Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/295f21e8-bfe0-3fae-b617-c8a2064bef41.roa
File:                     295f21e8-bfe0-3fae-b617-c8a2064bef41.roa (raw, json)
Hash identifier:          MeoXUcoqur906Pr5Ji35O36T1TEXjeGFGDHk/rkL+nA=
Subject key identifier:   EF:DA:54:4E:08:40:29:A7:3C:74:CD:27:17:A2:CC:F9:90:49:47:23
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583DF96C4564AE9B550BC3B7F560
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/295f21e8-bfe0-3fae-b617-c8a2064bef41.roa
Signing time:             Fri 20 May 2022 12:00:00 +0000
ROA not before:           Fri 20 May 2022 12:00:00 +0000
ROA not after:            Sat 25 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        72.21.192.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f9:6c:45:64:ae:9b:55:0b:c3:b7:f5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: May 20 12:00:00 2022 GMT
            Not After : Jun 25 04:00:00 2022 GMT
        Subject: CN=5ce0e5cf-3f3c-4487-8eed-8ff6814350c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:82:c4:a9:ce:91:a1:1e:a2:61:2a:16:a9:04:
                    87:b3:e9:98:89:ce:96:f3:c6:61:16:bf:69:f9:df:
                    ca:9a:8a:a6:58:be:00:13:36:49:24:e8:d3:ed:67:
                    02:93:eb:e7:b8:88:41:5c:54:5a:e4:8f:d8:c8:0b:
                    26:c5:01:24:cf:57:0d:63:dc:33:37:cc:b0:10:e7:
                    80:91:96:82:eb:bf:aa:8a:dd:9b:c0:f4:f0:cb:38:
                    a9:ec:9c:45:c0:3f:2f:4d:f7:96:52:68:58:21:d5:
                    ff:0a:fd:3a:67:1d:ee:df:21:41:69:07:81:15:a3:
                    2b:7e:4f:33:34:8e:4d:ab:b6:9b:e3:0a:ca:ac:61:
                    ff:31:a5:9b:0b:d7:ba:62:72:1a:85:1f:ab:9f:98:
                    af:cf:1d:ed:c0:17:17:5e:a8:b9:6e:e6:06:53:a0:
                    d7:d4:93:db:01:38:ce:e2:9f:82:58:af:64:c2:8a:
                    46:29:97:fe:17:3a:9c:9d:9e:45:20:48:5d:d9:ac:
                    b0:80:85:d3:a5:69:88:28:9d:9c:9e:ce:4f:d1:ee:
                    43:3c:59:9e:c0:c5:20:6e:80:0b:b9:08:89:af:bf:
                    10:63:d4:90:a5:8e:2f:3b:ef:7e:6d:41:d6:5e:a2:
                    c2:6f:7c:6a:26:85:37:45:71:87:58:e6:e1:2e:c1:
                    86:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DA:54:4E:08:40:29:A7:3C:74:CD:27:17:A2:CC:F9:90:49:47:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/295f21e8-bfe0-3fae-b617-c8a2064bef41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.21.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:2e:1f:82:f7:9d:5b:bf:bd:28:9c:89:1b:02:58:12:2a:ab:
         d9:a7:fb:82:e1:2d:3e:1b:7c:0d:bc:1a:14:45:f2:fb:8f:35:
         54:e8:49:92:47:88:a7:c4:11:c0:19:26:89:cc:16:c5:ee:41:
         1a:67:e8:fc:9b:63:1d:ce:58:6c:ee:ec:cb:5a:ba:01:dd:e4:
         c0:c5:9e:b5:04:61:2b:f1:41:e4:17:c3:60:ac:61:ae:f4:b9:
         64:00:51:df:99:ff:3d:39:33:0e:a7:80:2f:2e:4e:1f:6a:43:
         e5:e5:17:bb:29:1f:92:fb:38:71:64:3f:b9:db:01:0f:df:24:
         e8:e9:33:69:c8:9f:65:ea:89:bd:89:78:7a:af:ca:90:fd:40:
         04:57:9c:fb:c9:84:d5:de:b9:59:88:6e:46:52:94:5d:8a:a5:
         56:98:bf:cd:d8:b9:78:dd:67:55:51:9e:cc:0b:53:cd:44:9b:
         c8:0b:39:f1:e1:18:97:de:c1:5d:79:56:e2:f9:ec:f5:27:56:
         c4:f5:c7:85:a1:f3:c5:e9:70:24:10:ba:c8:34:c1:82:24:89:
         83:b0:50:8a:33:28:2f:e1:1c:06:09:19:d3:ac:7d:1a:55:57:
         7d:ae:2f:f2:2c:1b:a2:7c:2a:51:2a:ce:1d:7a:5c:69:29:49:
         41:20:8d:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD35bEVkrptVC8O39WAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc3OTlmN2YtNDgyNi00YWZhLTg5ZTctOGQwNDc4ZGQx
MjdmMB4XDTIyMDUyMDEyMDAwMFoXDTIyMDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
NWNlMGU1Y2YtM2YzYy00NDg3LThlZWQtOGZmNjgxNDM1MGM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4LEqc6RoR6iYSoWqQSHs+mYic6W88ZhFr9p
+d/KmoqmWL4AEzZJJOjT7WcCk+vnuIhBXFRa5I/YyAsmxQEkz1cNY9wzN8ywEOeA
kZaC67+qit2bwPTwyzip7JxFwD8vTfeWUmhYIdX/Cv06Zx3u3yFBaQeBFaMrfk8z
NI5Nq7ab4wrKrGH/MaWbC9e6YnIahR+rn5ivzx3twBcXXqi5buYGU6DX1JPbATjO
4p+CWK9kwopGKZf+FzqcnZ5FIEhd2aywgIXTpWmIKJ2cns5P0e5DPFmewMUgboAL
uQiJr78QY9SQpY4vO+9+bUHWXqLCb3xqJoU3RXGHWObhLsGGlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO/aVE4IQCmnPHTNJxeizPmQSUcjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82Nzc5
OWY3Zi00ODI2LTRhZmEtODllNy04ZDA0NzhkZDEyN2YvMjk1ZjIxZTgtYmZlMC0z
ZmFlLWI2MTctYzhhMjA2NGJlZjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjc3OTlmN2YtNDgyNi00YWZhLTg5
ZTctOGQwNDc4ZGQxMjdmLzY3Nzk5ZjdmLTQ4MjYtNGFmYS04OWU3LThkMDQ3OGRk
MTI3Zi5jcmwwHwYDVR0jBBgwFoAUanc9hyb3PRWaBxvVb9rqwULsJKgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82Nzc5OWY3Zi00ODI2LTRhZmEtODllNy04ZDA0
NzhkZDEyN2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSBXAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFsuH4L3nVu/vSiciRsCWBIqq9mn+4LhLT4bfA28GhRF8vuPNVToSZJH
iKfEEcAZJonMFsXuQRpn6PybYx3OWGzu7MtaugHd5MDFnrUEYSvxQeQXw2CsYa70
uWQAUd+Z/z05Mw6ngC8uTh9qQ+XlF7spH5L7OHFkP7nbAQ/fJOjpM2nIn2Xqib2J
eHqvypD9QARXnPvJhNXeuVmIbkZSlF2KpVaYv83YuXjdZ1VRnswLU81Em8gLOfHh
GJfewV15VuL57PUnVsT1x4Wh88XpcCQQusg0wYIkiYOwUIozKC/hHAYJGdOsfRpV
V32uL/IsG6J8KlEqzh16XGkpSUEgjaE=
-----END CERTIFICATE-----