Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/3af14dcf-d9f2-35e5-a798-6aeb65656af8.roa
File:                     3af14dcf-d9f2-35e5-a798-6aeb65656af8.roa (raw, json)
Hash identifier:          CTW4ctqsgqGZOAhxDBljGPKOgYi03JU/z1zB0Lw+mws=
Subject key identifier:   F0:56:3D:16:AD:F6:DD:4A:6F:21:52:77:29:0C:B6:7B:B4:AB:18:34
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583F31230A395DC5B819B6DB4800
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/3af14dcf-d9f2-35e5-a798-6aeb65656af8.roa
Signing time:             Fri 09 Sep 2022 12:00:00 +0000
ROA not before:           Fri 09 Sep 2022 12:00:00 +0000
ROA not after:            Sat 15 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        204.246.160.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:31:23:0a:39:5d:c5:b8:19:b6:db:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Sep  9 12:00:00 2022 GMT
            Not After : Oct 15 04:00:00 2022 GMT
        Subject: CN=f6a36590-48ce-41b3-a1eb-0ee9e72b760e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3f:07:d0:7d:26:11:7a:28:16:73:d1:80:46:
                    ce:c5:4a:71:6e:1e:7a:9a:60:89:04:94:5e:9d:da:
                    9e:12:d0:7c:d7:b4:4d:d4:4e:13:6e:53:86:d8:74:
                    50:0f:21:b6:93:16:93:5f:3e:88:99:97:9e:ce:65:
                    91:d0:2d:7c:70:02:2a:95:da:09:76:bd:b0:7c:13:
                    84:2a:f4:85:1d:38:9f:82:6b:09:1d:ef:bb:e3:ff:
                    da:6e:61:f9:9d:a2:45:6b:ef:24:97:a5:0f:b9:8f:
                    b9:bd:13:11:12:c8:7b:4b:d3:01:57:33:f4:6c:1e:
                    76:ed:a7:a8:c5:a1:f1:70:18:40:e1:d7:9b:69:4a:
                    a1:ef:31:f4:7c:33:7c:ec:6d:bc:72:1b:95:fe:14:
                    e3:ad:e6:ca:56:b0:af:61:c5:cb:91:73:bc:5d:9e:
                    ca:99:78:76:53:6f:21:7e:0c:b7:7b:32:e2:51:e1:
                    99:e4:cc:d7:8b:38:a7:95:04:a1:fb:9f:74:e0:36:
                    c4:72:2b:bc:e3:df:de:d6:39:b6:f2:0d:ef:4f:44:
                    f8:46:29:e6:cf:45:c3:5f:52:6a:89:c9:87:72:8e:
                    90:1b:52:e6:c5:9d:a3:d9:69:ea:4b:eb:f3:7d:c8:
                    56:05:e0:1f:7f:ff:20:3c:53:29:7f:12:ca:1a:6d:
                    2b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:56:3D:16:AD:F6:DD:4A:6F:21:52:77:29:0C:B6:7B:B4:AB:18:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/3af14dcf-d9f2-35e5-a798-6aeb65656af8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.246.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:86:b7:b6:4e:f9:0c:01:f6:39:42:0b:a2:00:01:a5:90:48:
         71:6c:a1:85:4f:59:56:1d:be:09:40:c4:18:bd:cd:ed:ab:2f:
         ae:5f:1a:0a:4c:e0:b0:5e:18:65:0d:61:b5:1f:3c:58:b6:36:
         f9:76:44:ae:8b:9e:0a:10:7c:3f:8d:29:a0:c3:1b:f3:68:cc:
         c4:ab:ca:f9:98:0a:cc:47:fe:49:0c:dd:0e:3a:05:77:9d:76:
         75:b5:3c:05:69:e8:be:fb:c2:09:77:2e:3a:b7:77:01:f3:b9:
         6e:c7:74:63:d4:3f:89:4a:16:1c:83:c2:3a:d5:94:86:1e:55:
         51:84:4e:42:70:c0:6e:cf:6a:83:d3:c7:cc:9a:41:29:5f:ac:
         51:47:08:b3:41:f5:ba:43:0b:c9:d9:2a:9f:da:5c:b3:27:5b:
         2a:7f:b3:1b:e2:85:c8:11:a9:ad:0d:83:1c:a3:13:d4:8f:0f:
         71:a8:e6:f4:e2:52:58:04:6e:32:56:78:5c:83:e4:33:23:93:
         f8:a2:c8:fd:79:5f:84:4e:10:d7:e6:91:78:de:cd:9e:bb:25:
         69:5c:c0:e3:ca:66:d6:42:1d:2d:4d:b7:a1:a2:ec:06:9f:b6:
         5f:ec:d2:f9:65:97:4b:e5:7b:e5:6c:c4:5a:37:05:54:8c:c2:
         b6:e1:74:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD8xIwo5XcW4GbbbSAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc3OTlmN2YtNDgyNi00YWZhLTg5ZTctOGQwNDc4ZGQx
MjdmMB4XDTIyMDkwOTEyMDAwMFoXDTIyMTAxNTA0MDAwMFowLzEtMCsGA1UEAxMk
ZjZhMzY1OTAtNDhjZS00MWIzLWExZWItMGVlOWU3MmI3NjBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhD8H0H0mEXooFnPRgEbOxUpxbh56mmCJBJRe
ndqeEtB817RN1E4TblOG2HRQDyG2kxaTXz6ImZeezmWR0C18cAIqldoJdr2wfBOE
KvSFHTifgmsJHe+74//abmH5naJFa+8kl6UPuY+5vRMREsh7S9MBVzP0bB527aeo
xaHxcBhA4debaUqh7zH0fDN87G28chuV/hTjrebKVrCvYcXLkXO8XZ7KmXh2U28h
fgy3ezLiUeGZ5MzXizinlQSh+5904DbEciu849/e1jm28g3vT0T4Rinmz0XDX1Jq
icmHco6QG1LmxZ2j2WnqS+vzfchWBeAff/8gPFMpfxLKGm0rjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPBWPRat9t1KbyFSdykMtnu0qxg0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82Nzc5
OWY3Zi00ODI2LTRhZmEtODllNy04ZDA0NzhkZDEyN2YvM2FmMTRkY2YtZDlmMi0z
NWU1LWE3OTgtNmFlYjY1NjU2YWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjc3OTlmN2YtNDgyNi00YWZhLTg5
ZTctOGQwNDc4ZGQxMjdmLzY3Nzk5ZjdmLTQ4MjYtNGFmYS04OWU3LThkMDQ3OGRk
MTI3Zi5jcmwwHwYDVR0jBBgwFoAUanc9hyb3PRWaBxvVb9rqwULsJKgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82Nzc5OWY3Zi00ODI2LTRhZmEtODllNy04ZDA0
NzhkZDEyN2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzPagMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF6Gt7ZO+QwB9jlCC6IAAaWQSHFsoYVPWVYdvglAxBi9ze2rL65fGgpM
4LBeGGUNYbUfPFi2Nvl2RK6LngoQfD+NKaDDG/NozMSryvmYCsxH/kkM3Q46BXed
dnW1PAVp6L77wgl3Ljq3dwHzuW7HdGPUP4lKFhyDwjrVlIYeVVGETkJwwG7PaoPT
x8yaQSlfrFFHCLNB9bpDC8nZKp/aXLMnWyp/sxvihcgRqa0NgxyjE9SPD3Go5vTi
UlgEbjJWeFyD5DMjk/iiyP15X4ROENfmkXjezZ67JWlcwOPKZtZCHS1Nt6Gi7Aaf
tl/s0vlll0vle+VsxFo3BVSMwrbhdBg=
-----END CERTIFICATE-----