Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/acf0bb67-a2a1-3030-9e3b-92ebc0c9552c.roa
File:                     acf0bb67-a2a1-3030-9e3b-92ebc0c9552c.roa (raw, json)
Hash identifier:          770L5hpAEqc2Qe0uMJNT3T7ivdS4/pXr2c4PWgUgcg8=
Subject key identifier:   BD:58:94:64:0E:2E:1D:59:7E:03:18:E2:5B:00:55:59:20:44:4E:24
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583DF709D6234345F3241F4ABA80
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/acf0bb67-a2a1-3030-9e3b-92ebc0c9552c.roa
Signing time:             Thu 19 May 2022 12:00:00 +0000
ROA not before:           Thu 19 May 2022 12:00:00 +0000
ROA not after:            Fri 24 Jun 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        199.255.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f7:09:d6:23:43:45:f3:24:1f:4a:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: May 19 12:00:00 2022 GMT
            Not After : Jun 24 04:00:00 2022 GMT
        Subject: CN=39490561-4ab2-4d3c-bc28-6dab104d3956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3a:8d:f0:62:ee:b8:76:88:16:f8:84:99:34:
                    58:73:a1:78:dd:5c:89:ec:0f:e6:84:3f:84:aa:71:
                    34:b1:d2:9e:d0:eb:69:5d:19:d4:76:12:86:08:32:
                    95:8c:c9:14:71:12:a2:3a:c7:64:ca:fe:7c:ae:e4:
                    ad:6b:f0:85:c6:68:78:5d:44:54:5a:b8:56:7d:ad:
                    97:81:03:69:15:29:8f:bb:fe:26:57:02:58:cf:05:
                    0c:ea:0e:60:86:f7:a8:e2:87:2c:f8:a8:02:c3:a5:
                    26:99:72:12:41:c0:5b:9c:30:0b:36:b2:09:a2:21:
                    48:35:df:41:73:9a:89:95:f4:0d:cc:ee:86:3e:f2:
                    f1:ec:7e:ad:ca:99:50:2b:38:11:c8:28:09:62:0d:
                    9b:16:65:70:91:40:14:39:8c:99:17:31:60:8d:40:
                    44:15:83:ea:00:55:35:f1:52:9c:d7:93:23:86:46:
                    16:6b:b1:30:df:92:0f:ef:b9:b8:78:1c:67:3d:70:
                    07:41:f4:d1:07:05:2a:7b:31:08:8c:94:33:fa:28:
                    8c:3c:13:17:4c:0d:18:2c:a4:1a:ce:9e:f0:f1:57:
                    95:31:af:3a:9f:9d:1c:33:d1:87:8d:aa:3f:05:75:
                    c5:b2:a0:e2:b3:b9:dc:f3:e0:de:b4:ef:bb:ec:cf:
                    9e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:58:94:64:0E:2E:1D:59:7E:03:18:E2:5B:00:55:59:20:44:4E:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/acf0bb67-a2a1-3030-9e3b-92ebc0c9552c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:03:ce:0f:53:e9:58:d2:5c:7c:0d:bd:5e:53:5b:09:ba:0e:
         b6:3a:06:93:c5:d3:b8:b1:56:b7:f0:68:4c:6d:cf:3c:f7:b8:
         42:b6:9c:66:21:10:2d:24:d4:b9:aa:8c:a5:89:e5:96:3e:32:
         5b:5d:d2:0b:ea:c9:d6:04:a3:24:27:c9:8b:f5:e8:da:e4:a0:
         a8:15:f3:b0:f2:0d:87:01:29:5c:76:98:ec:6e:7e:0a:f2:f1:
         4c:85:60:04:82:4a:b7:d3:97:a2:d8:32:a9:b3:20:7d:1f:2c:
         7c:29:c6:92:1c:a0:43:0f:f1:1c:12:22:5f:d2:67:2b:4e:4c:
         bd:a3:b9:30:2b:67:0e:49:76:2f:9d:5f:73:90:c6:83:90:c0:
         24:0e:4d:ea:c1:85:24:e4:12:16:68:bd:21:93:e9:d7:fc:42:
         5a:08:9c:a5:1c:0b:a1:5a:03:55:65:a4:eb:3f:9b:9c:ac:93:
         9f:b0:76:5d:5c:00:80:44:1d:dc:39:72:c3:f5:55:b7:54:33:
         11:b7:7e:92:56:ad:82:04:73:76:a6:ce:90:e6:92:52:02:c0:
         83:5c:8a:59:d5:08:0d:df:ed:a1:b5:bf:39:44:c2:0c:04:11:
         a2:a8:4b:6c:c0:f7:91:43:77:ad:0e:7f:81:b5:17:a8:76:90:
         05:01:fc:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD33CdYjQ0XzJB9KuoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWQ4NzNmZjUtYzZkZS00MjhmLTk5ZWEtMTRlZWQ4YzVm
ZWRjMB4XDTIyMDUxOTEyMDAwMFoXDTIyMDYyNDA0MDAwMFowLzEtMCsGA1UEAxMk
Mzk0OTA1NjEtNGFiMi00ZDNjLWJjMjgtNmRhYjEwNGQzOTU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljqN8GLuuHaIFviEmTRYc6F43VyJ7A/mhD+E
qnE0sdKe0OtpXRnUdhKGCDKVjMkUcRKiOsdkyv58ruSta/CFxmh4XURUWrhWfa2X
gQNpFSmPu/4mVwJYzwUM6g5ghveo4ocs+KgCw6UmmXISQcBbnDALNrIJoiFINd9B
c5qJlfQNzO6GPvLx7H6typlQKzgRyCgJYg2bFmVwkUAUOYyZFzFgjUBEFYPqAFU1
8VKc15MjhkYWa7Ew35IP77m4eBxnPXAHQfTRBwUqezEIjJQz+iiMPBMXTA0YLKQa
zp7w8VeVMa86n50cM9GHjao/BXXFsqDis7nc8+DetO+77M+ehwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL1YlGQOLh1ZfgMY4lsAVVkgRE4kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3
M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVlZDhjNWZlZGMvYWNmMGJiNjctYTJhMS0z
MDMwLTllM2ItOTJlYmMwYzk1NTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWQ4NzNmZjUtYzZkZS00MjhmLTk5
ZWEtMTRlZWQ4YzVmZWRjL2VkODczZmY1LWM2ZGUtNDI4Zi05OWVhLTE0ZWVkOGM1
ZmVkYy5jcmwwHwYDVR0jBBgwFoAUHLTMIzzDmH15qyl3uMU7Z2qmxrEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVl
ZDhjNWZlZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx//AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADcDzg9T6VjSXHwNvV5TWwm6DrY6BpPF07ixVrfwaExtzzz3uEK2nGYh
EC0k1LmqjKWJ5ZY+Mltd0gvqydYEoyQnyYv16NrkoKgV87DyDYcBKVx2mOxufgry
8UyFYASCSrfTl6LYMqmzIH0fLHwpxpIcoEMP8RwSIl/SZytOTL2juTArZw5Jdi+d
X3OQxoOQwCQOTerBhSTkEhZovSGT6df8QloInKUcC6FaA1VlpOs/m5ysk5+wdl1c
AIBEHdw5csP1VbdUMxG3fpJWrYIEc3amzpDmklICwINcilnVCA3f7aG1vzlEwgwE
EaKoS2zA95FDd60Of4G1F6h2kAUB/H4=
-----END CERTIFICATE-----