Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/bd2f8d8c-7dc7-3436-b6d9-a489dd0005d5.roa
File:                     bd2f8d8c-7dc7-3436-b6d9-a489dd0005d5.roa (raw, json)
Hash identifier:          Y2MnQvxCsNDk5OBa089ysIGqlMkHOhOutdDZM+VD7G8=
Subject key identifier:   F0:7E:F3:70:79:BF:E5:8A:E1:CB:A1:E5:C2:ED:57:DA:00:AE:0D:80
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583C968DC6C862AD86DE95920618
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/bd2f8d8c-7dc7-3436-b6d9-a489dd0005d5.roa
Signing time:             Fri 14 Jan 2022 05:00:00 +0000
ROA not before:           Fri 14 Jan 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        76.223.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:96:8d:c6:c8:62:ad:86:de:95:92:06:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Jan 14 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2022 GMT
        Subject: CN=f46d96d6-99bb-4c83-a3db-287457bf2fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bc:a0:a7:4a:e2:a0:54:41:a0:ec:11:2d:63:
                    14:fb:bb:8a:20:1f:d9:c9:8a:f9:a3:02:79:42:37:
                    bf:61:bb:2f:b4:7f:1f:b8:97:65:a6:72:81:42:b6:
                    cc:62:80:35:2e:3f:b8:59:05:9d:d8:09:3a:53:16:
                    b7:91:e1:5f:7e:b0:2c:9f:90:f8:48:8e:8e:80:85:
                    4c:ec:9c:0e:33:09:eb:22:d4:67:3e:7f:58:fa:88:
                    86:b2:14:59:a9:a0:7b:99:69:5e:de:de:44:4c:e8:
                    7b:1a:24:be:40:0d:3a:83:13:12:54:a4:55:79:01:
                    43:06:1f:01:bb:f4:32:03:b2:8c:93:db:37:dc:a0:
                    14:b6:b6:fd:61:7b:2c:78:4c:31:b6:d1:37:84:0a:
                    fe:8c:6c:4c:5a:94:8b:72:6c:36:91:f6:53:32:b4:
                    1f:18:20:2f:80:03:4f:f2:e5:95:3b:f5:bc:b0:19:
                    ab:1e:1b:c9:c0:ae:6e:17:eb:7b:41:0e:c7:1b:17:
                    21:2d:af:62:00:78:6d:19:ef:1a:5b:60:82:fe:3e:
                    72:d7:a1:a5:c6:9e:d5:6b:72:0d:55:36:ed:53:1b:
                    87:a4:0a:9b:62:d3:fa:f0:dc:e5:d2:bc:d1:bf:4d:
                    13:fe:5d:f0:15:80:dd:b6:e8:48:93:af:ee:02:7f:
                    24:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:7E:F3:70:79:BF:E5:8A:E1:CB:A1:E5:C2:ED:57:DA:00:AE:0D:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/bd2f8d8c-7dc7-3436-b6d9-a489dd0005d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:7a:9d:2e:88:e1:3d:d0:cc:b9:79:6f:96:d8:d3:dd:ed:db:
         e7:a8:f0:7f:29:cf:c8:16:07:40:7e:6b:13:68:bb:a0:63:5c:
         83:fd:bb:7d:a2:bb:84:4c:bf:a2:16:85:07:9f:85:06:ab:eb:
         7f:b5:07:cb:eb:bc:2c:58:3b:f0:11:f3:92:f7:9b:b9:40:e3:
         a8:37:0c:4b:66:e7:36:b2:e5:b0:61:97:c8:b1:03:ef:b8:65:
         bb:3e:f2:e4:6c:e7:c6:3a:f9:04:48:88:66:1e:59:18:bf:47:
         b5:f1:d8:fd:8f:ce:f9:c2:bc:ed:ba:e8:67:25:8d:31:08:48:
         af:86:80:9b:1c:71:3a:c2:8c:b7:27:98:a6:19:57:2a:26:ce:
         38:e6:64:9b:28:4d:b0:08:4a:c2:5c:3c:1f:31:07:09:d4:2e:
         5b:fa:2d:d6:fc:54:51:d0:dc:7b:e5:48:02:f2:5d:50:97:40:
         49:c2:b3:c7:09:26:44:c4:1a:27:c1:6f:a3:d9:c4:2b:49:11:
         ac:f0:fc:8f:b0:05:20:5c:ce:43:84:62:ba:88:a8:11:73:65:
         14:1d:73:ae:6d:66:8e:60:b4:e8:b2:e1:8f:4b:bb:a8:76:e6:
         90:b1:27:03:31:ae:3b:a5:fa:78:74:d1:ca:71:5e:ae:a9:aa:
         9f:85:c6:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDyWjcbIYq2G3pWSBhgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWQ4NzNmZjUtYzZkZS00MjhmLTk5ZWEtMTRlZWQ4YzVm
ZWRjMB4XDTIyMDExNDA1MDAwMFoXDTIyMDIxODA1MDAwMFowLzEtMCsGA1UEAxMk
ZjQ2ZDk2ZDYtOTliYi00YzgzLWEzZGItMjg3NDU3YmYyZmNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobygp0rioFRBoOwRLWMU+7uKIB/ZyYr5owJ5
Qje/YbsvtH8fuJdlpnKBQrbMYoA1Lj+4WQWd2Ak6Uxa3keFffrAsn5D4SI6OgIVM
7JwOMwnrItRnPn9Y+oiGshRZqaB7mWle3t5ETOh7GiS+QA06gxMSVKRVeQFDBh8B
u/QyA7KMk9s33KAUtrb9YXsseEwxttE3hAr+jGxMWpSLcmw2kfZTMrQfGCAvgANP
8uWVO/W8sBmrHhvJwK5uF+t7QQ7HGxchLa9iAHhtGe8aW2CC/j5y16Glxp7Va3IN
VTbtUxuHpAqbYtP68Nzl0rzRv00T/l3wFYDdtuhIk6/uAn8kuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPB+83B5v+WK4cuh5cLtV9oArg2AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3
M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVlZDhjNWZlZGMvYmQyZjhkOGMtN2RjNy0z
NDM2LWI2ZDktYTQ4OWRkMDAwNWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWQ4NzNmZjUtYzZkZS00MjhmLTk5
ZWEtMTRlZWQ4YzVmZWRjL2VkODczZmY1LWM2ZGUtNDI4Zi05OWVhLTE0ZWVkOGM1
ZmVkYy5jcmwwHwYDVR0jBBgwFoAUHLTMIzzDmH15qyl3uMU7Z2qmxrEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVl
ZDhjNWZlZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQETN+wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABZ6nS6I4T3QzLl5b5bY093t2+eo8H8pz8gWB0B+axNou6BjXIP9u32i
u4RMv6IWhQefhQar63+1B8vrvCxYO/AR85L3m7lA46g3DEtm5zay5bBhl8ixA++4
Zbs+8uRs58Y6+QRIiGYeWRi/R7Xx2P2PzvnCvO266GcljTEISK+GgJsccTrCjLcn
mKYZVyomzjjmZJsoTbAISsJcPB8xBwnULlv6Ldb8VFHQ3HvlSALyXVCXQEnCs8cJ
JkTEGifBb6PZxCtJEazw/I+wBSBczkOEYrqIqBFzZRQdc65tZo5gtOiy4Y9Lu6h2
5pCxJwMxrjul+nh00cpxXq6pqp+Fxq8=
-----END CERTIFICATE-----