Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/28c25e06-625b-3f8c-a3f6-b3b898606bbf.roa
File:                     28c25e06-625b-3f8c-a3f6-b3b898606bbf.roa (raw, json)
Hash identifier:          ZhqQUtBQ8WxCozMXUXhHG+yxEuOOw8qJmmdlB9ayQ6k=
Subject key identifier:   73:18:89:44:AE:49:E0:D0:0D:0F:69:1F:62:78:B8:C2:54:9C:74:D3
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583D813BBEF06995934AB5AD0780
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/28c25e06-625b-3f8c-a3f6-b3b898606bbf.roa
Signing time:             Fri 08 Apr 2022 04:00:00 +0000
ROA not before:           Fri 08 Apr 2022 04:00:00 +0000
ROA not after:            Fri 13 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        76.223.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:81:3b:be:f0:69:95:93:4a:b5:ad:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Apr  8 04:00:00 2022 GMT
            Not After : May 13 04:00:00 2022 GMT
        Subject: CN=8c60bb11-6f2d-4ef1-9931-a7a0925466b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d2:54:07:0c:fc:3b:2b:bf:be:19:42:05:f8:
                    54:9d:6a:eb:88:58:3e:ee:33:e7:c6:f2:c4:b8:25:
                    f1:ca:0d:ad:55:75:22:3e:cf:58:55:21:20:4a:b3:
                    76:49:2a:d7:3f:6c:31:40:e7:01:b7:a9:8e:65:36:
                    3c:96:66:0d:4a:50:25:83:b4:e3:25:1f:8d:b5:36:
                    52:81:d4:a8:f5:ea:76:89:29:6e:a7:35:78:ef:83:
                    20:c5:7d:5a:d7:55:5f:69:08:d7:e0:7a:80:3f:29:
                    86:de:43:b7:ab:19:3a:d0:d5:52:5e:29:a4:21:e7:
                    bb:f9:1e:42:1e:8f:0c:c2:95:3b:a1:10:94:d3:1e:
                    2c:f3:0b:d8:ac:18:3e:71:38:4d:90:01:69:05:c2:
                    4c:f0:7f:c0:fb:b6:dc:d3:ae:6a:f5:53:f4:78:e6:
                    dc:1b:5f:98:80:2a:55:bc:3b:d3:e4:18:b4:31:4e:
                    a7:f3:10:61:ab:d7:69:a2:dc:d4:5e:ac:69:0d:13:
                    70:9d:74:e2:6b:24:28:0e:2c:2d:c2:e1:dd:b8:f6:
                    44:71:2f:93:08:81:d8:36:bd:f7:69:f9:16:18:96:
                    77:c8:b3:04:30:91:a0:c9:eb:99:61:80:54:64:d7:
                    52:6e:f2:b2:b8:7c:35:d4:07:67:7e:3c:a1:da:d2:
                    3c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:18:89:44:AE:49:E0:D0:0D:0F:69:1F:62:78:B8:C2:54:9C:74:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/28c25e06-625b-3f8c-a3f6-b3b898606bbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:ce:3e:95:36:16:6f:f1:e0:bc:4f:fb:8d:aa:95:7f:84:67:
         f7:24:9b:29:ce:20:a6:43:07:2c:7d:98:2e:73:39:b8:ca:1a:
         ab:48:b3:da:4a:ec:55:2b:44:45:e2:16:12:14:0e:dc:41:af:
         d2:cf:99:8e:74:f2:e0:30:24:93:4f:cb:71:0c:f9:1c:19:22:
         71:c5:a3:15:17:dd:26:e9:ce:2a:a1:b2:4f:4f:c4:b1:2c:40:
         63:b1:71:93:03:80:05:b5:1c:96:29:98:39:9e:7c:53:2a:58:
         ea:e6:35:14:ef:99:43:66:de:90:82:85:ae:0c:d5:d5:8e:53:
         e5:36:40:59:51:69:56:03:a8:d5:61:b7:3a:95:49:be:24:b3:
         7b:2f:ac:1b:a1:73:f5:4f:8d:8b:be:58:8d:e7:9c:1d:0b:1e:
         9a:5f:ea:31:5b:3a:87:7b:31:58:47:bf:74:56:fd:f3:4d:ea:
         e8:8c:90:33:f1:5e:84:39:06:d4:d9:18:e1:67:22:2b:76:6b:
         b3:0f:c7:27:7f:e8:48:88:ca:fe:2e:9c:e9:02:2b:ea:06:be:
         fa:49:ac:65:16:12:92:0d:92:29:d7:17:57:58:0c:bb:6b:61:
         e4:77:14:2b:d0:29:71:6d:0f:6e:86:64:5d:6d:9d:76:6c:8d:
         23:8b:e4:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD2BO77waZWTSrWtB4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWQ4NzNmZjUtYzZkZS00MjhmLTk5ZWEtMTRlZWQ4YzVm
ZWRjMB4XDTIyMDQwODA0MDAwMFoXDTIyMDUxMzA0MDAwMFowLzEtMCsGA1UEAxMk
OGM2MGJiMTEtNmYyZC00ZWYxLTk5MzEtYTdhMDkyNTQ2NmIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNJUBwz8Oyu/vhlCBfhUnWrriFg+7jPnxvLE
uCXxyg2tVXUiPs9YVSEgSrN2SSrXP2wxQOcBt6mOZTY8lmYNSlAlg7TjJR+NtTZS
gdSo9ep2iSlupzV474MgxX1a11VfaQjX4HqAPymG3kO3qxk60NVSXimkIee7+R5C
Ho8MwpU7oRCU0x4s8wvYrBg+cThNkAFpBcJM8H/A+7bc065q9VP0eObcG1+YgCpV
vDvT5Bi0MU6n8xBhq9dpotzUXqxpDRNwnXTiayQoDiwtwuHduPZEcS+TCIHYNr33
afkWGJZ3yLMEMJGgyeuZYYBUZNdSbvKyuHw11Adnfjyh2tI8AwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHMYiUSuSeDQDQ9pH2J4uMJUnHTTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3
M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVlZDhjNWZlZGMvMjhjMjVlMDYtNjI1Yi0z
ZjhjLWEzZjYtYjNiODk4NjA2YmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWQ4NzNmZjUtYzZkZS00MjhmLTk5
ZWEtMTRlZWQ4YzVmZWRjL2VkODczZmY1LWM2ZGUtNDI4Zi05OWVhLTE0ZWVkOGM1
ZmVkYy5jcmwwHwYDVR0jBBgwFoAUHLTMIzzDmH15qyl3uMU7Z2qmxrEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVl
ZDhjNWZlZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQETN+wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADTOPpU2Fm/x4LxP+42qlX+EZ/ckmynOIKZDByx9mC5zObjKGqtIs9pK
7FUrREXiFhIUDtxBr9LPmY508uAwJJNPy3EM+RwZInHFoxUX3Sbpziqhsk9PxLEs
QGOxcZMDgAW1HJYpmDmefFMqWOrmNRTvmUNm3pCCha4M1dWOU+U2QFlRaVYDqNVh
tzqVSb4ks3svrBuhc/VPjYu+WI3nnB0LHppf6jFbOod7MVhHv3RW/fNN6uiMkDPx
XoQ5BtTZGOFnIit2a7MPxyd/6EiIyv4unOkCK+oGvvpJrGUWEpINkinXF1dYDLtr
YeR3FCvQKXFtD26GZF1tnXZsjSOL5EA=
-----END CERTIFICATE-----