Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc/2035f954-f604-3de6-b8a1-29543a3e3b7c.roa
File:                     2035f954-f604-3de6-b8a1-29543a3e3b7c.roa (raw, json)
Hash identifier:          srCMq7I6OriEAHqPCAADIuk4EbfFCxuC4R8MkmRdq6o=
Subject key identifier:   8C:E3:3F:BD:E3:DD:60:4A:E3:1C:A3:BC:89:B5:30:9C:AB:51:FF:45
Certificate issuer:       /CN=5054a223-c485-46b0-b02c-2fdc3bfe26bc
Certificate serial:       010D0C9F4328583D69A19C8E72207349DA8D9980
Authority key identifier: 8B:F7:51:E2:E3:D2:43:13:56:DE:2E:5A:0B:B4:F8:A0:BA:4D:40:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc/2035f954-f604-3de6-b8a1-29543a3e3b7c.roa
Signing time:             Tue 22 Mar 2022 04:00:00 +0000
ROA not before:           Tue 22 Mar 2022 04:00:00 +0000
ROA not after:            Thu 03 Jul 2031 04:00:00 +0000
asID:                     60438
IP address blocks:        23.134.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:69:a1:9c:8e:72:20:73:49:da:8d:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5054a223-c485-46b0-b02c-2fdc3bfe26bc
        Validity
            Not Before: Mar 22 04:00:00 2022 GMT
            Not After : Jul  3 04:00:00 2031 GMT
        Subject: CN=5d873fc5-6332-4685-a38e-ee628f11e4c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:51:b6:64:eb:05:b1:9e:ad:f8:df:05:47:4a:
                    71:18:26:1e:1a:82:1f:49:32:f8:27:a2:42:47:4d:
                    26:ff:b7:61:62:3f:79:7d:d4:10:a6:05:b9:55:18:
                    05:d6:67:f9:38:18:6a:cd:88:bf:56:72:50:d5:ed:
                    8e:10:22:04:1f:2b:03:53:a8:69:7e:e0:6f:4d:73:
                    eb:cf:9e:3d:7b:d2:82:a3:7d:94:a2:a5:71:c2:de:
                    35:4a:1f:c1:1d:de:16:8c:d0:58:93:79:46:39:81:
                    22:73:fc:ac:2f:48:8a:a2:35:cf:92:c4:9f:aa:9c:
                    ad:f2:c6:a6:8d:d3:56:d7:c0:2f:62:53:a7:5b:89:
                    03:b0:d3:8c:90:79:1d:94:46:5a:1d:42:c5:d2:f9:
                    58:6a:ef:8b:e2:46:f9:78:48:fd:fa:6a:df:12:e0:
                    54:8f:36:49:73:a2:2a:78:67:3f:73:d6:13:65:d0:
                    49:60:1e:11:ae:d8:46:75:6e:f3:97:d0:fe:9b:43:
                    e3:d6:fc:7c:2d:58:57:ee:a4:34:06:6c:50:9a:57:
                    64:2f:12:8a:e2:2d:7f:df:1c:e5:4e:c6:09:4c:d3:
                    b0:a8:1a:48:74:65:c5:0e:72:6e:7e:22:74:7a:50:
                    69:27:48:18:b8:e8:91:1d:5b:60:0c:9b:ca:27:93:
                    b6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E3:3F:BD:E3:DD:60:4A:E3:1C:A3:BC:89:B5:30:9C:AB:51:FF:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc/2035f954-f604-3de6-b8a1-29543a3e3b7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc/5054a223-c485-46b0-b02c-2fdc3bfe26bc.crl

            X509v3 Authority Key Identifier:
                keyid:8B:F7:51:E2:E3:D2:43:13:56:DE:2E:5A:0B:B4:F8:A0:BA:4D:40:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:8f:49:9a:9b:c5:2a:c1:ee:6f:6b:6e:9c:7c:2a:fb:e3:19:
         5e:da:a1:12:00:60:37:2b:23:2e:21:ad:04:12:c5:29:b7:be:
         a6:8f:86:a4:c7:2d:bc:60:cb:2b:c2:0e:b7:04:e2:da:2c:21:
         f8:52:4e:62:e9:2b:33:27:5f:3a:e4:1f:a1:63:d6:e3:1d:7f:
         17:f4:9f:f0:fa:d4:a1:bb:06:51:35:0a:ab:78:e9:ce:42:81:
         31:cc:e0:b5:d8:4d:b9:d1:eb:0c:ee:92:52:10:1f:81:93:91:
         72:49:63:db:42:0b:e0:ca:8f:68:75:91:9f:61:87:2d:97:fb:
         eb:5a:df:e0:b0:ac:8b:77:05:b2:5a:11:9c:e6:c2:88:da:04:
         9b:b9:18:cd:f0:32:4e:2f:33:23:cb:a3:72:84:da:3e:f9:0b:
         b2:1b:ff:e1:bc:e1:8a:b3:43:65:f0:46:a0:d9:33:c5:ce:86:
         e8:64:fa:67:23:1b:e1:8f:19:47:1a:bb:42:bb:cf:cf:e8:bc:
         68:21:4e:d2:82:e9:62:9f:24:b0:6b:a1:11:78:16:9d:4d:78:
         e1:e5:4b:a0:ce:b1:61:53:12:10:dc:5e:75:03:1c:12:24:56:
         ee:3c:7b:c1:bc:d6:3c:13:68:18:c3:48:e0:2f:32:0e:88:61:
         47:b0:79:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1poZyOciBzSdqNmYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTA1NGEyMjMtYzQ4NS00NmIwLWIwMmMtMmZkYzNiZmUy
NmJjMB4XDTIyMDMyMjA0MDAwMFoXDTMxMDcwMzA0MDAwMFowLzEtMCsGA1UEAxMk
NWQ4NzNmYzUtNjMzMi00Njg1LWEzOGUtZWU2MjhmMTFlNGM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVG2ZOsFsZ6t+N8FR0pxGCYeGoIfSTL4J6JC
R00m/7dhYj95fdQQpgW5VRgF1mf5OBhqzYi/VnJQ1e2OECIEHysDU6hpfuBvTXPr
z549e9KCo32UoqVxwt41Sh/BHd4WjNBYk3lGOYEic/ysL0iKojXPksSfqpyt8sam
jdNW18AvYlOnW4kDsNOMkHkdlEZaHULF0vlYau+L4kb5eEj9+mrfEuBUjzZJc6Iq
eGc/c9YTZdBJYB4RrthGdW7zl9D+m0Pj1vx8LVhX7qQ0BmxQmldkLxKK4i1/3xzl
TsYJTNOwqBpIdGXFDnJufiJ0elBpJ0gYuOiRHVtgDJvKJ5O2RwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIzjP73j3WBK4xyjvIm1MJyrUf9FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81MDU0
YTIyMy1jNDg1LTQ2YjAtYjAyYy0yZmRjM2JmZTI2YmMvMjAzNWY5NTQtZjYwNC0z
ZGU2LWI4YTEtMjk1NDNhM2UzYjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTA1NGEyMjMtYzQ4NS00NmIwLWIw
MmMtMmZkYzNiZmUyNmJjLzUwNTRhMjIzLWM0ODUtNDZiMC1iMDJjLTJmZGMzYmZl
MjZiYy5jcmwwHwYDVR0jBBgwFoAUi/dR4uPSQxNW3i5aC7T4oLpNQNEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81MDU0YTIyMy1jNDg1LTQ2YjAtYjAyYy0yZmRj
M2JmZTI2YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4ZYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ2PSZqbxSrB7m9rbpx8KvvjGV7aoRIAYDcrIy4hrQQSxSm3vqaPhqTH
LbxgyyvCDrcE4tosIfhSTmLpKzMnXzrkH6Fj1uMdfxf0n/D61KG7BlE1Cqt46c5C
gTHM4LXYTbnR6wzuklIQH4GTkXJJY9tCC+DKj2h1kZ9hhy2X++ta3+CwrIt3BbJa
EZzmwojaBJu5GM3wMk4vMyPLo3KE2j75C7Ib/+G84YqzQ2XwRqDZM8XOhuhk+mcj
G+GPGUcau0K7z8/ovGghTtKC6WKfJLBroRF4Fp1NeOHlS6DOsWFTEhDcXnUDHBIk
Vu48e8G81jwTaBjDSOAvMg6IYUeweao=
-----END CERTIFICATE-----