Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b200d6fb-4811-49f5-a68c-533986c9a2e7/afefc899-4f20-315a-84cd-b70c6d45a5f2.roa
File:                     afefc899-4f20-315a-84cd-b70c6d45a5f2.roa (raw, json)
Hash identifier:          gWIdOLY9kHoOvnz4UMd6F6NGm3OVtCBY5MdJvfXyaUs=
Subject key identifier:   E7:B7:F9:32:BC:7A:95:73:53:F9:07:37:78:D0:C9:27:EE:97:64:38
Certificate issuer:       /CN=b200d6fb-4811-49f5-a68c-533986c9a2e7
Certificate serial:       010D0C9F4328583F659DB85AD3DB0A48A39EAF00
Authority key identifier: E0:31:98:64:84:F5:ED:DF:39:6D:8B:21:25:40:0D:13:1F:56:B7:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b200d6fb-4811-49f5-a68c-533986c9a2e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b200d6fb-4811-49f5-a68c-533986c9a2e7/afefc899-4f20-315a-84cd-b70c6d45a5f2.roa
Signing time:             Fri 23 Sep 2022 20:32:40 +0000
ROA not before:           Fri 23 Sep 2022 20:32:40 +0000
ROA not after:            Thu 26 Dec 2024 05:00:00 +0000
asID:                     399515
IP address blocks:        199.231.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:65:9d:b8:5a:d3:db:0a:48:a3:9e:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b200d6fb-4811-49f5-a68c-533986c9a2e7
        Validity
            Not Before: Sep 23 20:32:40 2022 GMT
            Not After : Dec 26 05:00:00 2024 GMT
        Subject: CN=9ac47421-8e97-4bb0-975b-67aa360d51ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9e:8c:cd:e2:d5:0c:40:b4:32:57:ff:a9:fd:
                    83:30:cc:91:d8:db:d6:bd:5d:e3:3b:aa:24:48:2f:
                    9d:70:2d:88:d5:0e:b2:d0:48:e2:3a:31:0d:16:07:
                    54:6d:35:1d:e9:91:5d:f0:38:04:62:34:00:18:c2:
                    e6:fc:3f:be:00:9a:cc:48:16:c6:f1:7e:aa:e5:7f:
                    f6:f4:7f:27:b5:f9:73:df:c7:96:a4:44:35:be:76:
                    d8:a7:94:37:ec:c4:96:31:d5:cc:f4:b4:04:26:cd:
                    8c:d9:7d:a7:4c:5b:e0:a8:2e:21:bf:18:d4:48:e5:
                    85:01:2a:59:b1:10:83:e4:7c:3d:eb:c6:35:4c:d0:
                    71:30:ed:ee:b2:46:3e:46:5c:3d:ee:fd:86:e5:0b:
                    69:c3:13:03:e5:cf:d8:03:57:15:bf:cd:eb:6a:0f:
                    56:ef:a4:f3:7a:25:7a:52:67:35:bf:70:dc:d0:61:
                    86:6f:d9:26:f6:86:22:c0:01:f1:e1:4d:4c:a5:24:
                    59:f0:43:56:ea:38:d7:bb:e9:46:7d:79:0d:8f:c3:
                    98:55:ea:10:53:e5:27:bc:0a:cc:f5:1a:27:02:b8:
                    ea:68:b0:18:74:cd:6c:cd:9c:e1:66:fb:fd:29:43:
                    92:eb:96:bd:bc:d2:d0:50:18:ff:b4:4a:a6:2c:f1:
                    86:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B7:F9:32:BC:7A:95:73:53:F9:07:37:78:D0:C9:27:EE:97:64:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b200d6fb-4811-49f5-a68c-533986c9a2e7/afefc899-4f20-315a-84cd-b70c6d45a5f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b200d6fb-4811-49f5-a68c-533986c9a2e7/b200d6fb-4811-49f5-a68c-533986c9a2e7.crl

            X509v3 Authority Key Identifier:
                keyid:E0:31:98:64:84:F5:ED:DF:39:6D:8B:21:25:40:0D:13:1F:56:B7:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b200d6fb-4811-49f5-a68c-533986c9a2e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.231.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:45:7d:9f:fb:51:9a:5a:0a:03:05:29:b4:67:d9:b3:d9:1f:
         29:83:51:be:98:8e:e4:df:a4:e0:0e:89:fe:a9:15:83:d0:9d:
         ed:d6:e7:48:24:9b:02:99:54:c2:ce:07:26:e5:00:d6:98:0b:
         6b:85:b5:99:8e:92:2f:3b:69:39:ba:13:3d:74:1e:9a:fd:c3:
         e2:fb:06:cf:4f:3f:7f:b6:e6:55:19:4e:1d:72:bf:b2:8a:13:
         df:52:65:58:a5:78:5f:c5:00:ae:90:99:13:12:9c:2c:1d:43:
         d6:38:d3:89:f9:11:4c:c2:0a:3a:35:f1:ad:95:e1:66:d6:60:
         4c:f4:fd:4d:be:ff:85:90:9b:65:74:9b:e1:5f:ec:78:49:00:
         3d:21:8d:c5:82:f5:03:87:4b:b3:c9:c7:66:6e:f8:95:fb:e8:
         03:2a:4a:f9:be:03:0a:de:bc:c6:02:5d:86:92:04:f8:89:a8:
         1b:99:ba:c0:f4:92:b0:0a:26:04:ae:17:f8:da:c7:51:a2:7f:
         f6:01:c5:ab:2c:de:48:ec:ab:01:47:df:a7:e4:f6:04:6e:77:
         6e:cb:29:49:58:42:8b:38:36:6b:06:e5:9e:bf:4a:4a:e9:ed:
         14:67:9b:e1:f1:2c:c9:32:3e:d0:02:83:6d:22:42:82:54:9f:
         6d:94:6f:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD9lnbha09sKSKOerwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjIwMGQ2ZmItNDgxMS00OWY1LWE2OGMtNTMzOTg2Yzlh
MmU3MB4XDTIyMDkyMzIwMzI0MFoXDTI0MTIyNjA1MDAwMFowLzEtMCsGA1UEAxMk
OWFjNDc0MjEtOGU5Ny00YmIwLTk3NWItNjdhYTM2MGQ1MWVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJ6MzeLVDEC0Mlf/qf2DMMyR2NvWvV3jO6ok
SC+dcC2I1Q6y0EjiOjENFgdUbTUd6ZFd8DgEYjQAGMLm/D++AJrMSBbG8X6q5X/2
9H8ntflz38eWpEQ1vnbYp5Q37MSWMdXM9LQEJs2M2X2nTFvgqC4hvxjUSOWFASpZ
sRCD5Hw968Y1TNBxMO3uskY+Rlw97v2G5QtpwxMD5c/YA1cVv83rag9W76TzeiV6
Umc1v3Dc0GGGb9km9oYiwAHx4U1MpSRZ8ENW6jjXu+lGfXkNj8OYVeoQU+UnvArM
9RonArjqaLAYdM1szZzhZvv9KUOS65a9vNLQUBj/tEqmLPGGhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOe3+TK8epVzU/kHN3jQySful2Q4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMjAw
ZDZmYi00ODExLTQ5ZjUtYTY4Yy01MzM5ODZjOWEyZTcvYWZlZmM4OTktNGYyMC0z
MTVhLTg0Y2QtYjcwYzZkNDVhNWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjIwMGQ2ZmItNDgxMS00OWY1LWE2
OGMtNTMzOTg2YzlhMmU3L2IyMDBkNmZiLTQ4MTEtNDlmNS1hNjhjLTUzMzk4NmM5
YTJlNy5jcmwwHwYDVR0jBBgwFoAU4DGYZIT17d85bYshJUANEx9Wt+gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMjAwZDZmYi00ODExLTQ5ZjUtYTY4Yy01MzM5
ODZjOWEyZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+fqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFVFfZ/7UZpaCgMFKbRn2bPZHymDUb6YjuTfpOAOif6pFYPQne3W50gk
mwKZVMLOByblANaYC2uFtZmOki87aTm6Ez10Hpr9w+L7Bs9PP3+25lUZTh1yv7KK
E99SZVileF/FAK6QmRMSnCwdQ9Y404n5EUzCCjo18a2V4WbWYEz0/U2+/4WQm2V0
m+Ff7HhJAD0hjcWC9QOHS7PJx2Zu+JX76AMqSvm+AwrevMYCXYaSBPiJqBuZusD0
krAKJgSuF/jax1Gif/YBxass3kjsqwFH36fk9gRud27LKUlYQos4NmsG5Z6/Skrp
7RRnm+HxLMkyPtACg20iQoJUn22UbwI=
-----END CERTIFICATE-----