Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/d7d9f0b3-142a-361d-8904-d2c96952d9f5.roa
File:                     d7d9f0b3-142a-361d-8904-d2c96952d9f5.roa (raw, json)
Hash identifier:          EXAKK7pw38bCPj3tA31rzKz//hghYqGQKtKhcmLtCc4=
Subject key identifier:   60:97:06:C8:F8:B3:21:C2:E3:CB:59:AA:84:63:BB:B6:D9:7C:B1:C2
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583E1D5DE645EFB4184E1B25CEE0
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/d7d9f0b3-142a-361d-8904-d2c96952d9f5.roa
Signing time:             Thu 02 Jun 2022 12:00:00 +0000
ROA not before:           Thu 02 Jun 2022 12:00:00 +0000
ROA not after:            Fri 08 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        23.251.224.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1d:5d:e6:45:ef:b4:18:4e:1b:25:ce:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Jun  2 12:00:00 2022 GMT
            Not After : Jul  8 04:00:00 2022 GMT
        Subject: CN=34d263ac-fd9b-4025-abf6-8a31106dbfb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e8:d5:01:3a:43:0e:8c:84:5b:f2:4e:dd:90:
                    3a:b2:e6:1e:0e:70:4e:1b:b0:92:96:95:19:26:9f:
                    be:db:6a:be:0f:40:f7:2f:c8:3e:b2:ad:27:0e:2a:
                    9d:25:0f:4b:e2:fc:18:8f:6f:fd:8d:05:82:52:ff:
                    6e:92:97:c8:da:a9:d5:0f:90:5b:d7:bb:b5:5e:8e:
                    30:05:1e:27:f1:37:0e:52:e8:a1:56:73:6f:75:b1:
                    95:93:2b:1a:24:8e:de:12:00:f0:e6:e1:84:88:19:
                    ce:7d:c1:c2:a3:21:17:3a:ba:8b:fb:9b:dd:72:8a:
                    66:16:ac:51:d0:b5:2f:a2:84:13:4b:01:15:fc:3f:
                    d8:72:0c:f1:82:6c:5f:51:3d:bf:59:f7:15:6f:85:
                    0f:66:88:b8:64:f3:4a:e3:e8:45:f6:6f:21:b2:23:
                    16:b5:2e:0e:2b:77:51:6f:b1:0d:96:71:b9:09:c6:
                    c1:2e:a2:e2:da:3f:8e:23:83:3d:83:65:a9:12:9c:
                    92:f1:1f:37:94:49:bc:ae:0d:24:9c:01:19:bc:62:
                    7a:78:8b:71:0e:84:10:b9:01:76:84:af:9f:74:2a:
                    2f:e7:80:58:44:46:00:5d:0f:0e:38:79:91:79:8e:
                    65:fe:27:c9:71:15:ff:25:0d:4e:fe:25:5c:52:b8:
                    56:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:97:06:C8:F8:B3:21:C2:E3:CB:59:AA:84:63:BB:B6:D9:7C:B1:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/d7d9f0b3-142a-361d-8904-d2c96952d9f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:5d:e0:75:3d:c0:ef:81:02:2e:12:23:fd:aa:76:30:04:87:
         46:e2:3f:2b:c7:b6:91:13:97:91:1f:1b:de:73:d2:e6:db:a1:
         6d:3d:19:fa:be:c1:5d:7c:11:35:a3:01:63:94:3f:c3:ee:6d:
         78:6c:a4:a6:e3:b0:ee:55:d8:e3:8a:e3:cb:43:da:5d:50:e1:
         01:b6:d4:80:c9:45:23:06:ca:53:03:79:2d:84:e7:4c:dc:fb:
         d8:16:5c:28:27:da:0b:aa:af:d6:2f:ca:83:0a:25:d7:a1:72:
         65:fb:ed:08:af:32:dc:a9:b3:f4:28:d6:62:5d:8f:91:ee:d7:
         81:a8:16:89:15:ad:78:b0:ea:6c:57:fc:ec:73:93:25:28:6a:
         ed:5e:5c:01:72:9f:8e:e6:de:40:ab:04:19:37:51:ed:ba:3e:
         13:41:ab:28:a4:b0:7a:96:1d:b5:99:c2:f0:02:42:77:8c:53:
         ae:41:16:f5:aa:0b:3f:2f:02:04:af:cb:6d:ae:3b:5b:8e:83:
         bf:cd:ff:dc:65:7c:61:16:43:11:88:6a:a9:15:12:70:f5:57:
         8c:1c:52:01:5b:ee:99:12:48:e1:7a:c0:3f:9d:89:da:23:a7:
         15:bc:75:1b:49:ff:a1:6c:ee:b3:14:22:49:f8:7c:8e:99:b0:
         8b:ba:93:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD4dXeZF77QYThslzuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWQ4NzNmZjUtYzZkZS00MjhmLTk5ZWEtMTRlZWQ4YzVm
ZWRjMB4XDTIyMDYwMjEyMDAwMFoXDTIyMDcwODA0MDAwMFowLzEtMCsGA1UEAxMk
MzRkMjYzYWMtZmQ5Yi00MDI1LWFiZjYtOGEzMTEwNmRiZmIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOjVATpDDoyEW/JO3ZA6suYeDnBOG7CSlpUZ
Jp++22q+D0D3L8g+sq0nDiqdJQ9L4vwYj2/9jQWCUv9ukpfI2qnVD5Bb17u1Xo4w
BR4n8TcOUuihVnNvdbGVkysaJI7eEgDw5uGEiBnOfcHCoyEXOrqL+5vdcopmFqxR
0LUvooQTSwEV/D/YcgzxgmxfUT2/WfcVb4UPZoi4ZPNK4+hF9m8hsiMWtS4OK3dR
b7ENlnG5CcbBLqLi2j+OI4M9g2WpEpyS8R83lEm8rg0knAEZvGJ6eItxDoQQuQF2
hK+fdCov54BYREYAXQ8OOHmReY5l/ifJcRX/JQ1O/iVcUrhWlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGCXBsj4syHC48tZqoRju7bZfLHCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3
M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVlZDhjNWZlZGMvZDdkOWYwYjMtMTQyYS0z
NjFkLTg5MDQtZDJjOTY5NTJkOWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWQ4NzNmZjUtYzZkZS00MjhmLTk5
ZWEtMTRlZWQ4YzVmZWRjL2VkODczZmY1LWM2ZGUtNDI4Zi05OWVhLTE0ZWVkOGM1
ZmVkYy5jcmwwHwYDVR0jBBgwFoAUHLTMIzzDmH15qyl3uMU7Z2qmxrEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVl
ZDhjNWZlZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF/vgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJVd4HU9wO+BAi4SI/2qdjAEh0biPyvHtpETl5EfG95z0ubboW09Gfq+
wV18ETWjAWOUP8PubXhspKbjsO5V2OOK48tD2l1Q4QG21IDJRSMGylMDeS2E50zc
+9gWXCgn2guqr9YvyoMKJdehcmX77QivMtyps/Qo1mJdj5Hu14GoFokVrXiw6mxX
/OxzkyUoau1eXAFyn47m3kCrBBk3Ue26PhNBqyiksHqWHbWZwvACQneMU65BFvWq
Cz8vAgSvy22uO1uOg7/N/9xlfGEWQxGIaqkVEnD1V4wcUgFb7pkSSOF6wD+didoj
pxW8dRtJ/6Fs7rMUIkn4fI6ZsIu6k88=
-----END CERTIFICATE-----