Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/1a2c7d9d-981d-3206-9509-b001cc4af525.roa
File:                     1a2c7d9d-981d-3206-9509-b001cc4af525.roa (raw, json)
Hash identifier:          01qBi2W1z035FFnmKePOS/4eoTQDW0+x7eVhXzxIluQ=
Subject key identifier:   23:9D:7A:1A:DF:25:88:01:36:B8:35:A4:10:7E:7D:52:02:36:7A:B8
Certificate issuer:       /CN=c097bbd1-dde1-4ee5-a727-5ee45da69052
Certificate serial:       010D0C9F4328583FA25BA12B9BE003E6403E3CE0
Authority key identifier: 24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/1a2c7d9d-981d-3206-9509-b001cc4af525.roa
Signing time:             Wed 29 Sep 2021 20:03:54 +0000
ROA not before:           Wed 29 Sep 2021 20:03:54 +0000
ROA not after:            Wed 22 Jan 2025 05:00:00 +0000
asID:                     996
IP address blocks:        157.254.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a2:5b:a1:2b:9b:e0:03:e6:40:3e:3c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c097bbd1-dde1-4ee5-a727-5ee45da69052
        Validity
            Not Before: Sep 29 20:03:54 2021 GMT
            Not After : Jan 22 05:00:00 2025 GMT
        Subject: CN=13dcf0b1-5670-4174-b766-9e530c5668ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d1:d3:56:d7:fb:1e:b7:2f:31:6c:04:13:81:
                    2f:d5:a7:7e:a8:68:78:d5:cf:72:d5:4d:d9:4a:be:
                    b1:40:d4:c1:1a:42:79:50:a3:37:62:fc:2f:45:9c:
                    a7:9b:6d:59:07:c4:8f:89:5b:80:ca:f6:59:3a:ff:
                    b1:36:b8:78:38:20:91:56:cf:ed:60:c1:05:f8:07:
                    ab:23:2b:81:0e:a8:00:88:3c:f9:52:aa:00:eb:4c:
                    95:75:21:98:69:7a:7c:0c:44:79:57:15:1d:a1:73:
                    8b:c2:06:c2:32:60:86:d8:c4:61:d2:a7:e7:3e:67:
                    ff:93:57:f1:ec:d5:66:03:2d:44:dd:d3:73:b4:05:
                    3c:ca:36:08:ed:06:f8:9c:ca:0a:35:89:71:9c:ca:
                    91:66:d5:12:b9:0a:02:0c:6f:33:4a:fe:03:d2:5c:
                    a7:df:6f:ea:7c:5b:44:ca:aa:f6:a0:6a:7f:df:57:
                    47:0c:a9:10:51:08:f3:05:0d:c5:3f:03:ce:6b:fd:
                    e0:2a:99:60:35:b7:24:f4:c6:a9:57:5a:29:60:59:
                    a5:92:62:2f:56:a6:69:76:bf:32:0b:a7:6f:16:c9:
                    fa:9f:68:20:3d:23:25:d3:dd:cb:42:ab:d3:94:4d:
                    42:56:78:ab:fd:fe:3b:31:47:a3:87:e0:5b:05:38:
                    e9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:9D:7A:1A:DF:25:88:01:36:B8:35:A4:10:7E:7D:52:02:36:7A:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/1a2c7d9d-981d-3206-9509-b001cc4af525.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/c097bbd1-dde1-4ee5-a727-5ee45da69052.crl

            X509v3 Authority Key Identifier:
                keyid:24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:37:bd:45:27:c9:85:64:4f:3b:77:0d:da:4c:e5:ac:7d:0b:
         d0:13:2d:05:a1:47:93:20:8f:0b:1d:fe:b1:36:ad:e8:d4:d7:
         63:1d:ae:ee:1f:2e:74:a8:59:ac:6a:c1:ae:f8:71:d5:07:c9:
         2d:08:c4:e9:91:80:f4:c0:7d:f6:25:d5:85:44:61:86:6b:91:
         40:34:3c:89:0b:20:4b:47:10:44:aa:6a:e0:fd:7a:eb:81:c3:
         ac:8e:c8:e4:36:4a:78:f8:33:21:05:d5:40:03:76:16:fe:25:
         2c:c2:85:b2:10:82:51:73:31:24:1f:64:13:aa:44:0f:6b:ca:
         13:c9:a5:f7:01:a9:09:5e:25:7d:59:28:ab:83:79:0f:91:6f:
         33:aa:d8:78:aa:f4:0c:ec:cf:8a:7a:3a:28:12:cd:3b:f7:ed:
         3f:83:57:bc:23:16:a5:3f:e7:a9:1d:a2:81:f3:97:fa:4c:fd:
         17:16:cf:95:5e:e8:6e:00:88:c0:dd:0b:4f:f1:a8:59:ed:19:
         bf:4b:61:fe:25:42:6e:c1:54:73:b1:96:16:9c:ec:12:bd:5f:
         f6:17:b0:22:b6:2e:aa:d6:ef:7d:fa:c8:81:a5:96:82:9b:ae:
         6c:42:89:09:11:f2:e0:c7:e0:61:29:e3:81:51:0a:28:f3:0d:
         8a:be:66:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD+iW6Erm+AD5kA+POAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzA5N2JiZDEtZGRlMS00ZWU1LWE3MjctNWVlNDVkYTY5
MDUyMB4XDTIxMDkyOTIwMDM1NFoXDTI1MDEyMjA1MDAwMFowLzEtMCsGA1UEAxMk
MTNkY2YwYjEtNTY3MC00MTc0LWI3NjYtOWU1MzBjNTY2OGNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9HTVtf7HrcvMWwEE4Ev1ad+qGh41c9y1U3Z
Sr6xQNTBGkJ5UKM3YvwvRZynm21ZB8SPiVuAyvZZOv+xNrh4OCCRVs/tYMEF+Aer
IyuBDqgAiDz5UqoA60yVdSGYaXp8DER5VxUdoXOLwgbCMmCG2MRh0qfnPmf/k1fx
7NVmAy1E3dNztAU8yjYI7Qb4nMoKNYlxnMqRZtUSuQoCDG8zSv4D0lyn32/qfFtE
yqr2oGp/31dHDKkQUQjzBQ3FPwPOa/3gKplgNbck9MapV1opYFmlkmIvVqZpdr8y
C6dvFsn6n2ggPSMl093LQqvTlE1CVnir/f47MUejh+BbBTjpEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCOdehrfJYgBNrg1pBB+fVICNnq4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMDk3
YmJkMS1kZGUxLTRlZTUtYTcyNy01ZWU0NWRhNjkwNTIvMWEyYzdkOWQtOTgxZC0z
MjA2LTk1MDktYjAwMWNjNGFmNTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzA5N2JiZDEtZGRlMS00ZWU1LWE3
MjctNWVlNDVkYTY5MDUyL2MwOTdiYmQxLWRkZTEtNGVlNS1hNzI3LTVlZTQ1ZGE2
OTA1Mi5jcmwwHwYDVR0jBBgwFoAUJPi7rGPOAkRrt5MDB1f6l9N4JNowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9jMDk3YmJkMS1kZGUxLTRlZTUtYTcyNy01ZWU0
NWRhNjkwNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnf7wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADo3vUUnyYVkTzt3DdpM5ax9C9ATLQWhR5Mgjwsd/rE2rejU12Mdru4f
LnSoWaxqwa74cdUHyS0IxOmRgPTAffYl1YVEYYZrkUA0PIkLIEtHEESqauD9euuB
w6yOyOQ2Snj4MyEF1UADdhb+JSzChbIQglFzMSQfZBOqRA9ryhPJpfcBqQleJX1Z
KKuDeQ+RbzOq2Hiq9Azsz4p6OigSzTv37T+DV7wjFqU/56kdooHzl/pM/RcWz5Ve
6G4AiMDdC0/xqFntGb9LYf4lQm7BVHOxlhac7BK9X/YXsCK2LqrW7336yIGlloKb
rmxCiQkR8uDH4GEp44FRCijzDYq+Ztk=
-----END CERTIFICATE-----