Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/d2858952-5c5e-35d6-8ab1-ba4c5e82319e.roa
File:                     d2858952-5c5e-35d6-8ab1-ba4c5e82319e.roa (raw, json)
Hash identifier:          V78vBQXCJxjicgjcVdz9Qy/d1U10C8zW8RprN7kNNxw=
Subject key identifier:   29:D3:62:04:EC:68:08:A5:8E:61:26:DC:C1:A6:6C:97:63:6A:BE:83
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1669B67D74D
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/d2858952-5c5e-35d6-8ab1-ba4c5e82319e.roa
Signing time:             Mon 22 Oct 2018 10:52:45 +0000
ROA not before:           Mon 22 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        76.223.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:9b:67:d7:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Oct 22 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=7c8e3c7d-b321-430a-9b8b-8e66da9afc33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:37:3a:6a:09:11:11:6d:98:54:cc:91:76:8e:
                    d0:7f:b4:62:d8:97:59:af:ed:38:9b:2d:db:19:d9:
                    59:50:6a:ae:c3:7c:fd:60:2e:84:c4:de:ba:56:6c:
                    c2:40:c8:e8:f6:55:6a:af:15:8e:a6:b0:cb:b0:a1:
                    ed:64:2f:e2:83:8c:40:80:6d:d4:ea:43:c0:4b:96:
                    79:85:56:df:8e:77:9c:40:16:da:73:42:79:6b:69:
                    e6:48:8c:9d:6e:f8:a6:29:a1:42:91:3f:63:94:43:
                    14:ac:51:b1:13:85:26:69:be:30:d7:29:94:96:32:
                    aa:64:5f:12:f6:51:1b:e0:c3:5d:39:f4:8b:7d:36:
                    fb:ec:e9:e5:75:e9:14:06:76:5a:c6:98:52:86:95:
                    bc:99:93:ae:3a:f5:fb:1d:07:86:96:66:bc:75:0f:
                    b7:95:47:9b:dc:87:ff:ea:f2:3c:60:e7:ca:cb:76:
                    85:7c:a8:db:30:c3:dd:4b:d8:4e:9f:d4:fd:c7:39:
                    9f:2a:e3:1b:95:c2:60:18:4e:bb:e5:bb:3f:91:de:
                    9e:1f:bf:f9:14:29:e1:a0:90:1b:a3:9b:34:22:01:
                    5a:ee:dc:7b:9a:34:78:53:9d:14:e3:8f:ad:a4:29:
                    40:5d:ad:8f:c1:78:b8:35:e7:f6:13:d9:62:16:73:
                    83:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D3:62:04:EC:68:08:A5:8E:61:26:DC:C1:A6:6C:97:63:6A:BE:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/d2858952-5c5e-35d6-8ab1-ba4c5e82319e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:eb:9c:d3:40:a3:cc:33:22:aa:46:35:33:2e:00:63:51:2c:
         5e:ac:de:9d:41:b6:e1:5a:7b:66:7d:34:4f:1e:9b:fc:b9:48:
         2d:3b:39:44:32:42:a5:9c:49:99:4c:bd:f9:89:a7:a4:65:d5:
         c4:22:1c:bc:5b:73:ab:47:48:5e:3f:17:c2:c8:80:82:96:45:
         75:54:42:df:37:53:88:d1:a2:87:58:8f:0c:e3:e4:d1:1c:98:
         5e:64:fb:19:b8:4d:fb:00:40:28:02:ba:cb:be:89:6d:2f:55:
         8c:f8:c5:96:82:f5:38:da:f0:d8:f3:eb:db:db:5f:30:07:3b:
         1c:47:ff:03:33:a1:17:fd:11:77:d7:78:eb:c5:aa:b7:b9:c9:
         b1:ba:03:8d:70:4b:40:eb:93:bc:04:5e:40:c3:ce:5b:12:e3:
         c7:79:e0:7b:3d:79:7c:04:ed:1d:ae:0a:5a:6b:78:23:7c:98:
         48:bc:5b:c3:e1:01:33:f9:90:3f:3f:b3:a9:ba:0e:ac:9f:cf:
         c8:fc:99:23:33:42:9f:d3:98:bf:0a:53:d5:3a:59:07:82:c8:
         3a:7e:a9:77:1d:fb:f5:41:cb:6b:1d:6e:39:ed:f1:31:5e:ca:
         8c:f8:42:09:12:1c:ea:8f:07:79:44:72:af:b2:fb:eb:a4:c5:
         a3:18:ca:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----