Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/547d37bc-8457-35fa-8d43-4ab871ad5379.roa
File:                     547d37bc-8457-35fa-8d43-4ab871ad5379.roa (raw, json)
Hash identifier:          RFzfL8DKvKEMfeqn5VyPKMGWm0cWLSkj44ZBfNtMRDM=
Subject key identifier:   F9:7A:CE:B7:63:93:66:44:35:54:C1:49:7B:90:67:57:60:9B:13:03
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583D338F977E9388A13DC4780580
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/547d37bc-8457-35fa-8d43-4ab871ad5379.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        216.137.32.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:33:8f:97:7e:93:88:a1:3d:c4:78:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=3a20b5c8-7cf0-419e-8234-5b561897680e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:20:cb:12:3c:0d:24:0b:e3:e8:31:bb:8f:25:
                    c6:5f:e6:6b:a8:ac:cc:cd:5f:61:66:f4:0b:6a:e2:
                    fb:9d:2d:8e:dc:0c:0d:88:63:5f:28:2e:ba:42:42:
                    03:6b:78:57:2e:06:f1:77:36:fb:6c:4b:e9:dc:94:
                    5f:aa:51:4e:e5:8c:55:9e:98:ca:55:95:f3:31:e2:
                    1d:05:42:b6:81:bd:a8:2a:a6:b0:96:6b:8e:12:95:
                    cf:f2:b2:61:0d:7d:d0:ce:c8:f3:0f:68:ae:92:ac:
                    23:f0:8d:70:90:65:0b:fd:8d:c5:82:a9:bd:20:63:
                    07:6f:8c:72:da:38:8d:13:05:4c:1d:7e:0d:fd:a3:
                    22:ca:f1:a0:b4:50:ed:7a:33:1c:76:d9:dd:33:68:
                    09:44:78:3f:ce:0b:68:e9:b3:0e:cc:2c:48:6b:3c:
                    af:c1:a2:ab:04:a8:d0:08:3a:c6:1a:a0:a8:1d:80:
                    38:db:d5:17:de:42:de:00:f4:39:d0:06:a6:0a:15:
                    2a:af:24:70:25:41:28:1b:79:8d:f1:f4:55:c0:2a:
                    42:52:6c:4a:2d:b4:29:da:c2:84:05:02:de:42:cb:
                    45:13:98:60:1f:21:dd:2a:e3:d4:5f:91:2c:2f:7a:
                    a0:a7:49:08:fa:92:9e:bd:aa:e2:bf:06:dc:9f:c7:
                    9b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7A:CE:B7:63:93:66:44:35:54:C1:49:7B:90:67:57:60:9B:13:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/547d37bc-8457-35fa-8d43-4ab871ad5379.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.137.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:33:1e:e4:1a:b8:96:5e:78:1a:07:1f:50:d4:aa:b2:1e:b2:
         41:70:07:93:97:ea:5d:fa:b6:4e:70:ef:be:bd:7a:ae:fb:90:
         cb:5b:17:c7:fd:82:05:0b:9f:7f:c7:1d:bb:16:75:8b:01:1e:
         c0:9d:06:dd:07:5d:87:6e:6d:e1:62:af:5d:a7:b4:90:52:57:
         df:ee:77:50:fd:d2:3e:0d:86:55:9d:9f:f5:08:62:88:be:22:
         d9:bb:6b:c1:28:8a:fa:39:0c:a5:63:39:35:88:64:95:9c:6c:
         99:a8:a5:e2:9c:ac:88:2e:ef:70:42:3f:7b:a2:51:a1:90:fe:
         44:0a:33:f1:b1:86:07:34:e0:a8:fa:37:ee:f4:4c:f7:62:07:
         dc:50:c1:38:f4:98:e7:79:cd:6f:1b:0f:c7:29:7a:d2:3e:56:
         4e:81:32:90:d5:06:9b:98:0f:1c:7a:58:d4:60:04:39:ed:3f:
         42:52:ed:61:c6:7e:10:3f:c3:a1:84:75:1c:4e:e6:f1:cf:ff:
         2a:8a:2c:e7:da:de:a5:55:53:72:bf:3d:08:5c:6e:5a:fa:d0:
         79:1a:cb:3f:42:bc:ba:0d:c5:5a:f4:d3:4f:9e:66:be:00:6c:
         dc:e3:69:30:93:a8:6d:2c:26:cb:db:a8:05:90:e2:d5:53:da:
         39:b1:5d:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD0zj5d+k4ihPcR4BYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc3OTlmN2YtNDgyNi00YWZhLTg5ZTctOGQwNDc4ZGQx
MjdmMB4XDTIyMDMxMTA1MDAwMFoXDTIyMDQxNTA0MDAwMFowLzEtMCsGA1UEAxMk
M2EyMGI1YzgtN2NmMC00MTllLTgyMzQtNWI1NjE4OTc2ODBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyDLEjwNJAvj6DG7jyXGX+ZrqKzMzV9hZvQL
auL7nS2O3AwNiGNfKC66QkIDa3hXLgbxdzb7bEvp3JRfqlFO5YxVnpjKVZXzMeId
BUK2gb2oKqawlmuOEpXP8rJhDX3QzsjzD2iukqwj8I1wkGUL/Y3Fgqm9IGMHb4xy
2jiNEwVMHX4N/aMiyvGgtFDtejMcdtndM2gJRHg/zgto6bMOzCxIazyvwaKrBKjQ
CDrGGqCoHYA429UX3kLeAPQ50AamChUqryRwJUEoG3mN8fRVwCpCUmxKLbQp2sKE
BQLeQstFE5hgHyHdKuPUX5EsL3qgp0kI+pKevarivwbcn8ebxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPl6zrdjk2ZENVTBSXuQZ1dgmxMDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82Nzc5
OWY3Zi00ODI2LTRhZmEtODllNy04ZDA0NzhkZDEyN2YvNTQ3ZDM3YmMtODQ1Ny0z
NWZhLThkNDMtNGFiODcxYWQ1Mzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjc3OTlmN2YtNDgyNi00YWZhLTg5
ZTctOGQwNDc4ZGQxMjdmLzY3Nzk5ZjdmLTQ4MjYtNGFmYS04OWU3LThkMDQ3OGRk
MTI3Zi5jcmwwHwYDVR0jBBgwFoAUanc9hyb3PRWaBxvVb9rqwULsJKgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82Nzc5OWY3Zi00ODI2LTRhZmEtODllNy04ZDA0
NzhkZDEyN2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2IkgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADozHuQauJZeeBoHH1DUqrIeskFwB5OX6l36tk5w7769eq77kMtbF8f9
ggULn3/HHbsWdYsBHsCdBt0HXYdubeFir12ntJBSV9/ud1D90j4NhlWdn/UIYoi+
Itm7a8Eoivo5DKVjOTWIZJWcbJmopeKcrIgu73BCP3uiUaGQ/kQKM/Gxhgc04Kj6
N+70TPdiB9xQwTj0mOd5zW8bD8cpetI+Vk6BMpDVBpuYDxx6WNRgBDntP0JS7WHG
fhA/w6GEdRxO5vHP/yqKLOfa3qVVU3K/PQhcblr60Hkayz9CvLoNxVr000+eZr4A
bNzjaTCTqG0sJsvbqAWQ4tVT2jmxXUc=
-----END CERTIFICATE-----