Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/a86a172c-260c-3305-bb2a-6b1773299b92.roa
File:                     a86a172c-260c-3305-bb2a-6b1773299b92.roa (raw, json)
Hash identifier:          XqToqJHerqiBYp28GoD4kIX9DSF6KGVVs2MHBrVLadA=
Subject key identifier:   E1:2D:AB:71:E0:3C:6B:11:99:93:C2:5A:C9:46:DD:54:FD:FB:42:3D
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583EE2E8F9DE5558676DA7A097B0
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/a86a172c-260c-3305-bb2a-6b1773299b92.roa
Signing time:             Fri 12 Aug 2022 12:00:00 +0000
ROA not before:           Fri 12 Aug 2022 12:00:00 +0000
ROA not after:            Sat 17 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        204.246.160.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e2:e8:f9:de:55:58:67:6d:a7:a0:97:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Aug 12 12:00:00 2022 GMT
            Not After : Sep 17 04:00:00 2022 GMT
        Subject: CN=c6092851-6a01-4d2c-92e5-774547829280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f3:3f:b3:82:c9:41:13:d3:7e:11:36:46:af:
                    da:c8:7c:b8:a8:55:ee:27:45:82:e4:16:53:f1:e9:
                    bc:4c:bf:ce:bf:db:00:30:7e:10:7d:84:b0:3f:0f:
                    c5:ab:b9:f5:de:69:4e:53:ae:d3:02:10:1a:aa:76:
                    3a:ad:1e:ec:84:c5:89:32:63:49:d7:b7:03:67:d1:
                    7a:66:bc:c0:50:a1:2a:19:1f:09:26:8b:7e:5b:d7:
                    7d:b5:0e:53:82:37:7a:d3:7b:6d:ff:77:ea:c7:ab:
                    fd:d9:a4:f9:eb:b7:10:c5:61:ad:b3:8d:6c:d2:2a:
                    b1:8d:86:b6:07:2f:1f:9b:56:e6:fa:9d:e9:76:bc:
                    74:4f:3b:9d:25:b1:b4:e2:90:af:79:6b:bc:e1:c0:
                    f4:cd:be:a7:be:7f:8e:90:1c:64:b8:01:f7:bb:3e:
                    e2:02:15:b3:02:2f:aa:26:43:06:1e:64:1e:7d:a5:
                    55:3e:d9:22:66:f1:28:c4:d7:14:7e:46:85:ab:7f:
                    35:af:64:a0:76:31:a6:97:9b:d5:3a:03:87:19:c0:
                    6e:89:31:a5:5a:fb:0b:25:cd:a7:af:54:22:d8:02:
                    5a:78:ce:fa:ca:22:3a:1a:bc:a1:40:57:cd:44:56:
                    db:23:8c:0d:aa:13:56:3e:3e:b4:92:24:cb:c2:7f:
                    00:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:2D:AB:71:E0:3C:6B:11:99:93:C2:5A:C9:46:DD:54:FD:FB:42:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/a86a172c-260c-3305-bb2a-6b1773299b92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.246.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:0e:db:11:0f:45:69:dc:1a:55:8d:a9:26:4f:23:65:99:4b:
         17:d6:c7:ea:b2:4f:8d:0c:64:ab:1d:c5:41:44:bd:ae:d7:96:
         8a:c3:c8:a5:3d:fc:76:bc:84:79:a3:6a:d8:c7:14:da:d9:b1:
         49:fb:cb:2c:d1:1f:e2:9f:8b:64:20:29:b4:28:34:05:cc:45:
         af:fa:26:9d:1d:4b:f8:0c:f1:17:33:80:19:98:d8:5d:cc:a5:
         aa:e3:e7:0a:8c:dd:2f:80:97:57:9d:33:d7:91:79:94:59:24:
         ce:92:b2:51:df:92:28:93:af:0a:b0:a5:da:df:44:6b:43:3f:
         58:be:17:29:b2:12:9b:7f:1b:40:8f:2f:fc:3c:0f:0c:b5:fa:
         94:17:20:20:40:8f:55:9b:b8:33:ef:7a:94:96:16:b9:6b:c9:
         3b:1d:15:91:ce:e1:84:c9:a9:92:17:59:fd:24:45:f2:3f:f3:
         2d:82:bf:a4:e8:07:fb:8e:f7:d4:9c:a0:ca:ea:3b:5e:91:2b:
         f1:62:ec:b1:a8:70:73:43:59:76:80:2b:2a:00:7c:37:79:81:
         e7:44:ba:64:e3:cd:c0:92:fa:07:98:6b:87:1f:8b:3d:fd:bb:
         74:ea:55:f9:ee:42:58:dc:f6:b4:e1:2a:ed:eb:c7:2c:81:c7:
         eb:ec:91:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD7i6PneVVhnbaegl7AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc3OTlmN2YtNDgyNi00YWZhLTg5ZTctOGQwNDc4ZGQx
MjdmMB4XDTIyMDgxMjEyMDAwMFoXDTIyMDkxNzA0MDAwMFowLzEtMCsGA1UEAxMk
YzYwOTI4NTEtNmEwMS00ZDJjLTkyZTUtNzc0NTQ3ODI5MjgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvM/s4LJQRPTfhE2Rq/ayHy4qFXuJ0WC5BZT
8em8TL/Ov9sAMH4QfYSwPw/Fq7n13mlOU67TAhAaqnY6rR7shMWJMmNJ17cDZ9F6
ZrzAUKEqGR8JJot+W9d9tQ5Tgjd603tt/3fqx6v92aT567cQxWGts41s0iqxjYa2
By8fm1bm+p3pdrx0TzudJbG04pCveWu84cD0zb6nvn+OkBxkuAH3uz7iAhWzAi+q
JkMGHmQefaVVPtkiZvEoxNcUfkaFq381r2SgdjGml5vVOgOHGcBuiTGlWvsLJc2n
r1Qi2AJaeM76yiI6GryhQFfNRFbbI4wNqhNWPj60kiTLwn8A/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOEtq3HgPGsRmZPCWslG3VT9+0I9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82Nzc5
OWY3Zi00ODI2LTRhZmEtODllNy04ZDA0NzhkZDEyN2YvYTg2YTE3MmMtMjYwYy0z
MzA1LWJiMmEtNmIxNzczMjk5YjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjc3OTlmN2YtNDgyNi00YWZhLTg5
ZTctOGQwNDc4ZGQxMjdmLzY3Nzk5ZjdmLTQ4MjYtNGFmYS04OWU3LThkMDQ3OGRk
MTI3Zi5jcmwwHwYDVR0jBBgwFoAUanc9hyb3PRWaBxvVb9rqwULsJKgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82Nzc5OWY3Zi00ODI2LTRhZmEtODllNy04ZDA0
NzhkZDEyN2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzPagMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADYO2xEPRWncGlWNqSZPI2WZSxfWx+qyT40MZKsdxUFEva7XlorDyKU9
/Ha8hHmjatjHFNrZsUn7yyzRH+Kfi2QgKbQoNAXMRa/6Jp0dS/gM8RczgBmY2F3M
parj5wqM3S+Al1edM9eReZRZJM6SslHfkiiTrwqwpdrfRGtDP1i+FymyEpt/G0CP
L/w8Dwy1+pQXICBAj1WbuDPvepSWFrlryTsdFZHO4YTJqZIXWf0kRfI/8y2Cv6To
B/uO99ScoMrqO16RK/Fi7LGocHNDWXaAKyoAfDd5gedEumTjzcCS+geYa4cfiz39
u3TqVfnuQljc9rThKu3rxyyBx+vskUY=
-----END CERTIFICATE-----