Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8eaae964-4641-4ed7-82e7-85ca167b427b/ca4f9a8b-9608-3b23-aa31-32e86835ec5b.roa
File:                     ca4f9a8b-9608-3b23-aa31-32e86835ec5b.roa (raw, json)
Hash identifier:          SP2gdddKYYbEXQu946EEXJ7NsIs0U6PAFYP71bLB95o=
Subject key identifier:   C9:6C:F1:3E:91:4E:E8:E6:54:9D:D1:5F:67:36:FF:E3:9E:20:F6:FF
Certificate issuer:       /CN=8eaae964-4641-4ed7-82e7-85ca167b427b
Certificate serial:       010D0C9F4328576D51CC73C042CFC171121A7809
Authority key identifier: FF:7A:03:68:19:DF:9E:EB:E2:C1:D9:9A:9B:C4:2E:7B:77:F3:5A:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8eaae964-4641-4ed7-82e7-85ca167b427b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8eaae964-4641-4ed7-82e7-85ca167b427b/ca4f9a8b-9608-3b23-aa31-32e86835ec5b.roa
Signing time:             Wed 25 Mar 2020 14:30:56 +0000
ROA not before:           Tue 24 Mar 2020 04:00:00 +0000
ROA not after:            Tue 28 Jun 2022 04:00:00 +0000
asID:                     53717
IP address blocks:        199.192.12.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:12:1a:78:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eaae964-4641-4ed7-82e7-85ca167b427b
        Validity
            Not Before: Mar 24 04:00:00 2020 GMT
            Not After : Jun 28 04:00:00 2022 GMT
        Subject: CN=27ed266d-98ea-48ad-9ed3-fcbc7567d87d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:06:be:e9:49:37:2c:41:c4:57:f0:a6:38:32:
                    a8:f1:a1:22:60:72:93:3f:dd:02:f8:9c:12:69:61:
                    07:90:b8:85:70:6f:5c:99:4f:a9:23:e1:96:59:3b:
                    1f:e7:63:78:a2:ee:1b:18:e4:a5:cf:e3:4d:6c:98:
                    22:51:ce:d8:d8:4b:6f:2c:cc:e0:55:d4:ff:22:11:
                    13:21:8b:51:fe:01:f4:7f:e3:4a:44:05:02:8b:47:
                    ab:e4:90:7c:a9:98:fb:98:37:ce:dd:2d:2b:e3:bd:
                    6e:62:70:93:30:9e:ef:26:2c:2c:c3:b5:03:27:ed:
                    98:6f:83:5e:d2:ce:c4:27:48:3d:2d:ca:20:23:dc:
                    5a:14:ce:04:b0:a9:57:3f:be:67:19:d0:17:29:2d:
                    96:2b:af:db:f9:73:56:37:d0:ef:08:94:1a:ec:cf:
                    64:6c:a7:bc:87:6b:90:f3:58:13:23:1f:40:d6:ab:
                    ed:75:b8:59:fe:e4:1c:db:c5:7f:33:51:69:31:77:
                    db:8c:64:1f:fd:2d:c5:45:3f:f3:27:5e:0e:f7:5f:
                    a7:e5:e0:93:7f:16:52:b5:3e:d4:fe:a6:bc:dd:eb:
                    11:1f:46:75:cc:ab:3e:95:1d:3c:8f:d9:03:90:ea:
                    64:19:7e:95:84:bb:e5:5f:1f:5f:df:7c:29:31:a3:
                    69:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:6C:F1:3E:91:4E:E8:E6:54:9D:D1:5F:67:36:FF:E3:9E:20:F6:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8eaae964-4641-4ed7-82e7-85ca167b427b/ca4f9a8b-9608-3b23-aa31-32e86835ec5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8eaae964-4641-4ed7-82e7-85ca167b427b/8eaae964-4641-4ed7-82e7-85ca167b427b.crl

            X509v3 Authority Key Identifier:
                keyid:FF:7A:03:68:19:DF:9E:EB:E2:C1:D9:9A:9B:C4:2E:7B:77:F3:5A:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8eaae964-4641-4ed7-82e7-85ca167b427b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.192.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:b0:c8:12:57:cb:0f:95:a5:50:cb:4d:d3:78:f4:58:a9:1a:
         c0:f8:c5:0b:8e:cc:3b:27:08:b5:09:74:5a:c7:19:01:8a:7f:
         d2:ef:f1:59:b9:d6:66:64:5d:3e:c9:af:48:e0:78:df:90:20:
         f7:c6:96:28:8c:e8:e3:70:75:a3:9a:24:f6:b8:3f:68:85:ec:
         a8:f3:06:1e:5c:14:5c:b6:f3:79:94:87:c9:eb:68:54:2c:20:
         d1:75:92:d2:82:7a:4e:b7:d5:52:3c:44:61:b8:f3:34:ac:2b:
         61:67:d0:73:13:5e:ea:b3:d3:1b:42:96:92:24:a2:d6:bb:9c:
         23:57:a4:77:ee:a3:c2:c7:82:25:26:c7:ce:e5:70:69:6c:12:
         2e:84:19:30:6b:04:91:db:26:08:6c:54:86:89:55:13:47:64:
         e9:56:e0:51:21:b2:75:d4:19:34:37:3e:0e:7f:56:51:26:e2:
         e8:44:62:d1:0d:fa:d7:4d:87:df:41:fb:b4:18:28:d7:0a:4c:
         6c:a5:b8:00:94:92:3d:48:4b:9b:06:85:0b:3c:45:3c:f9:84:
         97:4c:86:1d:ca:ad:8f:92:a4:09:df:cd:73:10:cf:93:f9:76:
         a6:17:e0:f7:23:0a:b7:66:75:98:83:c5:ca:22:bf:9a:91:de:
         3a:80:cd:93
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcRIaeAkwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDhlYWFlOTY0LTQ2NDEtNGVkNy04MmU3LTg1Y2ExNjdiNDI3
YjAeFw0yMDAzMjQwNDAwMDBaFw0yMjA2MjgwNDAwMDBaMC8xLTArBgNVBAMTJDI3
ZWQyNjZkLTk4ZWEtNDhhZC05ZWQzLWZjYmM3NTY3ZDg3ZDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAJUGvulJNyxBxFfwpjgyqPGhImBykz/dAvicEmlh
B5C4hXBvXJlPqSPhllk7H+djeKLuGxjkpc/jTWyYIlHO2NhLbyzM4FXU/yIREyGL
Uf4B9H/jSkQFAotHq+SQfKmY+5g3zt0tK+O9bmJwkzCe7yYsLMO1AyftmG+DXtLO
xCdIPS3KICPcWhTOBLCpVz++ZxnQFyktliuv2/lzVjfQ7wiUGuzPZGynvIdrkPNY
EyMfQNar7XW4Wf7kHNvFfzNRaTF324xkH/0txUU/8ydeDvdfp+Xgk38WUrU+1P6m
vN3rER9GdcyrPpUdPI/ZA5DqZBl+lYS75V8fX998KTGjafsCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBTJbPE+kU7o5lSd0V9nNv/jniD2/zCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGVhYWU5
NjQtNDY0MS00ZWQ3LTgyZTctODVjYTE2N2I0MjdiL2NhNGY5YThiLTk2MDgtM2Iy
My1hYTMxLTMyZTg2ODM1ZWM1Yi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzhlYWFlOTY0LTQ2NDEtNGVkNy04MmU3
LTg1Y2ExNjdiNDI3Yi84ZWFhZTk2NC00NjQxLTRlZDctODJlNy04NWNhMTY3YjQy
N2IuY3JsMB8GA1UdIwQYMBaAFP96A2gZ357r4sHZmpvELnt381rbMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvOGVhYWU5NjQtNDY0MS00ZWQ3LTgyZTctODVjYTE2
N2I0MjdiLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsfADDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAjbDIElfLD5WlUMtN03j0WKkawPjFC47MOycItQl0WscZAYp/0u/xWbnWZmRd
PsmvSOB435Ag98aWKIzo43B1o5ok9rg/aIXsqPMGHlwUXLbzeZSHyetoVCwg0XWS
0oJ6TrfVUjxEYbjzNKwrYWfQcxNe6rPTG0KWkiSi1rucI1ekd+6jwseCJSbHzuVw
aWwSLoQZMGsEkdsmCGxUholVE0dk6VbgUSGyddQZNDc+Dn9WUSbi6ERi0Q36102H
30H7tBgo1wpMbKW4AJSSPUhLmwaFCzxFPPmEl0yGHcqtj5KkCd/NcxDPk/l2phfg
9yMKt2Z1mIPFyiK/mpHeOoDNkw==
-----END CERTIFICATE-----