Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/801728ff-c432-3a59-aea0-cf42c8659654.roa
File:                     801728ff-c432-3a59-aea0-cf42c8659654.roa (raw, json)
Hash identifier:          aDs3RBAnh4WRw7czpROXlBTLnh+dkxjZ00UU86XkoSY=
Subject key identifier:   28:2D:12:1A:74:C8:42:E7:03:EE:95:D6:4C:A1:29:4F:7F:A0:AC:6E
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328584043EB8C1E155F291B7980D580
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/801728ff-c432-3a59-aea0-cf42c8659654.roa
Signing time:             Fri 16 Dec 2022 12:00:00 +0000
ROA not before:           Fri 16 Dec 2022 12:00:00 +0000
ROA not after:            Sat 21 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        76.223.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:43:eb:8c:1e:15:5f:29:1b:79:80:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Dec 16 12:00:00 2022 GMT
            Not After : Jan 21 05:00:00 2023 GMT
        Subject: CN=1d8b1f94-a667-499f-8c10-2d70ba678da9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a0:8b:62:54:40:7a:06:31:e3:7c:b3:a7:94:
                    d0:a4:35:ef:95:42:e4:87:81:6d:e9:04:71:29:fb:
                    ae:af:b4:5e:46:26:e9:ba:eb:43:09:94:46:3d:97:
                    01:38:8e:5c:ce:06:cc:49:f1:44:14:dc:84:ca:41:
                    90:1c:42:cd:31:ae:ec:be:9e:49:c7:f0:52:12:4a:
                    93:89:84:11:ec:ec:8d:04:5a:f9:6e:5f:d6:92:d7:
                    1c:db:6b:13:28:81:87:86:8e:ca:bf:01:41:32:3c:
                    b7:68:7e:45:11:68:5a:b8:0d:ab:ef:91:f7:b7:70:
                    d9:87:bb:67:17:f5:e4:c7:77:31:52:7c:67:bc:65:
                    4c:85:3a:de:12:53:c2:97:6c:e2:25:a8:b0:c1:5e:
                    81:30:77:e3:b6:80:3d:cc:e6:e9:bc:7a:6b:7f:56:
                    0e:c0:82:87:0d:c3:53:f0:ae:0a:b5:79:3c:42:73:
                    6d:df:bf:71:b0:1a:0f:11:3c:17:08:f5:06:d7:15:
                    ce:12:4b:c0:12:85:65:93:8f:17:75:a0:b3:a9:13:
                    e2:77:c0:1c:78:da:0e:2e:68:1c:19:9d:7d:c7:42:
                    26:0a:18:62:23:2b:ba:7f:c3:00:34:5b:e1:db:80:
                    3f:57:b1:2f:19:2d:6f:1a:71:f7:ae:6f:74:7a:ca:
                    53:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:2D:12:1A:74:C8:42:E7:03:EE:95:D6:4C:A1:29:4F:7F:A0:AC:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/801728ff-c432-3a59-aea0-cf42c8659654.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:e3:09:25:19:a0:58:ee:2f:1d:ac:b3:6a:ce:75:bb:77:64:
         22:9f:b1:e4:b3:30:41:c7:a8:37:45:d0:41:fd:d1:07:57:4d:
         99:88:2f:18:8f:4d:84:67:82:10:db:e4:c3:72:36:98:f3:e5:
         f8:fc:ac:68:6e:f0:04:56:75:92:0f:bc:c3:dc:8d:93:b7:fe:
         83:52:88:a7:76:88:9a:20:43:21:5b:cf:bb:b3:94:35:0a:d2:
         27:0b:0b:7e:b2:9c:61:1c:41:15:06:0a:75:97:9f:c2:14:0c:
         cb:43:8f:31:74:c6:96:89:27:b0:54:1c:39:d8:6b:cf:06:73:
         03:6c:16:42:0b:04:97:7e:93:97:3d:c9:bc:cd:d2:a1:14:4b:
         6a:7f:e6:03:c4:c2:82:93:7a:68:99:9c:16:92:08:89:f1:fe:
         52:ea:62:d8:7b:db:00:11:c6:bc:a9:ed:ff:b5:90:84:34:6c:
         50:ab:dc:23:c8:bf:f1:f6:a0:ca:fe:3a:ed:8e:ed:13:61:e8:
         b3:2b:9b:5d:03:1c:24:c0:c2:7d:fd:42:9d:23:02:95:aa:9f:
         aa:b0:aa:8d:b9:de:91:d1:3b:23:7b:35:46:d5:e0:1e:a2:20:
         bf:b0:07:fc:55:a5:0d:e4:88:c0:19:b9:64:96:51:73:08:9d:
         ed:9d:88:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEBD64weFV8pG3mA1YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWQ4NzNmZjUtYzZkZS00MjhmLTk5ZWEtMTRlZWQ4YzVm
ZWRjMB4XDTIyMTIxNjEyMDAwMFoXDTIzMDEyMTA1MDAwMFowLzEtMCsGA1UEAxMk
MWQ4YjFmOTQtYTY2Ny00OTlmLThjMTAtMmQ3MGJhNjc4ZGE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KCLYlRAegYx43yzp5TQpDXvlULkh4Ft6QRx
Kfuur7ReRibpuutDCZRGPZcBOI5czgbMSfFEFNyEykGQHELNMa7svp5Jx/BSEkqT
iYQR7OyNBFr5bl/Wktcc22sTKIGHho7KvwFBMjy3aH5FEWhauA2r75H3t3DZh7tn
F/Xkx3cxUnxnvGVMhTreElPCl2ziJaiwwV6BMHfjtoA9zObpvHprf1YOwIKHDcNT
8K4KtXk8QnNt379xsBoPETwXCPUG1xXOEkvAEoVlk48XdaCzqRPid8AceNoOLmgc
GZ19x0ImChhiIyu6f8MANFvh24A/V7EvGS1vGnH3rm90espT1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCgtEhp0yELnA+6V1kyhKU9/oKxuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3
M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVlZDhjNWZlZGMvODAxNzI4ZmYtYzQzMi0z
YTU5LWFlYTAtY2Y0MmM4NjU5NjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWQ4NzNmZjUtYzZkZS00MjhmLTk5
ZWEtMTRlZWQ4YzVmZWRjL2VkODczZmY1LWM2ZGUtNDI4Zi05OWVhLTE0ZWVkOGM1
ZmVkYy5jcmwwHwYDVR0jBBgwFoAUHLTMIzzDmH15qyl3uMU7Z2qmxrEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVl
ZDhjNWZlZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQETN+wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACzjCSUZoFjuLx2ss2rOdbt3ZCKfseSzMEHHqDdF0EH90QdXTZmILxiP
TYRnghDb5MNyNpjz5fj8rGhu8ARWdZIPvMPcjZO3/oNSiKd2iJogQyFbz7uzlDUK
0icLC36ynGEcQRUGCnWXn8IUDMtDjzF0xpaJJ7BUHDnYa88GcwNsFkILBJd+k5c9
ybzN0qEUS2p/5gPEwoKTemiZnBaSCInx/lLqYth72wARxryp7f+1kIQ0bFCr3CPI
v/H2oMr+Ou2O7RNh6LMrm10DHCTAwn39Qp0jApWqn6qwqo253pHROyN7NUbV4B6i
IL+wB/xVpQ3kiMAZuWSWUXMIne2diFo=
-----END CERTIFICATE-----