Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/e4baa231-2567-340f-b7d2-9b16fd457629.roa
File:                     e4baa231-2567-340f-b7d2-9b16fd457629.roa (raw, json)
Hash identifier:          jaQ8CXyNhPCD2RnmobOzeAfIu27gxFAbnKvDwpPmfCw=
Subject key identifier:   AE:4B:09:A1:CA:01:D9:BE:3A:BD:08:F7:7A:BC:D0:8A:5A:F1:50:C4
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583D0BB882B8CADF3DD37E9E1200
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/e4baa231-2567-340f-b7d2-9b16fd457629.roa
Signing time:             Fri 25 Feb 2022 05:00:00 +0000
ROA not before:           Fri 25 Feb 2022 05:00:00 +0000
ROA not after:            Fri 01 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        69.169.224.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0b:b8:82:b8:ca:df:3d:d3:7e:9e:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Feb 25 05:00:00 2022 GMT
            Not After : Apr  1 04:00:00 2022 GMT
        Subject: CN=21fd26b4-525e-42fd-bc6c-99f8f5ec2eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:66:c8:79:82:b6:1d:ca:0e:8c:87:92:97:79:
                    9c:c8:72:be:23:29:49:10:89:78:fc:b5:ac:55:28:
                    f7:e1:21:d3:e0:af:d9:14:5e:bd:65:4c:69:ee:71:
                    79:bf:b1:5b:50:30:2a:a0:68:c7:ac:91:c1:25:27:
                    c6:eb:bf:db:b2:aa:14:77:c4:ed:e0:ec:d0:73:22:
                    eb:8d:2d:29:ce:92:19:20:3e:91:c0:63:44:bd:75:
                    45:94:e4:15:f9:1d:0b:b3:32:42:b0:80:c5:d9:97:
                    b7:04:ad:49:c0:05:98:de:a5:81:f3:92:0d:15:16:
                    2e:c1:1d:02:0d:8d:73:46:43:49:46:fa:2e:40:c4:
                    5f:9c:51:34:97:53:e3:fc:ae:e5:dc:3c:c6:9f:4e:
                    d7:83:d4:30:42:6e:22:17:e7:af:d6:e9:b1:3e:e6:
                    b1:9a:6b:d1:76:b1:94:5e:46:22:e6:92:ce:73:69:
                    cb:23:b0:f5:cb:87:5d:05:c2:8b:75:97:12:15:01:
                    b8:90:09:ec:5e:e8:e0:1c:c8:fa:e1:df:e4:60:43:
                    cb:66:5a:09:ab:1b:de:20:59:f8:36:38:f9:4f:1d:
                    79:cc:7f:94:b3:2f:dc:17:1b:56:1e:2d:87:0b:b6:
                    56:6f:7f:5b:c6:d3:d0:0f:e2:35:26:eb:aa:b6:59:
                    66:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:4B:09:A1:CA:01:D9:BE:3A:BD:08:F7:7A:BC:D0:8A:5A:F1:50:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/e4baa231-2567-340f-b7d2-9b16fd457629.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.169.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:19:bf:17:71:da:df:4f:16:4a:ed:49:b5:64:d2:82:63:00:
         12:6b:ef:5a:b4:28:20:e0:6c:52:4e:06:6c:e6:d1:9c:82:bd:
         20:9f:e9:9e:2e:ae:a6:40:97:51:f5:a7:59:96:0d:57:e5:64:
         95:5e:16:aa:b5:84:7d:5e:60:98:1f:b1:b3:9f:76:bf:98:5a:
         18:34:22:26:69:df:bc:bf:4b:4e:2d:ed:98:7a:ae:c8:75:68:
         a5:55:2f:c4:74:f0:d0:f1:fd:9e:60:05:0b:57:f7:01:49:0c:
         30:e8:ac:b6:64:e2:f8:ca:87:78:6e:cf:b3:ea:86:0e:52:90:
         46:2b:a5:aa:5b:55:18:cf:c8:cd:70:b3:ba:1d:8b:b8:f9:f3:
         3d:5f:fb:95:ff:84:e2:3f:42:8b:65:71:c5:92:ce:4c:e3:ea:
         3b:19:ef:1b:4e:2d:19:60:9b:ef:7a:bc:cc:d9:72:d2:02:69:
         2c:92:99:f4:59:c5:e8:c9:e1:67:0f:be:aa:ee:5d:0a:b7:5f:
         a4:92:d2:7f:f3:9c:7a:21:0d:b7:4b:76:74:ad:54:04:74:02:
         18:2f:c7:9e:4e:40:74:77:6d:29:34:59:f8:ba:d7:76:50:89:
         70:12:e9:b1:49:1a:5e:27:12:8d:a5:8c:1b:5a:28:86:ad:2c:
         a5:a4:a5:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD0LuIK4yt89036eEgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWQ4NzNmZjUtYzZkZS00MjhmLTk5ZWEtMTRlZWQ4YzVm
ZWRjMB4XDTIyMDIyNTA1MDAwMFoXDTIyMDQwMTA0MDAwMFowLzEtMCsGA1UEAxMk
MjFmZDI2YjQtNTI1ZS00MmZkLWJjNmMtOTlmOGY1ZWMyZWJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WbIeYK2HcoOjIeSl3mcyHK+IylJEIl4/LWs
VSj34SHT4K/ZFF69ZUxp7nF5v7FbUDAqoGjHrJHBJSfG67/bsqoUd8Tt4OzQcyLr
jS0pzpIZID6RwGNEvXVFlOQV+R0LszJCsIDF2Ze3BK1JwAWY3qWB85INFRYuwR0C
DY1zRkNJRvouQMRfnFE0l1Pj/K7l3DzGn07Xg9QwQm4iF+ev1umxPuaxmmvRdrGU
XkYi5pLOc2nLI7D1y4ddBcKLdZcSFQG4kAnsXujgHMj64d/kYEPLZloJqxveIFn4
Njj5Tx15zH+Usy/cFxtWHi2HC7ZWb39bxtPQD+I1JuuqtllmwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK5LCaHKAdm+Or0I93q80Ipa8VDEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3
M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVlZDhjNWZlZGMvZTRiYWEyMzEtMjU2Ny0z
NDBmLWI3ZDItOWIxNmZkNDU3NjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWQ4NzNmZjUtYzZkZS00MjhmLTk5
ZWEtMTRlZWQ4YzVmZWRjL2VkODczZmY1LWM2ZGUtNDI4Zi05OWVhLTE0ZWVkOGM1
ZmVkYy5jcmwwHwYDVR0jBBgwFoAUHLTMIzzDmH15qyl3uMU7Z2qmxrEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVl
ZDhjNWZlZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERangMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH4Zvxdx2t9PFkrtSbVk0oJjABJr71q0KCDgbFJOBmzm0ZyCvSCf6Z4u
rqZAl1H1p1mWDVflZJVeFqq1hH1eYJgfsbOfdr+YWhg0IiZp37y/S04t7Zh6rsh1
aKVVL8R08NDx/Z5gBQtX9wFJDDDorLZk4vjKh3huz7Pqhg5SkEYrpapbVRjPyM1w
s7odi7j58z1f+5X/hOI/QotlccWSzkzj6jsZ7xtOLRlgm+96vMzZctICaSySmfRZ
xejJ4WcPvqruXQq3X6SS0n/znHohDbdLdnStVAR0Ahgvx55OQHR3bSk0Wfi613ZQ
iXAS6bFJGl4nEo2ljBtaKIatLKWkpaE=
-----END CERTIFICATE-----