Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f71a5753-c3ce-4ad0-85f6-68ca6fc451ef/42fe7d48-0b0e-33de-b574-4b99bfd77cb0.roa
File:                     42fe7d48-0b0e-33de-b574-4b99bfd77cb0.roa (raw, json)
Hash identifier:          wSz7XFVGZikXoQbICJVkb1OLhW/XCq4xs1jyJQEw1Fk=
Subject key identifier:   D2:D5:5C:71:EA:4A:03:4D:0A:49:4A:16:33:28:D1:C3:36:23:9B:BA
Certificate issuer:       /CN=f71a5753-c3ce-4ad0-85f6-68ca6fc451ef
Certificate serial:       010D0C9F4328583C42213F3A843551F52BC21E84
Authority key identifier: 04:C1:5B:51:3D:57:62:04:59:E9:B1:BA:8B:7D:17:28:85:42:89:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f71a5753-c3ce-4ad0-85f6-68ca6fc451ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f71a5753-c3ce-4ad0-85f6-68ca6fc451ef/42fe7d48-0b0e-33de-b574-4b99bfd77cb0.roa
Signing time:             Fri 25 Jun 2021 04:00:00 +0000
ROA not before:           Fri 25 Jun 2021 04:00:00 +0000
ROA not after:            Mon 18 Mar 2024 04:00:00 +0000
asID:                     206607
IP address blocks:        158.51.85.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:42:21:3f:3a:84:35:51:f5:2b:c2:1e:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f71a5753-c3ce-4ad0-85f6-68ca6fc451ef
        Validity
            Not Before: Jun 25 04:00:00 2021 GMT
            Not After : Mar 18 04:00:00 2024 GMT
        Subject: CN=6c4511ad-9e16-4980-a6cc-808ab5987954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d0:62:d7:60:ac:8e:2f:05:6a:55:1a:f0:fa:
                    8b:fa:48:51:e4:c2:2b:41:a3:e2:75:8c:29:d3:fe:
                    c3:7c:e8:e4:28:ed:ea:88:3f:44:08:0e:9b:87:20:
                    3a:06:8e:67:d7:b5:18:76:a7:59:ff:66:af:c5:9a:
                    de:cc:db:0f:dc:0c:b3:cc:80:d5:86:b2:e0:d0:a1:
                    4d:6a:a4:c5:98:4f:d9:cb:bc:74:63:9f:6d:bf:7a:
                    1d:02:0d:e2:91:60:a4:1d:f2:79:00:09:e8:e9:16:
                    fe:16:cf:c8:c8:8b:35:c1:be:80:e6:66:fe:90:69:
                    96:fd:d3:b5:c8:9f:bf:61:ab:4d:dd:66:77:31:ed:
                    88:89:df:b1:44:02:ad:14:36:ca:88:61:29:66:70:
                    ff:03:08:c2:5d:09:3a:42:fd:48:2c:42:58:80:2c:
                    aa:ed:54:8f:f5:d5:ce:df:92:ad:46:41:ef:68:05:
                    65:85:c8:d3:93:64:50:e7:67:09:24:e8:d9:a2:33:
                    cf:9f:b7:64:85:b5:11:05:98:3a:2c:81:bf:23:03:
                    b0:df:44:ac:44:52:2e:f8:bc:7b:bb:a6:1f:fa:22:
                    e9:ca:85:6e:f0:86:bf:1b:8b:72:c0:95:b0:85:45:
                    a0:a1:a2:de:a7:e1:48:20:7d:8d:94:c6:a5:76:5a:
                    54:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D5:5C:71:EA:4A:03:4D:0A:49:4A:16:33:28:D1:C3:36:23:9B:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f71a5753-c3ce-4ad0-85f6-68ca6fc451ef/42fe7d48-0b0e-33de-b574-4b99bfd77cb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f71a5753-c3ce-4ad0-85f6-68ca6fc451ef/f71a5753-c3ce-4ad0-85f6-68ca6fc451ef.crl

            X509v3 Authority Key Identifier:
                keyid:04:C1:5B:51:3D:57:62:04:59:E9:B1:BA:8B:7D:17:28:85:42:89:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f71a5753-c3ce-4ad0-85f6-68ca6fc451ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:3f:33:1a:dc:3c:5d:d2:19:14:50:bb:86:ae:99:08:47:4f:
         1f:93:b0:cd:47:d8:c5:db:8b:ee:e4:a6:ee:41:3a:f0:a8:a3:
         e3:b5:8d:64:76:d4:3f:5e:a0:a2:52:06:f3:e1:19:92:b5:03:
         a7:6e:b1:d6:14:0f:6c:8b:bb:38:86:ea:d9:80:70:2a:eb:dc:
         44:34:4b:7c:7a:10:d3:59:cf:62:d6:75:bd:5d:59:34:c7:dd:
         42:e4:46:61:af:df:07:37:c5:ed:b8:56:30:74:14:07:4b:ed:
         49:60:a4:a9:aa:5e:26:f0:73:64:ef:1d:8d:99:e2:be:a1:b8:
         88:c0:99:ed:2d:07:d1:5a:b2:97:6a:83:a5:72:55:ad:7b:76:
         e5:46:58:c1:e0:ed:de:ea:6c:b8:e1:88:e0:89:d1:2b:77:8b:
         aa:cd:6b:e7:48:85:cd:6d:dd:34:c2:ef:f8:5b:95:f7:15:ec:
         61:28:85:1a:27:e1:f5:44:61:e2:29:65:9e:59:9e:c3:8c:86:
         c3:d7:ac:38:6f:ab:34:af:b3:d8:a0:dd:07:6c:b4:b3:be:f0:
         97:1f:ad:30:67:b9:8f:91:fb:b4:d0:2d:5a:58:a3:1a:e7:77:
         af:2e:c9:72:5e:d5:8e:cd:a7:ce:b0:32:c6:b5:ac:b6:7b:7a:
         d5:38:3c:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDxCIT86hDVR9SvCHoQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjcxYTU3NTMtYzNjZS00YWQwLTg1ZjYtNjhjYTZmYzQ1
MWVmMB4XDTIxMDYyNTA0MDAwMFoXDTI0MDMxODA0MDAwMFowLzEtMCsGA1UEAxMk
NmM0NTExYWQtOWUxNi00OTgwLWE2Y2MtODA4YWI1OTg3OTU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNBi12Csji8FalUa8PqL+khR5MIrQaPidYwp
0/7DfOjkKO3qiD9ECA6bhyA6Bo5n17UYdqdZ/2avxZrezNsP3AyzzIDVhrLg0KFN
aqTFmE/Zy7x0Y59tv3odAg3ikWCkHfJ5AAno6Rb+Fs/IyIs1wb6A5mb+kGmW/dO1
yJ+/YatN3WZ3Me2Iid+xRAKtFDbKiGEpZnD/AwjCXQk6Qv1ILEJYgCyq7VSP9dXO
35KtRkHvaAVlhcjTk2RQ52cJJOjZojPPn7dkhbURBZg6LIG/IwOw30SsRFIu+Lx7
u6Yf+iLpyoVu8Ia/G4tywJWwhUWgoaLep+FIIH2NlMaldlpUAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNLVXHHqSgNNCklKFjMo0cM2I5u6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mNzFh
NTc1My1jM2NlLTRhZDAtODVmNi02OGNhNmZjNDUxZWYvNDJmZTdkNDgtMGIwZS0z
M2RlLWI1NzQtNGI5OWJmZDc3Y2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjcxYTU3NTMtYzNjZS00YWQwLTg1
ZjYtNjhjYTZmYzQ1MWVmL2Y3MWE1NzUzLWMzY2UtNGFkMC04NWY2LTY4Y2E2ZmM0
NTFlZi5jcmwwHwYDVR0jBBgwFoAUBMFbUT1XYgRZ6bG6i30XKIVCiTIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mNzFhNTc1My1jM2NlLTRhZDAtODVmNi02OGNh
NmZjNDUxZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnjNVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI0/MxrcPF3SGRRQu4aumQhHTx+TsM1H2MXbi+7kpu5BOvCoo+O1jWR2
1D9eoKJSBvPhGZK1A6dusdYUD2yLuziG6tmAcCrr3EQ0S3x6ENNZz2LWdb1dWTTH
3ULkRmGv3wc3xe24VjB0FAdL7UlgpKmqXibwc2TvHY2Z4r6huIjAme0tB9Faspdq
g6VyVa17duVGWMHg7d7qbLjhiOCJ0St3i6rNa+dIhc1t3TTC7/hblfcV7GEohRon
4fVEYeIpZZ5ZnsOMhsPXrDhvqzSvs9ig3QdstLO+8JcfrTBnuY+R+7TQLVpYoxrn
d68uyXJe1Y7Np86wMsa1rLZ7etU4PHM=
-----END CERTIFICATE-----