Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5b794562-0aa6-3608-92a8-a77005b83f3a.roa
File:                     5b794562-0aa6-3608-92a8-a77005b83f3a.roa (raw, json)
Hash identifier:          UEd2pA89VnIZR760B2W792eLulN2Q0eq7TrsGBeMm0g=
Subject key identifier:   9E:A8:A5:B0:0F:21:B0:C9:8F:93:22:73:51:13:06:FC:99:CD:CC:E7
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285838FFCFA57C7D2DA93AF1E54100
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5b794562-0aa6-3608-92a8-a77005b83f3a.roa
Signing time:             Fri 19 Feb 2021 05:00:00 +0000
ROA not before:           Fri 19 Feb 2021 05:00:00 +0000
ROA not after:            Fri 12 Feb 2027 05:00:00 +0000
asID:                     11427
IP address blocks:        172.87.128.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ff:cf:a5:7c:7d:2d:a9:3a:f1:e5:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 19 05:00:00 2021 GMT
            Not After : Feb 12 05:00:00 2027 GMT
        Subject: CN=19eb9bbf-ac59-4b35-8e06-d7bb1a588bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:22:2f:4d:a0:5a:d4:2e:4c:47:0c:e5:a1:37:
                    8c:e9:2a:45:d4:fb:8c:fb:95:e8:94:82:54:4d:76:
                    70:25:26:fd:63:80:38:70:2c:25:f7:2e:58:63:4d:
                    2c:94:46:92:99:16:25:75:45:9d:4e:0e:b0:7a:5f:
                    d2:73:8f:23:9e:81:e3:12:02:52:cd:1d:83:27:18:
                    5f:45:66:45:da:3e:42:c3:1b:b8:85:49:db:cd:fd:
                    f6:43:d2:a5:9c:26:6f:78:66:f6:a9:94:e5:94:75:
                    63:23:0b:32:18:f9:c8:51:36:9e:e1:65:1d:b3:d9:
                    08:31:84:03:86:51:d0:f2:9d:39:7d:58:e7:c2:b7:
                    6b:a0:b6:63:90:c1:dd:e6:1d:fc:c9:e4:fc:07:7f:
                    98:93:76:30:ed:94:0a:b3:ae:56:6d:05:43:c3:e7:
                    1b:9f:9b:d6:39:41:fb:6f:19:ec:7a:1f:1e:a2:22:
                    6b:6f:c5:1b:0e:99:9f:f2:2f:43:0f:4a:f3:67:88:
                    71:0f:3b:61:61:8f:70:07:43:b0:4c:d5:fb:2f:8a:
                    fa:52:54:f1:19:59:19:ef:e7:fd:31:44:44:8d:ae:
                    b9:cf:82:03:d2:9e:8d:aa:a9:f2:f7:bb:ac:50:38:
                    c3:8a:28:7b:02:2a:c8:49:79:94:e2:3d:a3:92:27:
                    82:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A8:A5:B0:0F:21:B0:C9:8F:93:22:73:51:13:06:FC:99:CD:CC:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5b794562-0aa6-3608-92a8-a77005b83f3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.87.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:a8:66:4d:b9:09:78:d2:b7:9b:c7:ba:a1:1b:a3:ee:14:a3:
         44:a7:93:97:c1:1f:6f:5d:89:56:e8:07:22:fb:e1:b7:7d:a7:
         17:d5:23:70:03:96:45:e0:5a:e9:ab:b1:a3:1f:d9:49:2b:7c:
         4f:98:ad:57:59:56:5f:fa:f3:04:ca:57:d5:00:57:95:a9:10:
         c1:38:93:02:09:db:e0:25:a7:30:16:fd:26:15:ad:31:d1:1d:
         a7:91:22:0a:ff:89:91:ed:ca:d8:29:f9:ff:74:9e:9d:63:a6:
         eb:19:cc:68:d7:f9:d7:4a:4e:62:a6:d3:68:21:2a:e7:3b:25:
         23:68:14:f7:b4:64:d7:13:eb:b7:ca:73:83:50:2b:50:55:8e:
         af:2e:d6:53:e6:3f:f0:71:fb:05:2c:e4:c0:43:fb:23:fd:4d:
         d6:32:bf:f0:5a:c3:c6:f6:d9:53:79:22:c3:fa:4c:f5:f6:4d:
         68:6c:b9:0e:41:13:50:10:60:7d:e0:b6:b4:39:e3:69:76:a2:
         9c:73:46:6b:bb:c4:ef:47:fb:2b:f0:91:72:53:f2:fe:71:f3:
         c3:bb:b8:d8:76:15:00:6d:24:20:b7:aa:08:77:8f:1b:b5:4b:
         c5:21:68:c7:00:2c:83:dc:3e:de:ed:c5:81:53:40:3b:c6:4b:
         ae:79:0f:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDj/z6V8fS2pOvHlQQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTIxMDIxOTA1MDAwMFoXDTI3MDIxMjA1MDAwMFowLzEtMCsGA1UEAxMk
MTllYjliYmYtYWM1OS00YjM1LThlMDYtZDdiYjFhNTg4YmFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyIvTaBa1C5MRwzloTeM6SpF1PuM+5XolIJU
TXZwJSb9Y4A4cCwl9y5YY00slEaSmRYldUWdTg6wel/Sc48jnoHjEgJSzR2DJxhf
RWZF2j5Cwxu4hUnbzf32Q9KlnCZveGb2qZTllHVjIwsyGPnIUTae4WUds9kIMYQD
hlHQ8p05fVjnwrdroLZjkMHd5h38yeT8B3+Yk3Yw7ZQKs65WbQVDw+cbn5vWOUH7
bxnseh8eoiJrb8UbDpmf8i9DD0rzZ4hxDzthYY9wB0OwTNX7L4r6UlTxGVkZ7+f9
MUREja65z4ID0p6Nqqny97usUDjDiih7AirISXmU4j2jkieC7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ6opbAPIbDJj5Mic1ETBvyZzcznMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNWI3OTQ1NjItMGFhNi0z
NjA4LTkyYTgtYTc3MDA1YjgzZjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrFeAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE6oZk25CXjSt5vHuqEbo+4Uo0Snk5fBH29diVboByL74bd9pxfVI3AD
lkXgWumrsaMf2UkrfE+YrVdZVl/68wTKV9UAV5WpEME4kwIJ2+AlpzAW/SYVrTHR
HaeRIgr/iZHtytgp+f90np1jpusZzGjX+ddKTmKm02ghKuc7JSNoFPe0ZNcT67fK
c4NQK1BVjq8u1lPmP/Bx+wUs5MBD+yP9TdYyv/Baw8b22VN5IsP6TPX2TWhsuQ5B
E1AQYH3gtrQ542l2opxzRmu7xO9H+yvwkXJT8v5x88O7uNh2FQBtJCC3qgh3jxu1
S8UhaMcALIPcPt7txYFTQDvGS655D3g=
-----END CERTIFICATE-----