Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/6bfed0e6-8456-3779-8e34-35714c1c84eb.roa
File:                     6bfed0e6-8456-3779-8e34-35714c1c84eb.roa (raw, json)
Hash identifier:          riKnFhNLl8tRT6QHw0JBVE7WqLl4mlsPHTuBjIUYN5U=
Subject key identifier:   61:B6:64:08:AA:F5:04:41:83:65:83:1B:B0:E9:AB:18:23:41:64:90
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583D5A1EABEAD741774B38867A00
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/6bfed0e6-8456-3779-8e34-35714c1c84eb.roa
Signing time:             Fri 25 Mar 2022 04:00:00 +0000
ROA not before:           Fri 25 Mar 2022 04:00:00 +0000
ROA not after:            Fri 29 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        76.223.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:5a:1e:ab:ea:d7:41:77:4b:38:86:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Mar 25 04:00:00 2022 GMT
            Not After : Apr 29 04:00:00 2022 GMT
        Subject: CN=1a62b7ec-12e2-4324-9ff6-d3c4c963956b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:55:45:08:87:f6:08:8e:75:23:9f:6d:64:d8:
                    67:18:57:bc:1d:c2:07:40:55:1b:34:1c:a1:57:b0:
                    4c:e7:1c:79:fd:59:4c:01:7e:24:b6:22:44:9d:6f:
                    69:a5:2a:5f:de:e4:2a:53:73:7b:fb:91:65:a8:59:
                    68:df:f6:74:ae:b5:32:cf:bc:84:89:12:39:aa:11:
                    58:f7:6e:bf:a1:43:31:fa:e0:f3:7a:92:10:de:f3:
                    42:d2:e4:df:5c:cb:52:90:7c:a2:eb:9d:88:c2:8e:
                    4a:91:d3:f1:bf:d3:69:1f:f8:67:61:9b:b5:ba:cd:
                    6b:eb:e2:bd:ca:16:cb:d6:1d:62:98:07:12:00:d8:
                    8d:83:3d:29:8b:6f:52:0e:ef:dd:03:b4:36:1f:18:
                    db:ac:74:63:ff:a2:26:34:20:e4:c6:01:45:c7:b4:
                    b8:a4:17:75:4f:bc:b8:a7:63:04:47:3b:3e:4b:50:
                    a5:8f:25:86:1f:87:91:52:5c:9a:5e:6a:54:80:98:
                    4f:c7:0c:c7:22:5f:c4:f8:4e:8e:3b:28:0f:ce:65:
                    6a:b2:ce:b5:73:9a:a6:fe:eb:f3:4c:fa:e8:4b:ca:
                    62:28:ac:15:b6:0e:e3:ec:12:3b:3f:e9:93:3c:1d:
                    22:18:ff:30:2f:0f:0d:ec:ab:60:06:09:90:0e:33:
                    6d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B6:64:08:AA:F5:04:41:83:65:83:1B:B0:E9:AB:18:23:41:64:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/6bfed0e6-8456-3779-8e34-35714c1c84eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:dd:dd:44:51:d8:e5:62:22:b5:4e:8a:b4:32:dd:c9:28:1b:
         1e:b3:89:f1:61:56:77:f4:eb:45:d4:25:7f:87:8e:40:11:2b:
         a1:19:b5:e9:46:be:2f:78:db:19:4d:61:9c:fa:fe:cf:ec:bd:
         5f:aa:2d:38:0a:e9:e8:91:15:48:82:49:a0:18:da:4c:c3:db:
         3a:76:25:93:ed:c8:c4:23:9e:de:f2:8d:40:8e:bf:31:11:16:
         5a:0e:f8:ad:78:0e:a2:14:84:68:b9:5f:c7:5a:5d:c4:1c:3f:
         82:50:7c:5d:a4:65:0b:19:ed:54:ca:ab:d6:99:48:54:79:be:
         0d:3e:df:ec:b2:30:e2:6c:11:85:0d:0c:21:9b:5c:ac:9f:c0:
         be:ad:f5:b9:af:14:95:11:69:13:4b:c0:6d:ce:24:b6:b9:b0:
         3d:dc:a7:f5:24:91:76:77:91:ae:ca:bf:f4:84:a2:54:4b:49:
         f4:d1:61:13:cd:40:85:bc:54:91:b7:c1:ca:4e:15:f0:b2:5b:
         6c:15:c4:e9:25:03:8d:01:59:1f:29:ad:71:b3:85:be:53:09:
         e8:ca:a0:ee:de:1b:45:d8:2f:51:9c:0d:2d:5f:79:0d:71:b8:
         b3:c5:2e:af:19:06:de:6a:91:59:c3:68:a5:92:e2:8f:78:4a:
         5a:00:09:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1aHqvq10F3SziGegAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWQ4NzNmZjUtYzZkZS00MjhmLTk5ZWEtMTRlZWQ4YzVm
ZWRjMB4XDTIyMDMyNTA0MDAwMFoXDTIyMDQyOTA0MDAwMFowLzEtMCsGA1UEAxMk
MWE2MmI3ZWMtMTJlMi00MzI0LTlmZjYtZDNjNGM5NjM5NTZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lVFCIf2CI51I59tZNhnGFe8HcIHQFUbNByh
V7BM5xx5/VlMAX4ktiJEnW9ppSpf3uQqU3N7+5FlqFlo3/Z0rrUyz7yEiRI5qhFY
926/oUMx+uDzepIQ3vNC0uTfXMtSkHyi652Iwo5KkdPxv9NpH/hnYZu1us1r6+K9
yhbL1h1imAcSANiNgz0pi29SDu/dA7Q2HxjbrHRj/6ImNCDkxgFFx7S4pBd1T7y4
p2MERzs+S1CljyWGH4eRUlyaXmpUgJhPxwzHIl/E+E6OOygPzmVqss61c5qm/uvz
TProS8piKKwVtg7j7BI7P+mTPB0iGP8wLw8N7KtgBgmQDjNtLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGG2ZAiq9QRBg2WDG7DpqxgjQWSQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3
M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVlZDhjNWZlZGMvNmJmZWQwZTYtODQ1Ni0z
Nzc5LThlMzQtMzU3MTRjMWM4NGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWQ4NzNmZjUtYzZkZS00MjhmLTk5
ZWEtMTRlZWQ4YzVmZWRjL2VkODczZmY1LWM2ZGUtNDI4Zi05OWVhLTE0ZWVkOGM1
ZmVkYy5jcmwwHwYDVR0jBBgwFoAUHLTMIzzDmH15qyl3uMU7Z2qmxrEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVl
ZDhjNWZlZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQETN+wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG3d3URR2OViIrVOirQy3ckoGx6zifFhVnf060XUJX+HjkARK6EZtelG
vi942xlNYZz6/s/svV+qLTgK6eiRFUiCSaAY2kzD2zp2JZPtyMQjnt7yjUCOvzER
FloO+K14DqIUhGi5X8daXcQcP4JQfF2kZQsZ7VTKq9aZSFR5vg0+3+yyMOJsEYUN
DCGbXKyfwL6t9bmvFJURaRNLwG3OJLa5sD3cp/UkkXZ3ka7Kv/SEolRLSfTRYRPN
QIW8VJG3wcpOFfCyW2wVxOklA40BWR8prXGzhb5TCejKoO7eG0XYL1GcDS1feQ1x
uLPFLq8ZBt5qkVnDaKWS4o94SloACTA=
-----END CERTIFICATE-----