Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/d693e0d0-11b1-3070-9d2d-19ca1483869a.roa
File:                     d693e0d0-11b1-3070-9d2d-19ca1483869a.roa (raw, json)
Hash identifier:          NUYVneFsrXhhjZVhGohT0zpfNROh/3EpFqlO3PvH8Vc=
Subject key identifier:   3C:D5:86:24:5D:65:AE:0C:7D:38:58:18:1B:23:77:75:C7:E7:BF:A4
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583F08D4F80CDBB853B54EA17A00
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/d693e0d0-11b1-3070-9d2d-19ca1483869a.roa
Signing time:             Thu 25 Aug 2022 12:00:00 +0000
ROA not before:           Thu 25 Aug 2022 12:00:00 +0000
ROA not after:            Fri 30 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        199.255.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:08:d4:f8:0c:db:b8:53:b5:4e:a1:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Aug 25 12:00:00 2022 GMT
            Not After : Sep 30 04:00:00 2022 GMT
        Subject: CN=2db1b56c-2b87-45de-b4b0-a1ca1b390762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:87:32:89:c8:6d:18:5d:58:f1:03:cd:3d:67:
                    0b:44:96:1e:4c:68:11:11:c7:d3:c3:a5:be:4d:38:
                    51:00:19:dd:1e:c2:47:97:1c:82:2f:03:07:cc:73:
                    dd:12:23:24:3a:b0:c8:21:94:2e:16:f2:14:2f:b4:
                    99:16:ec:0e:c8:d1:22:ff:ff:25:a4:9f:dd:ca:8f:
                    67:aa:94:9a:b2:e8:ea:64:c5:44:48:b8:3d:17:f7:
                    0c:0d:98:4e:d7:99:93:83:a2:59:fd:b8:66:64:b1:
                    b0:ee:9a:29:13:90:2b:84:f4:4d:22:aa:5d:b5:69:
                    8d:c6:80:86:94:b4:d3:a0:ba:11:b2:93:ba:99:de:
                    33:97:b0:13:0f:79:60:3c:da:4b:42:8b:d4:9a:68:
                    8d:54:a6:cd:ac:2a:85:7d:f3:50:52:c8:5f:19:57:
                    98:82:3c:14:c8:48:e9:04:59:da:f6:e1:7c:05:03:
                    cc:94:54:e9:15:8d:6b:c0:ac:8d:bd:81:95:c6:1a:
                    d4:70:e8:9e:ea:b9:52:3d:8e:87:f2:82:b6:73:53:
                    7b:22:ec:29:e7:f1:79:d3:e6:01:1d:54:c6:82:84:
                    e0:c4:65:a2:9f:c0:e7:8a:a6:96:4b:8d:5f:3e:36:
                    b1:23:8a:41:53:54:e3:d4:06:49:be:f5:96:4b:16:
                    2b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D5:86:24:5D:65:AE:0C:7D:38:58:18:1B:23:77:75:C7:E7:BF:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/d693e0d0-11b1-3070-9d2d-19ca1483869a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:23:9b:3f:28:54:70:eb:e9:13:e5:f7:63:80:7d:7a:25:ad:
         b6:05:ac:e7:7a:07:a4:7f:a1:a7:46:89:84:57:96:47:dd:85:
         0c:5d:aa:6f:a7:aa:84:94:11:69:d9:74:ff:0e:ef:eb:b6:b4:
         14:09:b9:48:bc:0d:57:be:69:1d:dc:2b:f4:55:25:1f:99:42:
         51:22:9c:82:9c:9a:73:bb:1d:d1:d8:07:90:3c:68:c8:12:b7:
         63:b6:3f:09:7f:7f:ed:97:fa:ed:c5:78:07:24:cd:ad:50:13:
         cd:c9:bf:40:77:6a:f7:c9:97:20:83:47:cf:23:15:93:cf:ae:
         ab:08:43:b0:8c:1b:3b:c7:c0:bb:38:f2:47:80:66:3c:f7:32:
         e0:0d:35:03:c6:8e:45:3e:c8:39:5f:18:e2:91:ea:bc:3f:b4:
         c3:63:34:6a:fc:6c:e9:65:0d:26:7a:67:1c:aa:f0:9e:01:81:
         d2:e4:39:a0:1c:57:d6:1a:ba:4a:d0:af:b3:3f:d3:02:61:61:
         06:8b:ac:1c:31:58:68:15:fb:1e:5d:42:e9:e3:99:51:4d:d2:
         6d:17:ee:c4:fe:a3:c9:3e:73:0a:3c:10:34:e5:27:a2:4e:42:
         00:fa:c3:ad:d2:8a:75:7a:19:53:4f:4b:11:2e:92:c1:c5:74:
         24:f9:47:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----