Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9d4d0e8b-df52-4033-8ede-1f00c69412ba/1b05c94e-7450-3061-afdb-f18716f77e20.roa
File:                     1b05c94e-7450-3061-afdb-f18716f77e20.roa (raw, json)
Hash identifier:          tYnoafvKJFQULSLKYeWy7xu4ZKz6RdFyX8MVyfXD9F0=
Subject key identifier:   2A:A3:0F:F9:25:87:D6:89:B3:6B:F4:59:1B:BF:F6:EB:3B:BD:AF:0B
Certificate issuer:       /CN=9d4d0e8b-df52-4033-8ede-1f00c69412ba
Certificate serial:       010D0C9F432858413931F00A93543D7602C44000
Authority key identifier: 3E:C0:79:9B:58:B6:1A:C0:FE:10:11:04:83:57:5E:4E:22:35:30:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9d4d0e8b-df52-4033-8ede-1f00c69412ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9d4d0e8b-df52-4033-8ede-1f00c69412ba/1b05c94e-7450-3061-afdb-f18716f77e20.roa
Signing time:             Fri 20 Nov 2020 14:21:09 +0000
ROA not before:           Fri 20 Nov 2020 14:21:09 +0000
ROA not after:            Tue 17 Jun 2025 04:00:00 +0000
asID:                     210439
IP address blocks:        199.188.236.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:39:31:f0:0a:93:54:3d:76:02:c4:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d4d0e8b-df52-4033-8ede-1f00c69412ba
        Validity
            Not Before: Nov 20 14:21:09 2020 GMT
            Not After : Jun 17 04:00:00 2025 GMT
        Subject: CN=aa584248-5a7d-4823-ba5d-c8a676aa0f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d5:37:41:de:3e:cb:61:a5:fc:56:9d:52:69:
                    2c:af:30:06:b6:68:69:7a:aa:24:6f:a6:89:9c:c5:
                    5a:2e:97:60:b4:13:ee:97:95:f7:98:20:87:87:c8:
                    12:14:62:1d:6f:fd:f8:1c:72:72:f1:ae:fb:7b:a3:
                    65:4e:1f:24:45:7e:39:96:97:ad:f5:7b:a0:97:39:
                    ef:8d:bf:80:e8:58:2a:47:c7:c0:6c:5c:a8:94:eb:
                    e2:e9:4c:2f:a7:7c:c3:7e:25:b2:91:1f:2a:ba:f6:
                    12:2f:98:60:fe:6a:d8:e9:52:09:d8:7d:5d:c7:76:
                    81:27:f9:89:d5:96:4c:23:04:74:fb:4a:b9:65:61:
                    ca:e2:58:fb:19:81:7e:7b:d3:8f:cf:43:2d:46:9e:
                    04:e6:f2:31:77:30:25:3f:72:7c:b6:2d:bf:4b:cd:
                    c5:f2:9d:40:18:fc:ca:95:3c:a6:82:5f:e7:18:f7:
                    62:d0:26:ef:e8:a0:1f:67:a5:55:a9:c3:0b:f4:4d:
                    f5:d5:ae:35:5c:13:d8:29:0e:76:08:58:3a:21:d7:
                    17:0c:6c:8f:ee:a6:cd:66:a6:39:d0:9a:9c:bd:4e:
                    d1:51:d8:2d:e6:54:a0:2b:72:fc:6c:e7:2e:b9:3d:
                    eb:f2:9c:6c:e9:ea:d7:3d:08:80:e0:fb:59:03:12:
                    e8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A3:0F:F9:25:87:D6:89:B3:6B:F4:59:1B:BF:F6:EB:3B:BD:AF:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9d4d0e8b-df52-4033-8ede-1f00c69412ba/1b05c94e-7450-3061-afdb-f18716f77e20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9d4d0e8b-df52-4033-8ede-1f00c69412ba/9d4d0e8b-df52-4033-8ede-1f00c69412ba.crl

            X509v3 Authority Key Identifier:
                keyid:3E:C0:79:9B:58:B6:1A:C0:FE:10:11:04:83:57:5E:4E:22:35:30:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9d4d0e8b-df52-4033-8ede-1f00c69412ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.188.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:c4:0d:9a:a7:af:90:64:18:33:23:50:18:f9:e0:d3:00:16:
         78:c9:bb:89:8b:9a:69:3e:e2:4e:92:e9:5c:6c:93:43:21:4c:
         0f:a0:aa:5c:5a:92:a4:ff:8f:1e:46:0e:01:d6:01:0d:7a:0b:
         af:91:da:4a:c3:3b:d0:ee:bb:02:33:aa:29:82:eb:19:f3:f1:
         1a:8a:61:a8:42:82:0d:4c:ed:63:a1:55:09:2d:82:ee:5d:aa:
         b6:5f:0b:62:49:65:40:41:51:20:d7:5a:ba:7d:51:63:e2:88:
         81:57:a4:14:7b:20:a1:71:5d:1e:4e:d6:62:01:b9:4d:5e:9a:
         63:60:6b:c3:5f:5e:74:2f:4d:86:41:9f:3f:63:72:b3:a8:e4:
         23:07:34:d1:5b:f8:2b:c7:5a:70:85:51:c2:d9:4e:21:7f:60:
         64:e6:48:99:0e:8d:dc:89:2b:28:af:f9:93:a8:b9:6e:7c:e8:
         9b:1a:87:11:6c:7e:99:b8:e9:d3:ea:f9:71:20:4d:9c:45:75:
         fb:31:c9:6c:8c:56:d4:2f:5b:56:2e:cf:22:ef:f0:5a:44:31:
         50:81:81:9d:27:ea:9a:44:01:76:db:ee:ae:0e:78:c3:fc:ac:
         da:c5:37:61:9e:7c:6b:55:e8:9d:6e:4c:8b:80:e7:45:26:09:
         17:3f:ca:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEE5MfAKk1Q9dgLEQAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWQ0ZDBlOGItZGY1Mi00MDMzLThlZGUtMWYwMGM2OTQx
MmJhMB4XDTIwMTEyMDE0MjEwOVoXDTI1MDYxNzA0MDAwMFowLzEtMCsGA1UEAxMk
YWE1ODQyNDgtNWE3ZC00ODIzLWJhNWQtYzhhNjc2YWEwZjI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtU3Qd4+y2Gl/FadUmksrzAGtmhpeqokb6aJ
nMVaLpdgtBPul5X3mCCHh8gSFGIdb/34HHJy8a77e6NlTh8kRX45lpet9Xuglznv
jb+A6FgqR8fAbFyolOvi6Uwvp3zDfiWykR8quvYSL5hg/mrY6VIJ2H1dx3aBJ/mJ
1ZZMIwR0+0q5ZWHK4lj7GYF+e9OPz0MtRp4E5vIxdzAlP3J8ti2/S83F8p1AGPzK
lTymgl/nGPdi0Cbv6KAfZ6VVqcML9E311a41XBPYKQ52CFg6IdcXDGyP7qbNZqY5
0JqcvU7RUdgt5lSgK3L8bOcuuT3r8pxs6erXPQiA4PtZAxLoBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCqjD/klh9aJs2v0WRu/9us7va8LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85ZDRk
MGU4Yi1kZjUyLTQwMzMtOGVkZS0xZjAwYzY5NDEyYmEvMWIwNWM5NGUtNzQ1MC0z
MDYxLWFmZGItZjE4NzE2Zjc3ZTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOWQ0ZDBlOGItZGY1Mi00MDMzLThl
ZGUtMWYwMGM2OTQxMmJhLzlkNGQwZThiLWRmNTItNDAzMy04ZWRlLTFmMDBjNjk0
MTJiYS5jcmwwHwYDVR0jBBgwFoAUPsB5m1i2GsD+EBEEg1deTiI1MPMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85ZDRkMGU4Yi1kZjUyLTQwMzMtOGVkZS0xZjAw
YzY5NDEyYmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7zsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHPEDZqnr5BkGDMjUBj54NMAFnjJu4mLmmk+4k6S6Vxsk0MhTA+gqlxa
kqT/jx5GDgHWAQ16C6+R2krDO9DuuwIzqimC6xnz8RqKYahCgg1M7WOhVQktgu5d
qrZfC2JJZUBBUSDXWrp9UWPiiIFXpBR7IKFxXR5O1mIBuU1emmNga8NfXnQvTYZB
nz9jcrOo5CMHNNFb+CvHWnCFUcLZTiF/YGTmSJkOjdyJKyiv+ZOouW586JsahxFs
fpm46dPq+XEgTZxFdfsxyWyMVtQvW1YuzyLv8FpEMVCBgZ0n6ppEAXbb7q4OeMP8
rNrFN2GefGtV6J1uTIuA50UmCRc/yl4=
-----END CERTIFICATE-----