d:be:a6:89:3a:f1:de:43:6c:68:
         bf:c1:02:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----