Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6eaf8e46-1c3c-40d4-8479-327c364c3dd5/7208a87e-2f87-3a66-b727-b95391f076f2.roa
File:                     7208a87e-2f87-3a66-b727-b95391f076f2.roa (raw, json)
Hash identifier:          reP6p5uWJVJgeLgXO76Q7YAGR0tCsFPzGIvgRmJIQYo=
Subject key identifier:   33:85:E5:0F:6C:A7:D3:5A:3C:B8:6D:6B:D4:BD:56:5C:F2:6B:50:C7
Certificate issuer:       /CN=6eaf8e46-1c3c-40d4-8479-327c364c3dd5
Certificate serial:       010D0C9F4328584398B546E8694FCBAF3CB1C160
Authority key identifier: F4:CF:FE:67:40:8E:6F:BA:7E:84:02:B0:2E:F3:0D:26:6D:2A:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6eaf8e46-1c3c-40d4-8479-327c364c3dd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6eaf8e46-1c3c-40d4-8479-327c364c3dd5/7208a87e-2f87-3a66-b727-b95391f076f2.roa
Signing time:             Thu 19 Oct 2023 01:00:16 +0000
ROA not before:           Thu 19 Oct 2023 01:00:16 +0000
ROA not after:            Wed 17 Jan 2024 02:00:16 +0000
asID:                     996
IP address blocks:        204.14.74.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:98:b5:46:e8:69:4f:cb:af:3c:b1:c1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eaf8e46-1c3c-40d4-8479-327c364c3dd5
        Validity
            Not Before: Oct 19 01:00:16 2023 GMT
            Not After : Jan 17 02:00:16 2024 GMT
        Subject: CN=5abb4211-81dd-48da-a4bb-6e111843ebb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:69:66:39:e9:25:16:a0:94:5b:07:c7:f8:02:
                    9a:40:e6:bb:ae:39:71:db:3d:e6:b6:08:e1:6a:6b:
                    23:70:2b:d2:7a:0a:df:63:3c:ba:8f:4b:57:71:9e:
                    01:d3:f2:31:5a:71:75:a2:35:ca:21:e2:17:57:38:
                    52:63:98:15:2e:9d:2f:73:ba:4d:e1:55:6f:a3:9b:
                    d0:6b:59:60:8c:df:04:63:5a:71:ab:b5:25:61:fe:
                    20:e1:4a:41:d1:66:63:01:60:f5:48:dd:93:49:3e:
                    9b:6f:58:b4:c7:21:2e:98:92:4f:04:15:6a:5e:80:
                    bf:7a:ad:5f:c1:7f:8d:d5:a2:c9:7a:ba:f9:14:4a:
                    33:ea:86:4f:93:a0:72:6b:11:cd:cc:d9:e0:e9:45:
                    b6:7b:5d:95:ff:ad:ec:00:51:40:51:7a:02:6c:09:
                    a3:60:a0:24:e7:96:31:04:23:d6:c0:83:37:b5:26:
                    2e:7f:94:e5:43:98:55:16:9e:48:63:05:c5:02:73:
                    f2:f4:08:bd:e7:21:b0:5f:12:36:18:3c:9a:52:15:
                    73:c5:ee:18:12:66:ea:ef:59:90:7f:08:98:3d:60:
                    98:5c:0b:d6:98:98:86:a3:4a:ae:60:1b:22:3e:3a:
                    ab:12:a6:3d:1a:82:57:17:98:6b:78:db:8b:31:62:
                    48:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:85:E5:0F:6C:A7:D3:5A:3C:B8:6D:6B:D4:BD:56:5C:F2:6B:50:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6eaf8e46-1c3c-40d4-8479-327c364c3dd5/7208a87e-2f87-3a66-b727-b95391f076f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6eaf8e46-1c3c-40d4-8479-327c364c3dd5/6eaf8e46-1c3c-40d4-8479-327c364c3dd5.crl

            X509v3 Authority Key Identifier:
                keyid:F4:CF:FE:67:40:8E:6F:BA:7E:84:02:B0:2E:F3:0D:26:6D:2A:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6eaf8e46-1c3c-40d4-8479-327c364c3dd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:86:88:f8:09:a1:ca:7f:7b:f5:18:04:40:fc:aa:7d:a6:77:
         9a:7f:12:42:3e:c2:7d:05:3c:98:44:ea:8b:eb:60:49:1b:b7:
         a5:a3:47:33:8a:3e:c4:16:0c:8b:a8:0a:ee:ba:66:cf:4b:b6:
         8f:cd:bc:49:86:d9:b3:44:a5:15:53:a0:de:16:6a:48:c1:39:
         d0:ad:1b:46:d1:fe:33:77:46:1d:de:b5:6f:d9:1f:03:f3:9e:
         be:b2:b5:fc:2f:20:93:4d:12:71:06:65:a6:43:56:6e:ef:9d:
         87:78:32:e2:cc:a0:82:17:77:d9:6e:e3:97:1a:a7:38:ab:81:
         bd:82:9e:1f:01:fa:5e:ef:9d:60:bb:33:3c:54:d2:47:62:ec:
         d3:3d:34:62:b4:9a:e9:40:24:ab:f5:68:bc:e5:a1:6b:01:8c:
         e0:19:15:39:80:d6:dc:3a:97:9e:8c:2f:64:16:0f:3e:d0:20:
         ac:f1:04:6a:6f:58:22:70:64:7e:ae:06:56:60:0e:14:ca:86:
         6f:eb:57:da:0a:69:2a:57:3f:71:ed:54:a8:bd:db:9e:0e:be:
         e4:4f:f1:91:af:73:51:f9:a7:95:9c:46:b9:dc:6b:86:a7:5f:
         34:bb:21:18:ed:6f:e8:4a:42:a9:6a:00:dc:a0:8a:c0:7e:5e:
         44:53:59:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEOYtUboaU/LrzyxwWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmVhZjhlNDYtMWMzYy00MGQ0LTg0NzktMzI3YzM2NGMz
ZGQ1MB4XDTIzMTAxOTAxMDAxNloXDTI0MDExNzAyMDAxNlowLzEtMCsGA1UEAxMk
NWFiYjQyMTEtODFkZC00OGRhLWE0YmItNmUxMTE4NDNlYmIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2lmOeklFqCUWwfH+AKaQOa7rjlx2z3mtgjh
amsjcCvSegrfYzy6j0tXcZ4B0/IxWnF1ojXKIeIXVzhSY5gVLp0vc7pN4VVvo5vQ
a1lgjN8EY1pxq7UlYf4g4UpB0WZjAWD1SN2TST6bb1i0xyEumJJPBBVqXoC/eq1f
wX+N1aLJerr5FEoz6oZPk6ByaxHNzNng6UW2e12V/63sAFFAUXoCbAmjYKAk55Yx
BCPWwIM3tSYuf5TlQ5hVFp5IYwXFAnPy9Ai95yGwXxI2GDyaUhVzxe4YEmbq71mQ
fwiYPWCYXAvWmJiGo0quYBsiPjqrEqY9GoJXF5hreNuLMWJIwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDOF5Q9sp9NaPLhta9S9Vlzya1DHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ZWFm
OGU0Ni0xYzNjLTQwZDQtODQ3OS0zMjdjMzY0YzNkZDUvNzIwOGE4N2UtMmY4Ny0z
YTY2LWI3MjctYjk1MzkxZjA3NmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNmVhZjhlNDYtMWMzYy00MGQ0LTg0
NzktMzI3YzM2NGMzZGQ1LzZlYWY4ZTQ2LTFjM2MtNDBkNC04NDc5LTMyN2MzNjRj
M2RkNS5jcmwwHwYDVR0jBBgwFoAU9M/+Z0COb7p+hAKwLvMNJm0q53YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82ZWFmOGU0Ni0xYzNjLTQwZDQtODQ3OS0zMjdj
MzY0YzNkZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzA5KMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMyGiPgJocp/e/UYBED8qn2md5p/EkI+wn0FPJhE6ovrYEkbt6WjRzOK
PsQWDIuoCu66Zs9Lto/NvEmG2bNEpRVToN4WakjBOdCtG0bR/jN3Rh3etW/ZHwPz
nr6ytfwvIJNNEnEGZaZDVm7vnYd4MuLMoIIXd9lu45capzirgb2Cnh8B+l7vnWC7
MzxU0kdi7NM9NGK0mulAJKv1aLzloWsBjOAZFTmA1tw6l56ML2QWDz7QIKzxBGpv
WCJwZH6uBlZgDhTKhm/rV9oKaSpXP3HtVKi9254OvuRP8ZGvc1H5p5WcRrnca4an
XzS7IRjtb+hKQqlqANygisB+XkRTWf0=
-----END CERTIFICATE-----