Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/8f7cb77d-69af-3847-b662-0b6581bd612d.roa
File:                     8f7cb77d-69af-3847-b662-0b6581bd612d.roa (raw, json)
Hash identifier:          Eyn6e9DhRZRy3JY+p9xsqyMXbbzaoblZIb/A6NBR7Ok=
Subject key identifier:   9B:2B:74:A3:5E:8E:2A:E6:79:83:65:1F:40:E7:5A:09:B6:F3:42:40
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583EE1B7DE670898A5D9CB13E4C0
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/8f7cb77d-69af-3847-b662-0b6581bd612d.roa
Signing time:             Thu 11 Aug 2022 12:00:00 +0000
ROA not before:           Thu 11 Aug 2022 12:00:00 +0000
ROA not after:            Fri 16 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        199.255.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e1:b7:de:67:08:98:a5:d9:cb:13:e4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Aug 11 12:00:00 2022 GMT
            Not After : Sep 16 04:00:00 2022 GMT
        Subject: CN=6f78fb0e-350e-4ba1-a772-53462efff30f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0c:0b:12:3e:df:6d:ae:7d:fc:1f:79:c4:e0:
                    29:b5:9a:87:b0:c4:b9:2f:b4:e2:ab:64:ff:6e:6d:
                    3c:f9:06:f8:65:55:d5:68:2a:16:4d:2e:05:10:8f:
                    db:e5:36:44:14:5d:66:50:8d:4a:be:09:31:c9:2d:
                    a1:d7:cf:f7:c6:ad:e5:12:d3:33:5f:3f:c6:ad:1d:
                    b0:9c:cd:30:9b:84:14:a5:76:d7:45:dc:9b:fc:46:
                    9c:b9:cd:72:3d:ab:95:0e:b0:13:b7:5f:09:8f:5f:
                    a0:98:e2:19:7a:63:3e:a8:35:5e:0a:47:0f:94:2f:
                    d9:a3:87:4c:93:af:4b:9e:6b:ad:90:03:51:77:c8:
                    a6:76:b8:5b:12:b4:91:50:19:b9:f4:b7:b9:8c:94:
                    13:8c:a3:bb:ee:e7:69:6a:7f:87:16:44:26:95:b7:
                    68:6e:a1:2b:45:cf:31:17:ee:2f:7b:75:42:3b:fd:
                    4d:6b:f6:c3:3f:a5:6a:55:a9:e7:7a:f0:dc:6d:bf:
                    0b:e1:da:54:73:e2:aa:10:c9:3e:2a:66:e0:1d:72:
                    65:c7:5a:94:30:cc:5a:9c:d2:51:e6:15:17:bb:b6:
                    f7:77:72:23:e1:e4:af:26:71:11:83:ea:5d:fe:ca:
                    ec:cf:3f:53:38:b9:a2:99:19:ef:d2:d6:a2:3e:85:
                    64:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:2B:74:A3:5E:8E:2A:E6:79:83:65:1F:40:E7:5A:09:B6:F3:42:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/8f7cb77d-69af-3847-b662-0b6581bd612d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:38:50:d1:90:44:53:f2:23:22:9a:74:9d:1b:00:c9:6e:75:
         69:97:98:b9:3a:40:66:d8:f1:6f:21:8d:97:a4:67:ae:6d:c4:
         32:5a:8b:64:1a:35:c5:9c:a1:60:07:26:bf:8e:58:86:56:f1:
         62:0d:6e:e0:85:88:30:51:d2:c0:17:f2:ce:73:07:31:15:de:
         f0:02:44:83:92:d6:a2:fd:bd:e9:f8:f3:2b:0e:6d:89:61:b1:
         11:46:e7:cd:4c:4c:12:f7:29:a3:c2:fc:44:57:b9:37:73:c4:
         53:7c:09:98:82:83:be:1b:e9:eb:45:47:2b:73:50:d3:79:ed:
         1d:0c:4e:72:42:5e:2f:84:a1:2f:fb:1d:87:12:aa:03:97:5b:
         15:7a:f3:df:e7:77:76:5e:24:a3:49:22:62:34:99:0e:89:15:
         f0:52:35:3f:9a:7a:6f:c0:e9:50:3b:fb:3a:c5:c2:02:2e:4b:
         eb:39:08:b1:65:83:6c:fd:86:1c:ed:86:b7:e4:cf:31:49:21:
         f6:94:79:23:96:4d:54:3c:dd:d4:e1:37:cb:99:2d:96:3c:63:
         26:44:18:91:bd:97:84:cf:aa:e5:34:b7:b8:e1:6b:df:52:0e:
         ad:4a:65:d2:81:0b:40:6b:4d:d9:85:d7:81:be:fa:25:4c:58:
         b5:d6:28:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD7ht95nCJil2csT5MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWQ4NzNmZjUtYzZkZS00MjhmLTk5ZWEtMTRlZWQ4YzVm
ZWRjMB4XDTIyMDgxMTEyMDAwMFoXDTIyMDkxNjA0MDAwMFowLzEtMCsGA1UEAxMk
NmY3OGZiMGUtMzUwZS00YmExLWE3NzItNTM0NjJlZmZmMzBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwwLEj7fba59/B95xOAptZqHsMS5L7Tiq2T/
bm08+Qb4ZVXVaCoWTS4FEI/b5TZEFF1mUI1KvgkxyS2h18/3xq3lEtMzXz/GrR2w
nM0wm4QUpXbXRdyb/Eacuc1yPauVDrATt18Jj1+gmOIZemM+qDVeCkcPlC/Zo4dM
k69LnmutkANRd8imdrhbErSRUBm59Le5jJQTjKO77udpan+HFkQmlbdobqErRc8x
F+4ve3VCO/1Na/bDP6VqVannevDcbb8L4dpUc+KqEMk+KmbgHXJlx1qUMMxanNJR
5hUXu7b3d3Ij4eSvJnERg+pd/srszz9TOLmimRnv0taiPoVkmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJsrdKNejirmeYNlH0DnWgm280JAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3
M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVlZDhjNWZlZGMvOGY3Y2I3N2QtNjlhZi0z
ODQ3LWI2NjItMGI2NTgxYmQ2MTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWQ4NzNmZjUtYzZkZS00MjhmLTk5
ZWEtMTRlZWQ4YzVmZWRjL2VkODczZmY1LWM2ZGUtNDI4Zi05OWVhLTE0ZWVkOGM1
ZmVkYy5jcmwwHwYDVR0jBBgwFoAUHLTMIzzDmH15qyl3uMU7Z2qmxrEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVl
ZDhjNWZlZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx//AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA84UNGQRFPyIyKadJ0bAMludWmXmLk6QGbY8W8hjZekZ65txDJai2Qa
NcWcoWAHJr+OWIZW8WINbuCFiDBR0sAX8s5zBzEV3vACRIOS1qL9ven48ysObYlh
sRFG581MTBL3KaPC/ERXuTdzxFN8CZiCg74b6etFRytzUNN57R0MTnJCXi+EoS/7
HYcSqgOXWxV689/nd3ZeJKNJImI0mQ6JFfBSNT+aem/A6VA7+zrFwgIuS+s5CLFl
g2z9hhzthrfkzzFJIfaUeSOWTVQ83dThN8uZLZY8YyZEGJG9l4TPquU0t7jha99S
Dq1KZdKBC0BrTdmF14G++iVMWLXWKDE=
-----END CERTIFICATE-----