Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/1b2284e8-8ada-39ad-9a04-e5881fb5689b.roa
File:                     1b2284e8-8ada-39ad-9a04-e5881fb5689b.roa (raw, json)
Hash identifier:          CsQTQgnrfvos2Sd160pxeOjU4JFvtTyMMfVFqCc0WZE=
Subject key identifier:   C9:15:CC:11:C7:E8:6A:5C:2E:36:20:2A:86:DA:6E:F7:A1:4F:2D:E0
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583E20894E60C02307DDA46EB180
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/1b2284e8-8ada-39ad-9a04-e5881fb5689b.roa
Signing time:             Fri 03 Jun 2022 12:00:00 +0000
ROA not before:           Fri 03 Jun 2022 12:00:00 +0000
ROA not after:            Sat 09 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        72.21.192.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:20:89:4e:60:c0:23:07:dd:a4:6e:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Jun  3 12:00:00 2022 GMT
            Not After : Jul  9 04:00:00 2022 GMT
        Subject: CN=1ceb38bb-3e65-4e55-9227-15708e470e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:08:0b:82:70:a8:64:3e:df:3a:50:57:e8:a6:
                    bd:08:6e:36:b5:94:b9:78:50:ba:af:44:f8:26:00:
                    e1:91:ae:c6:9b:fc:9d:83:0f:7c:c2:34:6b:47:4d:
                    3b:38:55:44:a6:e9:aa:37:a4:4b:38:b1:bb:3e:c2:
                    23:78:d9:dd:af:39:dd:57:84:e1:d4:65:21:6d:f2:
                    7e:f5:c9:4b:1f:75:1f:fc:4f:f6:50:ac:40:7f:26:
                    5d:96:46:30:d6:d0:0d:80:b9:1a:a0:19:00:8a:c3:
                    59:a3:a9:d7:57:8c:87:e8:9a:64:ee:9c:68:cd:93:
                    a9:47:d3:37:29:2b:eb:9c:89:a0:38:53:08:f1:fd:
                    c6:66:28:28:58:8b:09:1a:c5:81:36:fb:cb:96:c4:
                    c0:f9:6c:0b:f1:18:c1:2b:ca:75:80:0f:c0:4c:76:
                    41:b3:62:57:34:54:70:8e:e4:05:1d:79:86:e9:a3:
                    33:f8:4e:b2:79:f5:06:3b:2a:f9:57:ce:bb:08:95:
                    a6:cc:c4:ad:dd:67:8d:3d:9e:ec:67:56:34:bf:da:
                    09:96:6c:9c:af:71:32:71:c1:33:d7:d1:59:89:1f:
                    b7:3a:7f:f2:1a:33:2b:29:44:ca:86:66:e2:4b:07:
                    16:3f:d4:b8:35:0c:33:96:b5:09:7e:56:99:5e:6d:
                    09:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:15:CC:11:C7:E8:6A:5C:2E:36:20:2A:86:DA:6E:F7:A1:4F:2D:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/1b2284e8-8ada-39ad-9a04-e5881fb5689b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.21.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:73:99:be:9b:ec:7d:5c:b1:29:be:11:cd:09:6e:68:42:f9:
         63:bd:f7:c2:4c:51:bf:c2:d4:ec:27:0f:01:7e:7b:7b:91:30:
         2b:47:60:bb:54:4f:c3:d0:73:09:b6:8e:34:6d:4f:de:1b:2c:
         1a:7a:35:13:e2:18:02:2e:a0:a7:1a:52:04:13:68:34:75:e5:
         3d:dc:68:67:73:a0:c3:6f:bc:36:e3:17:9a:b9:a2:fd:b5:8f:
         aa:2c:a9:51:ef:12:cb:bf:11:07:ac:a8:16:f0:16:69:0d:77:
         8e:db:23:1a:57:1e:ff:5e:fe:20:ca:8a:d0:6f:f5:c0:22:c8:
         f1:6e:9f:de:5d:71:09:3b:c4:63:de:b6:cd:0a:49:9e:84:5d:
         08:32:a3:89:e3:6b:64:98:f8:05:60:d1:bd:f2:b3:be:ba:8b:
         ad:66:88:c7:6b:9c:88:a9:95:9c:bd:03:ed:ea:04:89:01:db:
         da:73:43:29:7d:bd:25:b4:b9:a4:91:c9:b0:31:ac:75:48:c9:
         c2:38:3f:e5:1d:31:a0:dc:1a:7e:fc:a3:da:87:8e:2f:9c:de:
         ec:dc:6c:56:78:e2:36:30:d9:7f:ca:87:29:8e:52:c4:be:30:
         9f:e5:46:2f:84:dd:dd:0c:d1:41:cb:54:fd:9c:19:10:5f:9d:
         3e:58:28:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD4giU5gwCMH3aRusYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc3OTlmN2YtNDgyNi00YWZhLTg5ZTctOGQwNDc4ZGQx
MjdmMB4XDTIyMDYwMzEyMDAwMFoXDTIyMDcwOTA0MDAwMFowLzEtMCsGA1UEAxMk
MWNlYjM4YmItM2U2NS00ZTU1LTkyMjctMTU3MDhlNDcwZTA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAgLgnCoZD7fOlBX6Ka9CG42tZS5eFC6r0T4
JgDhka7Gm/ydgw98wjRrR007OFVEpumqN6RLOLG7PsIjeNndrzndV4Th1GUhbfJ+
9clLH3Uf/E/2UKxAfyZdlkYw1tANgLkaoBkAisNZo6nXV4yH6Jpk7pxozZOpR9M3
KSvrnImgOFMI8f3GZigoWIsJGsWBNvvLlsTA+WwL8RjBK8p1gA/ATHZBs2JXNFRw
juQFHXmG6aMz+E6yefUGOyr5V867CJWmzMSt3WeNPZ7sZ1Y0v9oJlmycr3EyccEz
19FZiR+3On/yGjMrKUTKhmbiSwcWP9S4NQwzlrUJflaZXm0JUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMkVzBHH6GpcLjYgKobabvehTy3gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82Nzc5
OWY3Zi00ODI2LTRhZmEtODllNy04ZDA0NzhkZDEyN2YvMWIyMjg0ZTgtOGFkYS0z
OWFkLTlhMDQtZTU4ODFmYjU2ODliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjc3OTlmN2YtNDgyNi00YWZhLTg5
ZTctOGQwNDc4ZGQxMjdmLzY3Nzk5ZjdmLTQ4MjYtNGFmYS04OWU3LThkMDQ3OGRk
MTI3Zi5jcmwwHwYDVR0jBBgwFoAUanc9hyb3PRWaBxvVb9rqwULsJKgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82Nzc5OWY3Zi00ODI2LTRhZmEtODllNy04ZDA0
NzhkZDEyN2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSBXAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHpzmb6b7H1csSm+Ec0JbmhC+WO998JMUb/C1OwnDwF+e3uRMCtHYLtU
T8PQcwm2jjRtT94bLBp6NRPiGAIuoKcaUgQTaDR15T3caGdzoMNvvDbjF5q5ov21
j6osqVHvEsu/EQesqBbwFmkNd47bIxpXHv9e/iDKitBv9cAiyPFun95dcQk7xGPe
ts0KSZ6EXQgyo4nja2SY+AVg0b3ys766i61miMdrnIiplZy9A+3qBIkB29pzQyl9
vSW0uaSRybAxrHVIycI4P+UdMaDcGn78o9qHji+c3uzcbFZ44jYw2X/KhymOUsS+
MJ/lRi+E3d0M0UHLVP2cGRBfnT5YKO4=
-----END CERTIFICATE-----