Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d46c6e41-92a3-34ed-9624-9895c7b22664.roa
File:                     d46c6e41-92a3-34ed-9624-9895c7b22664.roa (raw, json)
Hash identifier:          mpi29LhFENREWQR3nVxCU9sp6I50ZvTSfIVNKHRnXXk=
Subject key identifier:   57:3E:56:42:CF:3C:B3:B3:B7:18:DA:E3:55:30:CF:58:40:8F:D6:CB
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285838AC11D11922BA216DFF021D00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d46c6e41-92a3-34ed-9624-9895c7b22664.roa
Signing time:             Wed 20 Jan 2021 05:00:00 +0000
ROA not before:           Wed 20 Jan 2021 05:00:00 +0000
ROA not after:            Wed 13 Jan 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        71.88.112.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ac:11:d1:19:22:ba:21:6d:ff:02:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jan 20 05:00:00 2021 GMT
            Not After : Jan 13 05:00:00 2027 GMT
        Subject: CN=53c5679f-e2a5-4e91-ba18-f255012beca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:99:bb:78:7d:fe:0e:f1:19:d0:df:e1:a3:5f:
                    cf:06:ae:7c:b6:52:9b:5d:d0:97:93:f3:54:90:c2:
                    79:22:ce:c0:8a:18:ba:5c:cc:93:3d:31:99:e7:fd:
                    14:a2:98:8d:69:f7:c7:c5:66:82:63:c8:ec:df:e6:
                    6f:04:68:7e:7a:99:18:e7:03:65:b2:bc:6f:68:0f:
                    cf:98:33:b2:6d:7d:f4:df:e5:fd:48:60:f6:2c:c3:
                    f3:d9:a6:a1:1f:01:ff:56:99:7d:35:4b:d4:4d:8b:
                    b6:83:5d:1d:81:3d:46:da:ff:fc:d8:22:a8:18:54:
                    9b:56:5e:f9:18:2a:10:b5:27:24:1b:9c:1c:2f:60:
                    23:bc:b0:df:13:05:47:51:74:9e:49:85:1b:0f:f7:
                    d8:3e:f8:14:6d:31:8a:ee:98:8f:f7:c7:b2:63:cc:
                    82:13:ed:73:c8:04:e3:c5:73:ab:4f:25:b0:ec:e7:
                    7f:81:e4:dc:82:64:56:1d:bd:bb:f8:d5:b1:39:4d:
                    fb:aa:1f:73:ae:68:c0:0b:2d:67:5c:83:70:ef:b9:
                    bb:e4:50:6f:37:24:66:21:b9:18:46:5d:03:22:d7:
                    2e:56:be:5b:ec:e2:d0:0f:99:e3:3e:77:79:e6:e5:
                    72:28:79:cb:b8:f5:83:79:a4:65:5a:11:e4:e8:eb:
                    9c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3E:56:42:CF:3C:B3:B3:B7:18:DA:E3:55:30:CF:58:40:8F:D6:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d46c6e41-92a3-34ed-9624-9895c7b22664.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.88.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:09:e7:7d:9b:d2:8a:9e:a0:1b:a8:fd:4b:b0:ca:f0:82:94:
         65:11:cc:ff:ed:5e:f5:27:c9:53:7c:dd:dd:ef:d5:67:09:e6:
         b4:ff:85:2a:52:85:68:a6:2d:5a:62:e8:d0:d8:87:cf:9d:82:
         ed:e3:78:e9:d8:10:4d:b9:ee:68:ab:95:10:cc:01:ae:11:85:
         c5:24:78:f0:2f:9a:d3:aa:91:95:29:76:72:19:a9:3e:d6:69:
         34:84:1f:14:ed:b9:c4:2f:f2:42:8a:d9:38:c3:8e:e6:18:98:
         33:37:ed:07:1a:2b:25:7e:46:3e:86:67:4c:a3:8f:99:d0:56:
         08:98:a2:12:a0:80:90:b6:2b:77:0b:70:1d:07:8f:30:b6:97:
         ca:ba:95:1b:f7:bc:a3:93:1b:ae:8b:21:ae:77:16:c8:33:b3:
         e1:b8:9a:2e:ee:48:72:b9:fc:e5:71:39:c1:90:78:e3:32:2b:
         ad:e2:77:c3:ab:14:33:83:fb:a9:fd:44:50:f6:82:db:6e:90:
         4c:6e:b1:b9:0b:d4:b7:a7:10:b0:b5:a8:26:83:1b:f4:07:7f:
         04:1e:23:6e:05:02:23:87:ce:85:62:21:77:00:95:38:7c:b7:
         d0:a3:4d:30:2f:7f:9e:f4:0d:b8:f3:46:98:6a:bf:b7:f4:04:
         af:e6:67:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDisEdEZIrohbf8CHQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTIxMDEyMDA1MDAwMFoXDTI3MDExMzA1MDAwMFowLzEtMCsGA1UEAxMk
NTNjNTY3OWYtZTJhNS00ZTkxLWJhMTgtZjI1NTAxMmJlY2E3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJm7eH3+DvEZ0N/ho1/PBq58tlKbXdCXk/NU
kMJ5Is7Aihi6XMyTPTGZ5/0UopiNaffHxWaCY8js3+ZvBGh+epkY5wNlsrxvaA/P
mDOybX303+X9SGD2LMPz2aahHwH/Vpl9NUvUTYu2g10dgT1G2v/82CKoGFSbVl75
GCoQtSckG5wcL2AjvLDfEwVHUXSeSYUbD/fYPvgUbTGK7piP98eyY8yCE+1zyATj
xXOrTyWw7Od/geTcgmRWHb27+NWxOU37qh9zrmjACy1nXINw77m75FBvNyRmIbkY
Rl0DItcuVr5b7OLQD5njPnd55uVyKHnLuPWDeaRlWhHk6OucZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFc+VkLPPLOztxja41Uwz1hAj9bLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZDQ2YzZlNDEtOTJhMy0z
NGVkLTk2MjQtOTg5NWM3YjIyNjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER1hwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMAJ532b0oqeoBuo/UuwyvCClGURzP/tXvUnyVN83d3v1WcJ5rT/hSpS
hWimLVpi6NDYh8+dgu3jeOnYEE257mirlRDMAa4RhcUkePAvmtOqkZUpdnIZqT7W
aTSEHxTtucQv8kKK2TjDjuYYmDM37QcaKyV+Rj6GZ0yjj5nQVgiYohKggJC2K3cL
cB0HjzC2l8q6lRv3vKOTG66LIa53Fsgzs+G4mi7uSHK5/OVxOcGQeOMyK63id8Or
FDOD+6n9RFD2gttukExusbkL1LenELC1qCaDG/QHfwQeI24FAiOHzoViIXcAlTh8
t9CjTTAvf570DbjzRphqv7f0BK/mZy0=
-----END CERTIFICATE-----