Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/de16cf09-5b18-3527-8168-9b20758183f4.roa
File:                     de16cf09-5b18-3527-8168-9b20758183f4.roa (raw, json)
Hash identifier:          eYx2nTkrdMG2vzSU50AAxqEsvLiD1slf/ODoErRy9Qo=
Subject key identifier:   C4:64:BA:44:54:BC:33:0B:D8:D9:00:45:48:91:2B:48:54:D3:93:D6
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583D338024B17E1B0B9D203DA000
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/de16cf09-5b18-3527-8168-9b20758183f4.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        199.255.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:33:80:24:b1:7e:1b:0b:9d:20:3d:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=e82b2afb-74ca-46e1-8a47-10d5fbba538e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:68:45:cf:3b:37:34:6b:e1:11:d7:83:fa:17:
                    e8:b2:d3:ef:93:b9:ab:e4:9e:33:f9:cb:be:b0:35:
                    5f:26:98:5e:df:7e:30:fb:9a:8e:50:cc:1a:55:68:
                    74:81:d0:0f:ef:22:de:72:3a:e7:93:9c:f5:d5:46:
                    2c:33:96:96:d5:c6:12:8b:4f:d9:9f:61:f5:cd:c2:
                    79:b1:32:4f:fd:f4:4f:75:5a:c2:81:4f:f5:52:84:
                    63:56:90:ca:85:26:f1:f6:66:79:95:c7:7f:ff:4b:
                    cc:32:cb:18:da:2e:ca:ee:28:13:09:cd:bb:db:98:
                    fd:a1:d8:56:2b:cf:b6:f3:95:3b:5a:cc:e2:23:e1:
                    99:db:d5:a5:5f:eb:13:52:b7:47:18:88:c6:6b:27:
                    ec:c7:8d:8c:ee:67:ee:75:c9:17:04:93:7a:e5:87:
                    79:0a:8f:07:4d:af:4b:50:d3:f1:52:3b:2b:de:55:
                    9d:7f:69:d9:45:ef:ff:a6:91:b4:ca:3a:7b:cc:29:
                    0a:14:f0:c5:ea:7a:0c:1d:78:70:11:de:3e:16:4f:
                    69:23:1d:a9:94:f7:91:f6:50:4f:31:e2:23:15:97:
                    50:9a:6f:dd:23:68:3f:bb:2f:8f:93:b6:cf:c4:ef:
                    51:9f:5f:88:fb:18:c2:f9:06:6c:f5:2e:89:a6:26:
                    31:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:64:BA:44:54:BC:33:0B:D8:D9:00:45:48:91:2B:48:54:D3:93:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/de16cf09-5b18-3527-8168-9b20758183f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:4e:2d:e8:aa:2d:0d:29:e2:e9:45:b7:4b:48:2c:a7:f6:16:
         ea:b6:a7:18:e9:b7:03:1b:f5:d1:b6:98:8b:d9:da:fc:33:75:
         16:ba:f5:01:d9:88:eb:5d:96:2d:2d:9e:91:e7:58:67:a5:62:
         00:8e:3c:51:82:42:ba:e8:d8:25:11:c1:b6:44:d8:0e:2e:9a:
         aa:61:75:c0:22:72:e3:82:32:76:19:fd:a6:96:d7:5a:87:8f:
         f1:68:6a:2d:47:11:e6:6e:47:49:5d:39:fb:ab:a3:a4:f0:72:
         b1:f4:ed:90:e6:e6:08:37:bd:6c:a8:5e:db:5a:ac:ad:bd:9d:
         f4:85:d3:72:f9:6d:e9:bb:3d:c1:a3:b9:42:ec:58:f0:3f:b0:
         d5:b3:54:6a:f0:64:f6:2b:3a:9c:14:13:a2:52:2e:35:91:03:
         98:18:c1:37:c4:6d:d9:7d:71:fe:25:47:97:92:f8:2a:2d:af:
         71:7d:3b:a3:13:a2:3f:84:bc:1e:12:8e:a9:93:3c:53:ae:06:
         1b:e1:51:9e:80:6e:55:e9:54:66:cf:4a:ad:b6:60:cf:c4:43:
         21:5c:59:af:56:83:d7:72:af:4d:71:4a:4b:3f:09:01:cc:5b:
         68:59:72:15:39:3d:bc:7f:84:78:5f:f2:1c:e5:c4:40:e5:33:
         f9:be:51:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----