Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/a79ed2d6-1065-3f45-83dd-9a8930a7c389.roa
File:                     a79ed2d6-1065-3f45-83dd-9a8930a7c389.roa (raw, json)
Hash identifier:          qiaUJEiMzIho09MK0m8y9OOZdtAMidpXrhGNK+CleuQ=
Subject key identifier:   29:65:A1:8A:A2:8C:15:AB:9B:B1:10:3C:94:F0:BD:0B:5C:46:CF:83
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583E447B03F47C67E2D249CCE2C0
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/a79ed2d6-1065-3f45-83dd-9a8930a7c389.roa
Signing time:             Thu 16 Jun 2022 12:00:00 +0000
ROA not before:           Thu 16 Jun 2022 12:00:00 +0000
ROA not after:            Fri 22 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        23.251.224.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:44:7b:03:f4:7c:67:e2:d2:49:cc:e2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Jun 16 12:00:00 2022 GMT
            Not After : Jul 22 04:00:00 2022 GMT
        Subject: CN=71820bc3-fbee-471d-9a3d-951fe3a88a24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ee:81:41:41:c6:f6:7f:75:a8:2f:a8:ec:d3:
                    c4:1e:fb:fb:0e:5c:22:81:cf:0b:83:42:9d:5c:8a:
                    0b:b7:c1:98:52:b1:04:63:62:54:83:0a:f7:cc:1d:
                    94:c7:85:11:98:cf:e6:13:ba:32:8f:bd:30:36:50:
                    54:09:76:57:cd:be:58:10:90:c4:f3:16:1d:36:bd:
                    a6:ff:61:e6:61:8b:f4:9b:48:22:b0:e8:d3:eb:83:
                    cc:88:86:f0:3a:41:08:ec:4a:ff:73:23:31:78:27:
                    a4:d0:89:81:4e:bd:04:32:3d:8a:ee:db:43:76:33:
                    e4:4c:3a:c0:be:43:60:40:d1:64:0f:b9:ef:17:72:
                    d6:90:92:26:2a:ab:9e:38:31:d4:18:75:a7:f8:7e:
                    f9:1d:12:22:28:ae:f6:85:2f:c8:1f:d2:f2:da:3e:
                    82:c6:b3:ba:fd:fd:fc:aa:69:5c:aa:72:2b:1f:87:
                    2a:6e:56:04:d0:15:02:0f:47:73:42:d5:f5:38:5a:
                    45:b2:5c:3b:b8:0e:e2:72:b2:62:6a:0f:6f:b9:ac:
                    cf:be:0e:d9:16:7c:1d:ff:25:40:1e:b9:c1:4e:7f:
                    2d:c1:7e:52:71:00:95:b8:ff:fd:4d:96:a7:98:10:
                    5d:ef:ee:40:c5:69:d5:9d:6a:74:68:69:71:f5:f3:
                    ad:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:65:A1:8A:A2:8C:15:AB:9B:B1:10:3C:94:F0:BD:0B:5C:46:CF:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/a79ed2d6-1065-3f45-83dd-9a8930a7c389.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:0d:99:cd:16:34:07:43:a7:5c:77:8b:e9:1a:ed:ec:ab:d3:
         d5:21:09:e9:84:16:50:c5:fc:7b:1b:a7:75:b0:a5:52:ab:26:
         5c:85:05:30:65:62:cb:cb:cc:10:d7:39:de:d4:32:15:26:f3:
         d8:83:bb:f8:01:56:34:3d:59:1e:62:c8:b9:22:b1:2d:ca:4f:
         d8:b7:b9:48:dd:00:ab:44:5c:4a:89:e8:9a:cc:d6:48:68:f1:
         af:a1:a9:65:6c:7d:9d:cc:ea:0f:6b:a3:7e:78:88:08:d2:73:
         5e:5a:e5:5b:80:01:d6:48:67:c7:90:64:97:d6:d5:c6:69:ad:
         ba:d4:21:e5:07:e2:66:01:a6:16:c9:67:f3:4b:82:92:b2:fb:
         d0:e2:96:88:93:d7:67:67:75:bf:ef:2f:a4:79:df:a1:60:90:
         27:58:81:61:7b:89:5b:7d:6d:5a:6e:af:1e:d2:ac:24:ae:71:
         a6:aa:02:9f:b9:fd:e4:be:58:fa:3e:09:dd:3d:49:50:24:c1:
         27:06:01:d0:90:b2:87:cf:3e:b9:51:e9:9e:34:c2:b7:c9:45:
         ea:5a:12:09:80:a1:8b:c5:1f:2f:38:ea:8d:71:5f:b2:98:6e:
         d4:21:bf:6c:4a:85:1f:d3:e8:48:12:45:33:66:43:80:0b:98:
         d2:17:f2:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD5EewP0fGfi0knM4sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWQ4NzNmZjUtYzZkZS00MjhmLTk5ZWEtMTRlZWQ4YzVm
ZWRjMB4XDTIyMDYxNjEyMDAwMFoXDTIyMDcyMjA0MDAwMFowLzEtMCsGA1UEAxMk
NzE4MjBiYzMtZmJlZS00NzFkLTlhM2QtOTUxZmUzYTg4YTI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+6BQUHG9n91qC+o7NPEHvv7Dlwigc8Lg0Kd
XIoLt8GYUrEEY2JUgwr3zB2Ux4URmM/mE7oyj70wNlBUCXZXzb5YEJDE8xYdNr2m
/2HmYYv0m0gisOjT64PMiIbwOkEI7Er/cyMxeCek0ImBTr0EMj2K7ttDdjPkTDrA
vkNgQNFkD7nvF3LWkJImKqueODHUGHWn+H75HRIiKK72hS/IH9Ly2j6CxrO6/f38
qmlcqnIrH4cqblYE0BUCD0dzQtX1OFpFslw7uA7icrJiag9vuazPvg7ZFnwd/yVA
HrnBTn8twX5ScQCVuP/9TZanmBBd7+5AxWnVnWp0aGlx9fOtrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFClloYqijBWrm7EQPJTwvQtcRs+DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3
M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVlZDhjNWZlZGMvYTc5ZWQyZDYtMTA2NS0z
ZjQ1LTgzZGQtOWE4OTMwYTdjMzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWQ4NzNmZjUtYzZkZS00MjhmLTk5
ZWEtMTRlZWQ4YzVmZWRjL2VkODczZmY1LWM2ZGUtNDI4Zi05OWVhLTE0ZWVkOGM1
ZmVkYy5jcmwwHwYDVR0jBBgwFoAUHLTMIzzDmH15qyl3uMU7Z2qmxrEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVl
ZDhjNWZlZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF/vgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKcNmc0WNAdDp1x3i+ka7eyr09UhCemEFlDF/Hsbp3WwpVKrJlyFBTBl
YsvLzBDXOd7UMhUm89iDu/gBVjQ9WR5iyLkisS3KT9i3uUjdAKtEXEqJ6JrM1kho
8a+hqWVsfZ3M6g9ro354iAjSc15a5VuAAdZIZ8eQZJfW1cZprbrUIeUH4mYBphbJ
Z/NLgpKy+9DiloiT12dndb/vL6R536FgkCdYgWF7iVt9bVpurx7SrCSucaaqAp+5
/eS+WPo+Cd09SVAkwScGAdCQsofPPrlR6Z40wrfJRepaEgmAoYvFHy846o1xX7KY
btQhv2xKhR/T6EgSRTNmQ4ALmNIX8mg=
-----END CERTIFICATE-----