Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/700fc83f-d257-3eee-bf03-f1d51c1a2ae5.roa
File:                     700fc83f-d257-3eee-bf03-f1d51c1a2ae5.roa (raw, json)
Hash identifier:          QPmGZwReI/JrIeDGR57sK7WmK2Z/CgNTLPbEET5txyQ=
Subject key identifier:   BF:A8:3F:56:0D:A0:EA:25:DB:0A:59:0F:AB:4A:FA:1C:62:F1:20:71
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583D0C5BBD7EDED1421FB923E640
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/700fc83f-d257-3eee-bf03-f1d51c1a2ae5.roa
Signing time:             Fri 25 Feb 2022 05:00:00 +0000
ROA not before:           Fri 25 Feb 2022 05:00:00 +0000
ROA not after:            Fri 01 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        205.251.192.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0c:5b:bd:7e:de:d1:42:1f:b9:23:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Feb 25 05:00:00 2022 GMT
            Not After : Apr  1 04:00:00 2022 GMT
        Subject: CN=df4b2c5b-c7ae-41cc-99a9-a1dbae7e6b42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:16:56:fd:c7:30:d2:4e:d8:48:36:81:a0:8d:
                    be:ab:7b:e1:94:3c:c0:7e:da:31:9e:1e:2b:81:cb:
                    a0:28:9c:a4:18:2d:80:5e:05:e4:e8:25:f0:b7:1d:
                    51:11:db:79:ea:06:1a:3c:24:8f:29:e9:6d:50:35:
                    25:49:3c:48:36:72:e3:fc:b7:5e:96:54:20:a3:3f:
                    fd:5a:95:b9:1f:17:2a:71:c0:3c:4b:a6:ce:f9:08:
                    b9:7d:0a:42:1d:20:b8:cd:04:4a:c7:fb:a4:ae:5d:
                    56:3c:51:57:55:9d:a5:0c:cb:69:a1:30:aa:c3:87:
                    12:a0:71:8a:c0:21:da:d9:42:5c:3a:b2:c7:58:7f:
                    93:b7:09:1b:16:65:e0:a5:74:6a:fe:cf:29:27:8c:
                    1c:5b:a6:c1:30:69:00:b3:eb:0a:dd:58:ed:8a:22:
                    5d:de:3a:da:52:8c:6c:3f:37:f0:e8:08:03:7a:d2:
                    6d:e4:46:4b:99:cd:cb:b4:97:93:06:24:fd:58:5b:
                    cd:cd:6c:92:cd:e2:41:48:66:a8:37:be:5c:11:18:
                    b4:53:ba:8d:39:e9:7b:89:f3:10:0f:b7:38:df:c4:
                    8c:bb:42:cf:c2:65:8d:14:b7:6f:e7:d3:25:5f:a5:
                    eb:e3:fb:48:4e:5c:9c:bf:cf:43:a9:af:c0:3b:79:
                    ca:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A8:3F:56:0D:A0:EA:25:DB:0A:59:0F:AB:4A:FA:1C:62:F1:20:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/700fc83f-d257-3eee-bf03-f1d51c1a2ae5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:5c:35:17:94:87:36:c9:14:21:db:d5:6b:99:f3:ed:a9:e5:
         f5:36:8d:6f:36:3e:26:6c:f3:54:1a:0c:55:2a:8d:6a:0b:01:
         cb:b8:0c:e0:44:2e:0c:0b:20:5e:33:62:dc:03:3b:b3:ff:34:
         94:80:99:90:44:e7:73:d1:cf:45:74:67:3a:46:b9:38:5e:96:
         78:08:ff:da:12:e8:32:67:d5:62:c4:d1:a4:b1:fd:64:85:5b:
         9f:6b:59:1f:76:95:1b:c7:a3:32:c1:94:82:a4:d4:8e:4b:9c:
         ca:66:9f:3d:8e:00:1b:05:b8:bf:79:b9:98:e0:0f:c2:e2:65:
         cc:5b:06:a8:e2:96:d7:b7:7e:69:fa:81:f3:cb:79:d6:8e:d9:
         a3:69:f2:cf:c8:b4:db:46:df:6f:b7:e4:78:d6:f6:9a:d7:01:
         4d:eb:ee:f4:f1:94:bc:2b:a8:5f:7a:f9:ff:39:57:42:7b:73:
         7a:11:02:3d:8e:90:43:e6:4e:77:76:71:03:ca:c1:73:3e:04:
         1e:9b:0a:25:75:15:4e:f0:97:4b:ec:a0:e4:44:02:68:84:14:
         8d:98:73:48:b7:f6:91:63:07:21:7e:9e:cc:76:1f:fe:69:30:
         39:57:30:fe:a8:26:70:62:64:43:d2:59:96:da:1f:17:79:65:
         1d:31:cc:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD0MW71+3tFCH7kj5kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc3OTlmN2YtNDgyNi00YWZhLTg5ZTctOGQwNDc4ZGQx
MjdmMB4XDTIyMDIyNTA1MDAwMFoXDTIyMDQwMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZGY0YjJjNWItYzdhZS00MWNjLTk5YTktYTFkYmFlN2U2YjQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRZW/ccw0k7YSDaBoI2+q3vhlDzAftoxnh4r
gcugKJykGC2AXgXk6CXwtx1REdt56gYaPCSPKeltUDUlSTxINnLj/LdellQgoz/9
WpW5HxcqccA8S6bO+Qi5fQpCHSC4zQRKx/ukrl1WPFFXVZ2lDMtpoTCqw4cSoHGK
wCHa2UJcOrLHWH+TtwkbFmXgpXRq/s8pJ4wcW6bBMGkAs+sK3VjtiiJd3jraUoxs
Pzfw6AgDetJt5EZLmc3LtJeTBiT9WFvNzWySzeJBSGaoN75cERi0U7qNOel7ifMQ
D7c438SMu0LPwmWNFLdv59MlX6Xr4/tITlycv89Dqa/AO3nKCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL+oP1YNoOol2wpZD6tK+hxi8SBxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82Nzc5
OWY3Zi00ODI2LTRhZmEtODllNy04ZDA0NzhkZDEyN2YvNzAwZmM4M2YtZDI1Ny0z
ZWVlLWJmMDMtZjFkNTFjMWEyYWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjc3OTlmN2YtNDgyNi00YWZhLTg5
ZTctOGQwNDc4ZGQxMjdmLzY3Nzk5ZjdmLTQ4MjYtNGFmYS04OWU3LThkMDQ3OGRk
MTI3Zi5jcmwwHwYDVR0jBBgwFoAUanc9hyb3PRWaBxvVb9rqwULsJKgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82Nzc5OWY3Zi00ODI2LTRhZmEtODllNy04ZDA0
NzhkZDEyN2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGzfvAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABhcNReUhzbJFCHb1WuZ8+2p5fU2jW82PiZs81QaDFUqjWoLAcu4DOBE
LgwLIF4zYtwDO7P/NJSAmZBE53PRz0V0ZzpGuThelngI/9oS6DJn1WLE0aSx/WSF
W59rWR92lRvHozLBlIKk1I5LnMpmnz2OABsFuL95uZjgD8LiZcxbBqjilte3fmn6
gfPLedaO2aNp8s/ItNtG32+35HjW9prXAU3r7vTxlLwrqF96+f85V0J7c3oRAj2O
kEPmTnd2cQPKwXM+BB6bCiV1FU7wl0vsoOREAmiEFI2Yc0i39pFjByF+nsx2H/5p
MDlXMP6oJnBiZEPSWZbaHxd5ZR0xzNQ=
-----END CERTIFICATE-----