Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/ee87208a-b9d9-318f-8d98-3445ffc37174.roa
File:                     ee87208a-b9d9-318f-8d98-3445ffc37174.roa (raw, json)
Hash identifier:          SP/BGHDuNWgMWZdMxBOQalu7iyI1mgFW8owcnh5dgZA=
Subject key identifier:   59:BE:F3:FA:B0:9E:BD:35:42:75:F2:E9:8D:41:79:7A:00:68:CD:C2
Certificate issuer:       /CN=c097bbd1-dde1-4ee5-a727-5ee45da69052
Certificate serial:       010D0C9F432858405174472FE6C75F08BFADAAC0
Authority key identifier: 24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/ee87208a-b9d9-318f-8d98-3445ffc37174.roa
Signing time:             Wed 29 Sep 2021 20:03:54 +0000
ROA not before:           Wed 29 Sep 2021 20:03:54 +0000
ROA not after:            Wed 26 Mar 2025 04:00:00 +0000
asID:                     207279
IP address blocks:        157.254.216.0/24 maxlen: 24
                          157.254.217.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:51:74:47:2f:e6:c7:5f:08:bf:ad:aa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c097bbd1-dde1-4ee5-a727-5ee45da69052
        Validity
            Not Before: Sep 29 20:03:54 2021 GMT
            Not After : Mar 26 04:00:00 2025 GMT
        Subject: CN=874d02e1-ad90-48ad-a9f5-9e82237f15e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f3:5f:a6:56:af:e3:ca:c0:5b:c4:cd:c4:56:
                    04:98:da:05:bc:de:b5:b6:a9:c2:8d:86:67:7d:73:
                    73:58:3d:85:2b:d1:bf:51:66:e2:55:1c:5d:10:40:
                    f1:9d:de:ca:8c:f2:3f:9e:9a:2f:7c:79:39:5a:b4:
                    8c:1e:37:2e:99:68:6b:9a:b1:70:1d:02:06:ed:95:
                    34:da:26:18:55:65:05:d8:9b:8c:f3:8b:03:99:1a:
                    bd:bb:1f:05:3f:4b:26:6e:dd:e5:d6:e6:7d:d9:bc:
                    f7:c3:7b:18:b2:1d:c3:1a:ef:df:75:2c:e5:bc:e3:
                    a3:39:f4:6c:11:39:e5:6a:b2:55:a6:c9:79:a8:49:
                    f8:14:0a:28:64:40:73:42:01:a4:cc:70:31:7a:f6:
                    2b:8f:66:7c:fb:0d:3a:9e:ec:04:28:cb:a7:b1:f5:
                    88:9b:72:5f:19:47:c1:06:ca:ed:b6:b6:c1:fb:c9:
                    b9:f5:27:34:4e:5e:c7:71:67:4a:11:0b:b3:07:29:
                    2a:07:3c:d4:58:f0:70:5b:2b:39:b9:3a:83:c4:29:
                    5d:12:ee:26:b3:77:25:f6:58:47:e1:6a:51:08:0f:
                    67:09:b0:aa:31:6a:08:c9:f8:d8:be:3b:cc:1b:13:
                    8a:c6:ab:ac:64:13:48:e6:60:70:34:5e:8a:49:3a:
                    df:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BE:F3:FA:B0:9E:BD:35:42:75:F2:E9:8D:41:79:7A:00:68:CD:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/ee87208a-b9d9-318f-8d98-3445ffc37174.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/c097bbd1-dde1-4ee5-a727-5ee45da69052.crl

            X509v3 Authority Key Identifier:
                keyid:24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:09:24:c2:5c:89:84:58:9b:66:18:18:06:ad:3a:88:6d:9f:
         bb:31:ac:96:5c:3a:b7:8e:cd:fd:99:90:e3:b3:d3:5c:3d:7c:
         e8:d2:8c:d4:40:e1:63:b6:37:14:37:96:ab:04:9d:e2:45:af:
         e9:d2:22:cd:96:9e:5b:44:ad:28:80:a8:54:1a:b3:71:cd:45:
         98:9b:2a:ef:93:54:1c:ee:0c:fe:e1:bd:e2:83:7e:48:fd:41:
         7d:94:fc:4e:c0:70:c7:91:2e:a6:dd:33:94:ef:4b:7e:69:c7:
         74:9a:3f:a8:52:eb:74:e2:7f:9a:d6:70:4a:7d:b5:11:8f:ca:
         42:73:6f:a7:82:04:73:67:a9:c4:8e:00:5f:42:2d:33:60:8f:
         56:2b:d3:b2:cf:be:56:6e:52:25:bf:89:a5:30:1a:84:d8:f1:
         01:57:3a:13:f1:fd:40:76:fb:60:05:22:02:2c:fd:0b:b1:c0:
         7d:a2:8f:55:0e:0a:2b:dd:1f:75:64:4e:86:e3:4b:76:37:d6:
         1c:82:60:d7:25:7f:dd:f7:b5:f1:97:75:6a:77:f9:bf:fe:73:
         ad:53:dc:a7:86:c1:5c:05:40:01:a1:83:24:3d:8a:2a:dc:6c:
         f2:31:71:7d:d3:e1:15:08:c1:1b:66:ec:16:94:75:e1:53:ce:
         b4:8d:d1:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEBRdEcv5sdfCL+tqsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzA5N2JiZDEtZGRlMS00ZWU1LWE3MjctNWVlNDVkYTY5
MDUyMB4XDTIxMDkyOTIwMDM1NFoXDTI1MDMyNjA0MDAwMFowLzEtMCsGA1UEAxMk
ODc0ZDAyZTEtYWQ5MC00OGFkLWE5ZjUtOWU4MjIzN2YxNWU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvNfplav48rAW8TNxFYEmNoFvN61tqnCjYZn
fXNzWD2FK9G/UWbiVRxdEEDxnd7KjPI/npovfHk5WrSMHjcumWhrmrFwHQIG7ZU0
2iYYVWUF2JuM84sDmRq9ux8FP0smbt3l1uZ92bz3w3sYsh3DGu/fdSzlvOOjOfRs
ETnlarJVpsl5qEn4FAooZEBzQgGkzHAxevYrj2Z8+w06nuwEKMunsfWIm3JfGUfB
BsrttrbB+8m59Sc0Tl7HcWdKEQuzBykqBzzUWPBwWys5uTqDxCldEu4ms3cl9lhH
4WpRCA9nCbCqMWoIyfjYvjvMGxOKxqusZBNI5mBwNF6KSTrf5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFm+8/qwnr01QnXy6Y1BeXoAaM3CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMDk3
YmJkMS1kZGUxLTRlZTUtYTcyNy01ZWU0NWRhNjkwNTIvZWU4NzIwOGEtYjlkOS0z
MThmLThkOTgtMzQ0NWZmYzM3MTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzA5N2JiZDEtZGRlMS00ZWU1LWE3
MjctNWVlNDVkYTY5MDUyL2MwOTdiYmQxLWRkZTEtNGVlNS1hNzI3LTVlZTQ1ZGE2
OTA1Mi5jcmwwHwYDVR0jBBgwFoAUJPi7rGPOAkRrt5MDB1f6l9N4JNowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9jMDk3YmJkMS1kZGUxLTRlZTUtYTcyNy01ZWU0
NWRhNjkwNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnf7YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEIJJMJciYRYm2YYGAatOohtn7sxrJZcOreOzf2ZkOOz01w9fOjSjNRA
4WO2NxQ3lqsEneJFr+nSIs2WnltErSiAqFQas3HNRZibKu+TVBzuDP7hveKDfkj9
QX2U/E7AcMeRLqbdM5TvS35px3SaP6hS63Tif5rWcEp9tRGPykJzb6eCBHNnqcSO
AF9CLTNgj1Yr07LPvlZuUiW/iaUwGoTY8QFXOhPx/UB2+2AFIgIs/QuxwH2ij1UO
CivdH3VkTobjS3Y31hyCYNclf933tfGXdWp3+b/+c61T3KeGwVwFQAGhgyQ9iirc
bPIxcX3T4RUIwRtm7BaUdeFTzrSN0RY=
-----END CERTIFICATE-----