Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/d510c08e-e826-309f-94e0-9b28ccafebae.roa
File:                     d510c08e-e826-309f-94e0-9b28ccafebae.roa (raw, json)
Hash identifier:          rw3mq+WvDF6fgMUn4rbM52R9rCBiaP/RZoBCkBPZ5uk=
Subject key identifier:   39:1B:0F:15:CE:88:3E:19:00:0E:3E:FE:98:30:8C:D1:08:3E:BE:36
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583DABCE7CE720CEAEF2AF6FD880
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/d510c08e-e826-309f-94e0-9b28ccafebae.roa
Signing time:             Fri 22 Apr 2022 12:00:00 +0000
ROA not before:           Fri 22 Apr 2022 12:00:00 +0000
ROA not after:            Sat 28 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        23.249.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ab:ce:7c:e7:20:ce:ae:f2:af:6f:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Apr 22 12:00:00 2022 GMT
            Not After : May 28 04:00:00 2022 GMT
        Subject: CN=b6e081c3-56be-469f-b89b-1c28dd64f60f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:48:79:2d:84:8e:34:01:3a:ad:18:9b:34:6c:
                    af:62:3e:59:62:23:3b:99:57:fe:c9:0e:90:7f:55:
                    b0:1f:c6:ad:14:09:b8:af:ec:ff:23:b6:96:1b:b5:
                    ad:33:d0:4b:f6:64:6f:5d:77:81:3e:9f:37:89:0e:
                    63:b3:9d:d9:4c:73:e4:ed:a2:e6:e5:00:04:c0:ef:
                    e0:aa:92:c8:e7:2c:a2:56:96:28:1b:cb:62:77:e3:
                    2e:f0:16:7a:5c:72:3d:62:41:56:58:3a:4e:3d:b9:
                    8e:89:6a:c2:ca:0d:30:50:7e:75:83:59:0f:70:b8:
                    a5:cf:73:49:9d:41:38:f8:f2:e5:2f:1c:5d:bc:4f:
                    86:47:a8:8a:c1:f6:c7:46:c8:0b:47:96:99:c5:61:
                    17:ef:1d:c6:b8:81:0f:de:11:6c:50:7d:25:3d:58:
                    b2:d2:8d:0e:d9:1e:9a:2b:d2:6b:c6:0e:75:07:3f:
                    19:8d:27:a8:d9:16:bf:66:fd:ec:94:54:5c:f3:3c:
                    bb:75:b1:b4:11:3d:55:f6:02:46:6b:fb:56:73:f2:
                    c1:cc:14:7f:02:5e:ef:1b:2f:e0:84:fe:5e:5b:fc:
                    e5:ae:b8:aa:1e:8f:43:fb:04:9f:44:d6:38:b6:f0:
                    03:19:a3:10:73:dd:a9:19:86:4e:8b:88:4a:11:25:
                    f6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:1B:0F:15:CE:88:3E:19:00:0E:3E:FE:98:30:8C:D1:08:3E:BE:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/d510c08e-e826-309f-94e0-9b28ccafebae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:ca:14:68:8c:04:71:44:f1:24:e7:5d:11:1b:26:3e:fa:0a:
         4b:18:f6:a1:7e:f8:f5:6d:31:89:eb:02:d4:72:6e:7c:57:e1:
         4b:c6:3a:45:f1:32:dc:2c:72:56:8b:97:6b:70:0a:8a:1b:69:
         fb:e2:13:78:42:ff:e3:a0:90:db:f5:2c:7e:18:3e:46:f9:01:
         b5:86:d2:67:fa:27:8c:c1:cd:ba:7f:9f:b1:7e:07:cd:ee:64:
         a4:fa:3e:a1:16:ed:ed:82:80:6b:45:06:8a:d6:72:81:c5:ec:
         1b:52:05:65:d4:8e:96:10:51:62:31:b4:b7:27:3e:7a:9c:9a:
         6f:7c:ca:f3:01:19:95:eb:de:7e:4d:c2:bd:54:1e:5e:7f:5a:
         89:39:95:b1:96:de:03:b4:dc:a0:9c:78:6b:63:7c:cc:65:7b:
         fe:0d:18:60:77:20:87:1d:5e:03:06:83:93:d7:47:e4:8c:d0:
         9f:81:3a:dd:fd:e9:78:a0:4a:d0:e6:75:4a:ba:d2:e0:fe:23:
         02:c2:39:2c:b1:0e:cb:9e:fe:09:e8:08:5c:c4:82:6d:d2:f3:
         1a:3a:11:ac:9f:70:6d:83:38:3c:f7:95:1c:da:20:38:8d:a4:
         b3:88:02:fb:32:cb:20:36:1c:cd:14:15:d3:54:af:eb:62:be:
         f4:d8:3d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----