Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/1d4fcf7e-9f4a-3278-9853-04a76f355583.roa
File:                     1d4fcf7e-9f4a-3278-9853-04a76f355583.roa (raw, json)
Hash identifier:          yte0unPvMYlJodiNm/zB1Advwnvlx+7033kJBZmewHc=
Subject key identifier:   BA:6A:26:39:64:2F:B3:CF:B1:DE:40:4A:1F:E6:67:98:31:2D:2F:D2
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583EBC8DB6120AFE8FB935102500
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/1d4fcf7e-9f4a-3278-9853-04a76f355583.roa
Signing time:             Fri 29 Jul 2022 12:00:00 +0000
ROA not before:           Fri 29 Jul 2022 12:00:00 +0000
ROA not after:            Sat 03 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        76.223.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:bc:8d:b6:12:0a:fe:8f:b9:35:10:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Jul 29 12:00:00 2022 GMT
            Not After : Sep  3 04:00:00 2022 GMT
        Subject: CN=98dc6852-a940-4878-982d-573e723d3924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f1:a3:1a:62:36:7b:50:d3:1b:50:77:7c:93:
                    d8:2e:6d:8b:e5:7b:e9:d3:4b:be:cd:f7:d4:3f:5d:
                    cc:7f:62:57:4c:03:41:d4:4d:e3:48:e9:fe:5c:85:
                    d5:a9:2e:ab:cb:1c:16:b9:cc:2e:b9:bd:f1:e6:ad:
                    63:d1:04:fb:e3:52:1f:8e:02:3e:15:d1:e8:00:da:
                    e0:15:26:93:c2:ad:49:d9:8f:84:e7:3b:e9:28:eb:
                    b1:c7:46:cc:ad:30:d9:58:6d:4a:52:bd:fd:42:87:
                    5c:46:0a:d7:44:eb:27:9c:1e:2d:d8:f1:08:74:ff:
                    60:b3:95:8f:36:08:6f:11:5a:3b:07:98:c2:3b:82:
                    a6:6f:22:35:b0:3b:37:a7:d0:66:72:1e:db:48:23:
                    5e:ab:14:0f:16:e2:06:28:0d:3c:6b:96:70:96:81:
                    2a:49:41:03:50:ef:80:c9:c6:0c:d2:c8:a2:44:46:
                    70:75:d4:4c:7e:6a:29:7c:d2:ea:97:b3:67:87:73:
                    f5:07:2c:8c:10:92:01:34:77:50:2f:aa:e2:b4:68:
                    0f:02:d9:41:7e:be:3d:21:ca:6a:b3:3a:b0:51:57:
                    db:00:9b:96:d7:38:bc:27:3c:22:36:82:4e:8b:4a:
                    24:aa:30:ea:d7:b9:f3:49:8d:cd:b1:61:ee:ef:82:
                    2b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:6A:26:39:64:2F:B3:CF:B1:DE:40:4A:1F:E6:67:98:31:2D:2F:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/1d4fcf7e-9f4a-3278-9853-04a76f355583.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:63:27:6c:42:ca:ef:54:b7:3b:05:4b:c4:87:ee:38:15:a6:
         15:3d:70:83:d0:02:8d:9c:3d:a2:a2:64:e9:ca:7c:79:27:b8:
         aa:ea:99:f5:76:c7:4c:ab:67:22:12:fb:7e:0c:da:15:7d:45:
         43:b1:4e:de:07:90:5a:25:cb:ac:a9:84:dc:8e:d7:cc:21:5e:
         ad:70:09:99:78:65:5c:dd:81:39:15:a4:ca:d1:0b:a4:cb:f8:
         97:6a:35:59:51:2a:2c:ad:08:13:69:28:95:a9:61:69:ff:82:
         5a:cf:14:8c:2b:c2:6c:9f:ca:3e:b7:e4:bd:35:34:aa:ef:c0:
         06:c1:86:fd:4b:0c:0a:60:59:90:c9:eb:f3:eb:59:35:d6:57:
         72:bb:b1:a8:98:3f:48:6f:51:49:93:26:1a:2c:c9:72:e1:5b:
         99:2d:89:91:1d:0d:1c:fa:29:7a:3f:f1:b3:11:9c:41:64:43:
         96:66:96:ee:af:2e:a0:93:28:b7:71:07:25:39:c2:3e:6c:32:
         a2:18:74:06:89:41:97:81:b8:c0:07:1f:67:d2:7d:fe:8e:a2:
         14:60:42:f4:18:23:3a:53:38:76:a5:c6:40:1f:53:65:01:e7:
         05:d5:d7:6e:18:31:15:20:7a:64:30:34:0e:46:12:ea:30:db:
         b0:52:3b:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD68jbYSCv6PuTUQJQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWQ4NzNmZjUtYzZkZS00MjhmLTk5ZWEtMTRlZWQ4YzVm
ZWRjMB4XDTIyMDcyOTEyMDAwMFoXDTIyMDkwMzA0MDAwMFowLzEtMCsGA1UEAxMk
OThkYzY4NTItYTk0MC00ODc4LTk4MmQtNTczZTcyM2QzOTI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PGjGmI2e1DTG1B3fJPYLm2L5Xvp00u+zffU
P13Mf2JXTANB1E3jSOn+XIXVqS6ryxwWucwuub3x5q1j0QT741IfjgI+FdHoANrg
FSaTwq1J2Y+E5zvpKOuxx0bMrTDZWG1KUr39QodcRgrXROsnnB4t2PEIdP9gs5WP
NghvEVo7B5jCO4KmbyI1sDs3p9Bmch7bSCNeqxQPFuIGKA08a5ZwloEqSUEDUO+A
ycYM0siiREZwddRMfmopfNLql7Nnh3P1ByyMEJIBNHdQL6ritGgPAtlBfr49Icpq
szqwUVfbAJuW1zi8JzwiNoJOi0okqjDq17nzSY3NsWHu74IrJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLpqJjlkL7PPsd5ASh/mZ5gxLS/SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3
M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVlZDhjNWZlZGMvMWQ0ZmNmN2UtOWY0YS0z
Mjc4LTk4NTMtMDRhNzZmMzU1NTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWQ4NzNmZjUtYzZkZS00MjhmLTk5
ZWEtMTRlZWQ4YzVmZWRjL2VkODczZmY1LWM2ZGUtNDI4Zi05OWVhLTE0ZWVkOGM1
ZmVkYy5jcmwwHwYDVR0jBBgwFoAUHLTMIzzDmH15qyl3uMU7Z2qmxrEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVl
ZDhjNWZlZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQETN+wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHdjJ2xCyu9UtzsFS8SH7jgVphU9cIPQAo2cPaKiZOnKfHknuKrqmfV2
x0yrZyIS+34M2hV9RUOxTt4HkFoly6yphNyO18whXq1wCZl4ZVzdgTkVpMrRC6TL
+JdqNVlRKiytCBNpKJWpYWn/glrPFIwrwmyfyj635L01NKrvwAbBhv1LDApgWZDJ
6/PrWTXWV3K7saiYP0hvUUmTJhosyXLhW5ktiZEdDRz6KXo/8bMRnEFkQ5Zmlu6v
LqCTKLdxByU5wj5sMqIYdAaJQZeBuMAHH2fSff6OohRgQvQYIzpTOHalxkAfU2UB
5wXV124YMRUgemQwNA5GEuow27BSO/Y=
-----END CERTIFICATE-----