Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/1f30a585-7d78-3ebb-b46f-cb1fdd6c1acc.roa
File:                     1f30a585-7d78-3ebb-b46f-cb1fdd6c1acc.roa (raw, json)
Hash identifier:          1I+OEbOnEwg7IkOW2zC8NTAMHjMkX8QF1JrzKmNv/nk=
Subject key identifier:   DB:D7:E2:0D:D5:C8:0D:74:16:2E:13:CC:85:11:4D:AF:0A:40:4B:46
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583CE54658966A24BF2101718500
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/1f30a585-7d78-3ebb-b46f-cb1fdd6c1acc.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        204.246.160.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e5:46:58:96:6a:24:bf:21:01:71:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=e91b5d5e-4523-4b23-b906-bfbb179f5242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:27:67:9b:32:c5:15:38:28:55:ff:2d:50:b8:
                    c9:6b:51:8b:a5:d5:99:b3:e1:30:09:a7:3b:ad:ee:
                    91:d0:54:dc:99:fa:5f:cd:be:bf:27:80:f9:2b:31:
                    52:97:32:7a:33:e9:ee:eb:46:de:6a:f1:ff:aa:11:
                    a2:bb:fd:54:20:ee:35:bf:db:92:86:3a:0d:be:36:
                    53:ba:bb:16:68:48:39:1f:dd:44:11:cb:3e:61:d1:
                    76:87:37:23:54:c1:92:67:6e:9e:30:31:b5:da:24:
                    fc:aa:14:41:27:be:0c:f1:99:76:2e:e4:cb:a7:94:
                    ee:ca:a3:41:44:e0:ea:0b:c6:05:c4:81:5a:4c:c9:
                    e4:18:4a:dc:15:d6:4e:60:c6:2a:77:5c:9a:36:fe:
                    a7:18:20:b2:fb:8a:2c:4d:3e:8d:39:5c:91:ab:82:
                    67:60:43:80:47:90:fc:37:c0:57:9a:a1:80:02:f3:
                    74:ef:4e:4a:80:0d:6f:6a:5d:dd:e6:67:ea:35:0f:
                    58:dc:a9:32:2b:39:93:4a:aa:9c:98:24:06:f8:c0:
                    e5:07:5f:78:b0:83:39:fe:94:b3:d0:05:27:b2:eb:
                    12:5a:f2:11:f0:54:b0:5e:38:85:21:de:ae:c2:4f:
                    0b:29:9f:82:2a:88:7e:ff:af:cd:27:6b:02:2f:9e:
                    03:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D7:E2:0D:D5:C8:0D:74:16:2E:13:CC:85:11:4D:AF:0A:40:4B:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/1f30a585-7d78-3ebb-b46f-cb1fdd6c1acc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.246.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:e4:92:e3:82:4a:6b:dc:3d:58:f3:b4:86:98:4b:8c:ed:e7:
         0b:bb:ed:cc:dd:70:b1:48:d8:8f:67:ea:11:06:60:5e:4a:9b:
         fb:c1:18:d2:35:cb:3b:ce:da:04:ef:53:ea:6d:02:9e:7d:b8:
         06:a9:b0:58:5d:3b:1d:4b:05:51:61:f4:19:9f:ff:b8:b2:1c:
         a7:97:88:bd:3b:d1:35:67:4e:23:7d:cc:21:e3:36:c3:28:a5:
         ff:93:a6:4f:4f:81:a6:c9:d8:f1:66:cc:01:67:94:6d:b4:04:
         7f:7c:10:bd:a9:6c:a4:20:ff:b7:f9:61:77:1d:dc:84:4e:f8:
         7d:c7:f0:d6:30:79:d2:99:0b:a3:1d:04:46:aa:69:9b:f7:9d:
         e9:eb:30:c7:8b:44:32:a3:f1:97:bf:a1:39:dd:94:c4:2a:75:
         37:cf:17:27:b4:f2:04:15:cf:87:c4:67:e5:d5:79:61:c8:b5:
         60:31:e4:3f:fe:40:24:38:a8:88:74:a6:75:0f:59:dc:2a:d9:
         94:ff:14:47:47:60:96:67:1a:14:22:b2:96:51:e6:9e:e6:93:
         60:b7:87:0f:fd:8c:f8:64:1a:49:93:de:a3:62:b3:56:38:20:
         f4:b0:6e:da:4a:2f:58:ea:d7:f2:90:5c:f8:23:80:80:38:5c:
         90:1a:47:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDzlRliWaiS/IQFxhQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc3OTlmN2YtNDgyNi00YWZhLTg5ZTctOGQwNDc4ZGQx
MjdmMB4XDTIyMDIxMTA1MDAwMFoXDTIyMDMxODA0MDAwMFowLzEtMCsGA1UEAxMk
ZTkxYjVkNWUtNDUyMy00YjIzLWI5MDYtYmZiYjE3OWY1MjQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SdnmzLFFTgoVf8tULjJa1GLpdWZs+EwCac7
re6R0FTcmfpfzb6/J4D5KzFSlzJ6M+nu60beavH/qhGiu/1UIO41v9uShjoNvjZT
ursWaEg5H91EEcs+YdF2hzcjVMGSZ26eMDG12iT8qhRBJ74M8Zl2LuTLp5TuyqNB
RODqC8YFxIFaTMnkGErcFdZOYMYqd1yaNv6nGCCy+4osTT6NOVyRq4JnYEOAR5D8
N8BXmqGAAvN0705KgA1val3d5mfqNQ9Y3KkyKzmTSqqcmCQG+MDlB194sIM5/pSz
0AUnsusSWvIR8FSwXjiFId6uwk8LKZ+CKoh+/6/NJ2sCL54D3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNvX4g3VyA10Fi4TzIURTa8KQEtGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82Nzc5
OWY3Zi00ODI2LTRhZmEtODllNy04ZDA0NzhkZDEyN2YvMWYzMGE1ODUtN2Q3OC0z
ZWJiLWI0NmYtY2IxZmRkNmMxYWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjc3OTlmN2YtNDgyNi00YWZhLTg5
ZTctOGQwNDc4ZGQxMjdmLzY3Nzk5ZjdmLTQ4MjYtNGFmYS04OWU3LThkMDQ3OGRk
MTI3Zi5jcmwwHwYDVR0jBBgwFoAUanc9hyb3PRWaBxvVb9rqwULsJKgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82Nzc5OWY3Zi00ODI2LTRhZmEtODllNy04ZDA0
NzhkZDEyN2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzPagMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADvkkuOCSmvcPVjztIaYS4zt5wu77czdcLFI2I9n6hEGYF5Km/vBGNI1
yzvO2gTvU+ptAp59uAapsFhdOx1LBVFh9Bmf/7iyHKeXiL070TVnTiN9zCHjNsMo
pf+Tpk9PgabJ2PFmzAFnlG20BH98EL2pbKQg/7f5YXcd3IRO+H3H8NYwedKZC6Md
BEaqaZv3nenrMMeLRDKj8Ze/oTndlMQqdTfPFye08gQVz4fEZ+XVeWHItWAx5D/+
QCQ4qIh0pnUPWdwq2ZT/FEdHYJZnGhQispZR5p7mk2C3hw/9jPhkGkmT3qNis1Y4
IPSwbtpKL1jq1/KQXPgjgIA4XJAaR90=
-----END CERTIFICATE-----