Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a/938345f2-b04a-3bd9-9f4a-54dd4ce36ace.roa
File:                     938345f2-b04a-3bd9-9f4a-54dd4ce36ace.roa (raw, json)
Hash identifier:          XEHPTQ/56uKhDYcspIAqxgEsW7LYt/o06ahs3BFMULk=
Subject key identifier:   9B:55:49:E7:FA:86:C3:03:AC:7C:35:8D:43:73:E5:5C:D5:1B:C4:06
Certificate issuer:       /CN=46107a8c-29da-4914-8858-2b42aa4d8b4a
Certificate serial:       010D0C9F4328583AFE2A73C63F2EB4DDD5AAA600
Authority key identifier: AA:4F:4F:E9:E2:28:28:6A:EC:B1:88:AA:98:ED:11:87:E9:E2:2F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a/938345f2-b04a-3bd9-9f4a-54dd4ce36ace.roa
Signing time:             Wed 31 Mar 2021 04:00:00 +0000
ROA not before:           Wed 31 Mar 2021 04:00:00 +0000
ROA not after:            Sun 23 Nov 2025 05:00:00 +0000
asID:                     203
IP address blocks:        97.65.216.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:fe:2a:73:c6:3f:2e:b4:dd:d5:aa:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46107a8c-29da-4914-8858-2b42aa4d8b4a
        Validity
            Not Before: Mar 31 04:00:00 2021 GMT
            Not After : Nov 23 05:00:00 2025 GMT
        Subject: CN=59817084-a268-4439-a2c4-f861aac0397a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e4:ab:a7:91:10:a4:bc:b2:e1:9c:4f:e2:56:
                    d8:a9:e0:24:19:df:59:e7:4e:8f:f7:aa:0b:51:46:
                    41:fa:ed:29:1e:9c:c5:06:16:36:84:03:f9:15:45:
                    64:90:ab:b4:22:8e:e5:9c:2b:f5:d1:d9:78:c8:48:
                    d8:c4:7b:58:46:c9:9b:0f:2e:fc:dd:04:8e:64:10:
                    c8:7a:44:c6:b3:dc:1e:83:29:2e:3c:27:b9:62:4a:
                    2a:f4:b0:e6:8e:7d:cb:06:8d:35:65:33:16:3e:34:
                    16:71:f2:b9:7c:e9:9b:82:73:61:b2:31:83:2b:a7:
                    6c:3c:ec:a3:00:08:44:ab:54:e0:eb:85:75:f2:0d:
                    ab:bb:38:9b:c5:a1:26:32:87:d4:9b:01:e4:63:fe:
                    2b:97:4b:74:d6:90:df:83:b8:b6:1d:58:3c:ef:be:
                    3b:4f:60:7a:4c:68:66:04:9e:1d:58:f9:b7:a1:b0:
                    e1:ee:f2:f8:e9:d5:ec:d3:44:2b:77:99:2b:46:51:
                    6e:dd:63:db:48:47:76:76:93:e2:c5:3f:dc:57:de:
                    47:f7:fe:80:36:65:26:30:46:80:c4:12:56:77:12:
                    6d:78:ae:42:b0:a7:0e:72:29:2d:e4:29:e8:cc:17:
                    fc:8d:f5:82:6d:46:6a:2b:41:f9:44:31:17:1e:11:
                    99:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:55:49:E7:FA:86:C3:03:AC:7C:35:8D:43:73:E5:5C:D5:1B:C4:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a/938345f2-b04a-3bd9-9f4a-54dd4ce36ace.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a/46107a8c-29da-4914-8858-2b42aa4d8b4a.crl

            X509v3 Authority Key Identifier:
                keyid:AA:4F:4F:E9:E2:28:28:6A:EC:B1:88:AA:98:ED:11:87:E9:E2:2F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.65.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:b1:f7:7b:87:74:8f:89:b1:21:84:07:4e:1c:5c:c9:c5:bb:
         77:1d:ea:99:4a:b7:03:9f:2d:f0:8e:87:b3:84:23:53:b5:c4:
         15:38:41:32:de:aa:60:05:8a:40:5b:36:e2:a3:1e:a0:3d:2e:
         75:c4:a1:5d:dc:53:25:a5:49:5b:f6:75:09:f0:3c:fb:7e:eb:
         ad:f1:a4:2e:83:74:55:40:5f:7a:88:bc:e2:7e:62:a0:1e:a3:
         8f:96:53:44:d4:9f:d1:69:f9:31:2c:03:77:fc:d9:1e:7d:5e:
         92:73:b8:de:11:7c:4d:89:01:88:af:f9:a9:a0:a6:5b:08:2f:
         e7:48:13:09:1f:75:67:03:56:76:4d:96:0d:df:df:11:ee:96:
         21:e4:7c:1b:91:63:8a:f7:8e:d4:8a:9d:3c:93:69:2d:d3:05:
         5f:2c:be:bb:f5:9e:66:5f:95:0d:82:82:e1:1e:35:31:9c:f1:
         7e:c4:fe:c1:00:98:70:74:50:88:70:7d:01:42:41:45:48:fb:
         9d:2d:9e:bc:8b:68:d4:60:2e:bf:6f:be:a1:d5:12:c4:b6:8e:
         37:e2:93:d5:92:94:79:7f:26:9d:32:bf:da:d7:e1:0a:20:21:
         24:71:e4:50:a0:5b:be:a8:0a:76:40:62:b3:df:04:75:53:a9:
         99:09:fc:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDr+KnPGPy603dWqpgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDYxMDdhOGMtMjlkYS00OTE0LTg4NTgtMmI0MmFhNGQ4
YjRhMB4XDTIxMDMzMTA0MDAwMFoXDTI1MTEyMzA1MDAwMFowLzEtMCsGA1UEAxMk
NTk4MTcwODQtYTI2OC00NDM5LWEyYzQtZjg2MWFhYzAzOTdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+Srp5EQpLyy4ZxP4lbYqeAkGd9Z506P96oL
UUZB+u0pHpzFBhY2hAP5FUVkkKu0Io7lnCv10dl4yEjYxHtYRsmbDy783QSOZBDI
ekTGs9wegykuPCe5Ykoq9LDmjn3LBo01ZTMWPjQWcfK5fOmbgnNhsjGDK6dsPOyj
AAhEq1Tg64V18g2ruzibxaEmMofUmwHkY/4rl0t01pDfg7i2HVg87747T2B6TGhm
BJ4dWPm3obDh7vL46dXs00Qrd5krRlFu3WPbSEd2dpPixT/cV95H9/6ANmUmMEaA
xBJWdxJteK5CsKcOcikt5CnozBf8jfWCbUZqK0H5RDEXHhGZJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJtVSef6hsMDrHw1jUNz5VzVG8QGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NjEw
N2E4Yy0yOWRhLTQ5MTQtODg1OC0yYjQyYWE0ZDhiNGEvOTM4MzQ1ZjItYjA0YS0z
YmQ5LTlmNGEtNTRkZDRjZTM2YWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDYxMDdhOGMtMjlkYS00OTE0LTg4
NTgtMmI0MmFhNGQ4YjRhLzQ2MTA3YThjLTI5ZGEtNDkxNC04ODU4LTJiNDJhYTRk
OGI0YS5jcmwwHwYDVR0jBBgwFoAUqk9P6eIoKGrssYiqmO0Rh+niL64wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80NjEwN2E4Yy0yOWRhLTQ5MTQtODg1OC0yYjQy
YWE0ZDhiNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYUHYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACax93uHdI+JsSGEB04cXMnFu3cd6plKtwOfLfCOh7OEI1O1xBU4QTLe
qmAFikBbNuKjHqA9LnXEoV3cUyWlSVv2dQnwPPt+663xpC6DdFVAX3qIvOJ+YqAe
o4+WU0TUn9Fp+TEsA3f82R59XpJzuN4RfE2JAYiv+amgplsIL+dIEwkfdWcDVnZN
lg3f3xHuliHkfBuRY4r3jtSKnTyTaS3TBV8svrv1nmZflQ2CguEeNTGc8X7E/sEA
mHB0UIhwfQFCQUVI+50tnryLaNRgLr9vvqHVEsS2jjfik9WSlHl/Jp0yv9rX4Qog
ISRx5FCgW76oCnZAYrPfBHVTqZkJ/C0=
-----END CERTIFICATE-----