Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/905feb01-fa40-320e-98f1-ef25f4d7a39e.roa
File:                     905feb01-fa40-320e-98f1-ef25f4d7a39e.roa (raw, json)
Hash identifier:          6j6TXc9NgseKkAyb8YeYYIGnm+udM21WYTG0kqhKJL8=
Subject key identifier:   51:11:C9:E3:0A:BE:69:A1:BC:3A:4C:F9:F0:19:2A:6E:F1:D2:A6:D1
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583F5A93DBB726589AA58EDB9340
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/905feb01-fa40-320e-98f1-ef25f4d7a39e.roa
Signing time:             Fri 23 Sep 2022 12:00:00 +0000
ROA not before:           Fri 23 Sep 2022 12:00:00 +0000
ROA not after:            Sat 29 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        69.169.224.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:5a:93:db:b7:26:58:9a:a5:8e:db:93:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Sep 23 12:00:00 2022 GMT
            Not After : Oct 29 04:00:00 2022 GMT
        Subject: CN=46d96417-12b6-4d9e-b24e-4fe0b0b8033c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:27:18:c9:30:17:d7:94:55:69:1e:54:e5:12:
                    ee:ff:92:fd:97:f1:5d:a2:2b:ff:f6:9f:88:b4:db:
                    f7:fe:01:77:31:63:bf:50:fe:c5:ab:8d:ea:75:a1:
                    78:81:18:62:62:ce:d0:30:c5:14:f4:28:ca:97:38:
                    ff:c9:f2:d6:dc:07:a0:61:7c:bc:b9:05:91:e3:07:
                    1c:40:06:e7:6f:94:e0:6a:f3:1c:be:be:fd:52:be:
                    1f:3e:0d:a3:fc:af:dc:32:dd:45:3d:c5:a0:8e:1d:
                    03:02:e6:fb:7f:17:77:d8:e2:93:db:a8:4d:5b:1e:
                    c1:30:18:ef:d7:85:72:78:81:2d:47:f6:fd:65:f9:
                    0a:76:80:7b:67:a8:c2:7f:8b:bf:fb:f1:8a:79:ef:
                    ff:0c:e1:8c:0d:0b:03:a4:c7:ad:5d:74:dd:7d:e1:
                    a6:93:96:fd:da:c7:0f:17:ca:46:71:f9:4e:8f:92:
                    bd:62:23:b6:96:1d:4b:83:22:40:2e:79:01:74:65:
                    e4:b1:8a:65:04:bd:e4:be:58:86:be:fd:4e:f8:da:
                    0c:4d:fd:d5:06:d4:e2:9f:f1:b4:9d:36:9d:91:5c:
                    6d:2b:55:94:8d:0a:10:17:0f:b7:e1:89:f9:e7:62:
                    99:89:cc:b0:b6:50:7b:64:24:38:af:8d:56:b4:7d:
                    ae:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:11:C9:E3:0A:BE:69:A1:BC:3A:4C:F9:F0:19:2A:6E:F1:D2:A6:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/905feb01-fa40-320e-98f1-ef25f4d7a39e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.169.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:8a:d4:8d:11:36:b1:3d:94:a7:ee:6d:27:c7:af:05:7f:94:
         e5:7e:b5:e0:5e:2b:dd:1a:0d:45:58:bd:86:05:d9:fe:68:9f:
         06:01:f6:ce:cf:7e:9e:97:c2:8a:e1:83:ef:24:18:25:25:f1:
         f9:79:71:e8:2d:4d:d5:4a:81:39:1a:78:87:b9:d1:4e:a5:d3:
         d5:2a:c9:b9:db:2c:4b:96:4c:d5:c6:7f:f5:8e:13:43:f9:79:
         b1:c1:fd:57:ec:eb:14:24:6f:6f:40:41:f4:db:a1:19:e2:1c:
         e0:a8:ef:09:ef:db:2d:1c:50:48:d8:db:e1:32:f8:25:31:bd:
         48:86:2c:56:43:87:bd:6b:73:36:e3:aa:64:04:10:b7:b3:84:
         7d:7a:5e:1c:4e:32:d4:f2:29:90:df:d8:e1:a0:44:fb:2f:b0:
         47:a0:39:21:94:c5:cc:54:00:77:b7:c9:a8:fd:19:65:b2:e3:
         58:54:9c:bf:42:c3:d1:19:fc:9a:dd:74:48:db:39:92:67:da:
         6c:2c:68:ab:0c:79:7e:f9:1e:fc:94:51:8e:87:81:c3:21:fa:
         df:4f:35:2b:b3:07:5f:e0:86:d0:b5:ff:87:1f:de:dc:b1:c2:
         48:c4:b7:1a:d5:9c:1e:3e:e4:c6:77:ff:50:8c:15:5e:7e:9f:
         46:9f:f5:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD9ak9u3JliapY7bk0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWQ4NzNmZjUtYzZkZS00MjhmLTk5ZWEtMTRlZWQ4YzVm
ZWRjMB4XDTIyMDkyMzEyMDAwMFoXDTIyMTAyOTA0MDAwMFowLzEtMCsGA1UEAxMk
NDZkOTY0MTctMTJiNi00ZDllLWIyNGUtNGZlMGIwYjgwMzNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoicYyTAX15RVaR5U5RLu/5L9l/Fdoiv/9p+I
tNv3/gF3MWO/UP7Fq43qdaF4gRhiYs7QMMUU9CjKlzj/yfLW3AegYXy8uQWR4wcc
QAbnb5TgavMcvr79Ur4fPg2j/K/cMt1FPcWgjh0DAub7fxd32OKT26hNWx7BMBjv
14VyeIEtR/b9ZfkKdoB7Z6jCf4u/+/GKee//DOGMDQsDpMetXXTdfeGmk5b92scP
F8pGcflOj5K9YiO2lh1LgyJALnkBdGXksYplBL3kvliGvv1O+NoMTf3VBtTin/G0
nTadkVxtK1WUjQoQFw+34Yn552KZicywtlB7ZCQ4r41WtH2ufQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFERyeMKvmmhvDpM+fAZKm7x0qbRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3
M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVlZDhjNWZlZGMvOTA1ZmViMDEtZmE0MC0z
MjBlLTk4ZjEtZWYyNWY0ZDdhMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWQ4NzNmZjUtYzZkZS00MjhmLTk5
ZWEtMTRlZWQ4YzVmZWRjL2VkODczZmY1LWM2ZGUtNDI4Zi05OWVhLTE0ZWVkOGM1
ZmVkYy5jcmwwHwYDVR0jBBgwFoAUHLTMIzzDmH15qyl3uMU7Z2qmxrEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVl
ZDhjNWZlZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERangMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHqK1I0RNrE9lKfubSfHrwV/lOV+teBeK90aDUVYvYYF2f5onwYB9s7P
fp6Xworhg+8kGCUl8fl5cegtTdVKgTkaeIe50U6l09UqybnbLEuWTNXGf/WOE0P5
ebHB/Vfs6xQkb29AQfTboRniHOCo7wnv2y0cUEjY2+Ey+CUxvUiGLFZDh71rczbj
qmQEELezhH16XhxOMtTyKZDf2OGgRPsvsEegOSGUxcxUAHe3yaj9GWWy41hUnL9C
w9EZ/JrddEjbOZJn2mwsaKsMeX75HvyUUY6HgcMh+t9PNSuzB1/ghtC1/4cf3tyx
wkjEtxrVnB4+5MZ3/1CMFV5+n0af9XY=
-----END CERTIFICATE-----