Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/90429d60-1b72-3c0b-9170-01e37e39a45c.roa
File:                     90429d60-1b72-3c0b-9170-01e37e39a45c.roa (raw, json)
Hash identifier:          hn1qO3PkHJSAmb5uoIgOp1hFOdaQgukkLKfBaV3jd3k=
Subject key identifier:   14:D5:12:68:92:21:41:6B:8F:9D:32:9E:0F:4D:D4:E0:31:75:25:52
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D2B30A080C1AC3FDD739E40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/90429d60-1b72-3c0b-9170-01e37e39a45c.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     577
IP address blocks:        209.226.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:2b:30:a0:80:c1:ac:3f:dd:73:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=fde60efb-4861-4b51-aff6-da2735957290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:33:52:33:4d:00:bd:3c:7e:03:36:98:db:8d:
                    fe:15:a5:90:81:c1:3d:03:c9:8e:00:dd:0b:56:f4:
                    d7:00:96:ae:cc:91:49:a7:12:d5:86:30:90:01:9e:
                    1f:0a:ee:81:ca:93:ac:52:f3:b1:c3:ed:79:c5:95:
                    ae:b0:4c:8d:f4:44:a4:23:09:ba:bc:13:da:53:dd:
                    7c:d7:9f:9f:72:c5:e8:23:a0:19:05:d9:07:0f:3e:
                    ad:f4:9f:16:54:a4:63:59:16:7f:85:9f:19:7d:fa:
                    a1:eb:70:6f:2e:83:0e:bc:6f:2b:d2:85:41:4f:74:
                    cb:32:a0:03:d5:ed:cd:74:9b:76:ac:3c:c2:22:7a:
                    e1:4d:f8:0a:d5:37:5e:45:50:e2:ba:51:54:13:56:
                    54:6e:37:8a:60:11:40:0a:48:a1:41:1f:c0:75:9a:
                    af:d9:12:3b:f2:5c:29:ac:23:39:2a:b8:06:4c:12:
                    16:c2:53:91:d6:5d:a9:58:e4:5e:0f:e8:55:ed:41:
                    d7:64:76:44:58:d4:a5:dd:dd:28:f8:cb:0e:50:e3:
                    81:1d:f7:cb:69:3d:ea:41:31:8c:94:0d:f5:fb:5f:
                    c0:6c:2f:cb:44:2f:7a:f1:7e:01:77:db:0e:24:31:
                    ac:c7:89:91:f9:fd:2a:bb:ad:59:6c:3e:1c:a8:74:
                    8c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D5:12:68:92:21:41:6B:8F:9D:32:9E:0F:4D:D4:E0:31:75:25:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/90429d60-1b72-3c0b-9170-01e37e39a45c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:f5:c6:3a:08:7d:b3:c9:fa:4b:2d:e8:48:d1:f8:cf:61:84:
         a1:05:53:2e:c1:fa:79:3f:79:44:2a:cc:7f:92:2d:8d:eb:b8:
         75:07:8a:33:9d:92:16:94:bc:1e:de:28:60:65:47:8c:3b:18:
         f7:c7:55:47:cb:92:02:0d:af:de:a5:34:0d:a6:62:9a:c4:eb:
         97:d7:6b:24:66:52:a5:d4:f5:15:88:66:66:b6:d0:11:c7:ec:
         32:b3:80:1d:0c:32:e9:e7:74:c9:84:ba:18:33:7b:e5:57:46:
         e9:af:e3:48:83:1a:5b:bb:00:4b:0b:17:b5:3e:45:16:4d:e3:
         3f:a7:99:4c:07:06:1e:32:77:e5:68:47:fe:85:27:b4:ce:7b:
         79:e1:b0:92:da:ac:5a:d3:a8:d7:df:6a:ea:1b:d6:74:8d:74:
         37:dd:3e:c9:ab:2a:a3:f2:7b:39:2e:b4:86:92:7f:ad:03:71:
         ea:c1:be:68:d3:7e:ae:8b:a0:3f:3f:11:15:19:c1:4d:4b:74:
         19:e9:4c:d2:60:9a:23:8d:cd:64:65:03:a2:9a:86:3d:61:98:
         07:19:3b:03:01:4d:1e:d6:74:9d:db:d4:7a:03:4f:f0:34:3b:
         6a:5d:86:53:97:7d:83:5f:ae:8f:5b:1b:95:93:98:af:7f:8e:
         a3:75:25:75
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEYtKzCggMGsP91znkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDYxMDEyMDAwMFoXDTI0MDkxMDA0MDAwMFowLzEtMCsGA1UEAxMk
ZmRlNjBlZmItNDg2MS00YjUxLWFmZjYtZGEyNzM1OTU3MjkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozNSM00AvTx+AzaY243+FaWQgcE9A8mOAN0L
VvTXAJauzJFJpxLVhjCQAZ4fCu6BypOsUvOxw+15xZWusEyN9ESkIwm6vBPaU918
15+fcsXoI6AZBdkHDz6t9J8WVKRjWRZ/hZ8Zffqh63BvLoMOvG8r0oVBT3TLMqAD
1e3NdJt2rDzCInrhTfgK1TdeRVDiulFUE1ZUbjeKYBFACkihQR/AdZqv2RI78lwp
rCM5KrgGTBIWwlOR1l2pWOReD+hV7UHXZHZEWNSl3d0o+MsOUOOBHffLaT3qQTGM
lA31+1/AbC/LRC968X4Bd9sOJDGsx4mR+f0qu61ZbD4cqHSMcwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBTVEmiSIUFrj50yng9N1OAxdSVSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvOTA0MjlkNjAtMWI3Mi0z
YzBiLTkxNzAtMDFlMzdlMzlhNDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0eIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAivXGOgh9s8n6Sy3oSNH4z2GEoQVTLsH6eT95RCrMf5Itjeu4dQeKM52S
FpS8Ht4oYGVHjDsY98dVR8uSAg2v3qU0DaZimsTrl9drJGZSpdT1FYhmZrbQEcfs
MrOAHQwy6ed0yYS6GDN75VdG6a/jSIMaW7sASwsXtT5FFk3jP6eZTAcGHjJ35WhH
/oUntM57eeGwktqsWtOo199q6hvWdI10N90+yasqo/J7OS60hpJ/rQNx6sG+aNN+
rougPz8RFRnBTUt0GelM0mCaI43NZGUDopqGPWGYBxk7AwFNHtZ0ndvUegNP8DQ7
al2GU5d9g1+uj1sblZOYr3+Oo3UldQ==
-----END CERTIFICATE-----