Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9d4d0e8b-df52-4033-8ede-1f00c69412ba/4b3e9d8f-306e-3ae6-894e-762ec1abb1b3.roa
File:                     4b3e9d8f-306e-3ae6-894e-762ec1abb1b3.roa (raw, json)
Hash identifier:          Bi2x7MC4YzzfyTjQ3JRMSzfCb1owkkg2igMEsEZM0oE=
Subject key identifier:   F4:D0:2E:36:87:BB:88:1E:AD:6B:FA:E5:A0:BC:B1:45:5A:E4:2B:BC
Certificate issuer:       /CN=9d4d0e8b-df52-4033-8ede-1f00c69412ba
Certificate serial:       010D0C9F43285842ACCE84CFCFD1913CB18A9400
Authority key identifier: 3E:C0:79:9B:58:B6:1A:C0:FE:10:11:04:83:57:5E:4E:22:35:30:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9d4d0e8b-df52-4033-8ede-1f00c69412ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9d4d0e8b-df52-4033-8ede-1f00c69412ba/4b3e9d8f-306e-3ae6-894e-762ec1abb1b3.roa
Signing time:             Wed 26 Jul 2023 13:00:20 +0000
ROA not before:           Wed 26 Jul 2023 13:00:20 +0000
ROA not after:            Tue 24 Oct 2023 13:00:20 +0000
asID:                     200482
IP address blocks:        199.188.236.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ac:ce:84:cf:cf:d1:91:3c:b1:8a:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d4d0e8b-df52-4033-8ede-1f00c69412ba
        Validity
            Not Before: Jul 26 13:00:20 2023 GMT
            Not After : Oct 24 13:00:20 2023 GMT
        Subject: CN=e707db0b-dc45-4811-aa45-33e604fb0c54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:94:f2:d8:25:c6:79:59:e6:c9:eb:c5:cb:1a:
                    89:3f:da:ae:a8:2d:83:8b:7f:0a:cc:1c:f0:2f:69:
                    0a:78:4f:bd:6b:ca:05:52:ba:36:9f:4b:37:c9:08:
                    83:5c:b0:37:87:99:62:db:5c:59:0d:94:1c:8a:3b:
                    98:9f:e6:fc:46:e5:2d:1a:cb:01:ca:47:5b:88:a1:
                    89:07:76:e9:35:65:aa:25:1b:4c:88:e3:8b:9b:a8:
                    1b:98:84:b4:cb:8d:1b:ba:c0:99:a5:e0:a6:b0:55:
                    f6:8c:29:58:8c:32:ef:74:0a:90:e6:fd:c3:9c:24:
                    b2:fb:64:00:55:97:50:35:14:2a:92:9a:b1:aa:ed:
                    ad:f5:cd:c1:b6:9f:92:49:5b:b4:96:f3:c5:02:c4:
                    87:c7:f5:a7:3d:8a:c4:36:b4:7d:36:cd:e5:43:cd:
                    9c:e4:68:c2:75:a2:7f:db:f1:b6:4c:f8:d3:7b:9c:
                    69:25:87:65:1f:49:19:83:6a:ae:08:b0:c2:3d:26:
                    58:51:a5:91:f8:e1:83:f6:e9:6c:d6:fd:58:27:6b:
                    b4:b1:38:f3:c4:90:18:19:46:09:64:62:76:41:b0:
                    91:87:29:20:e5:4e:99:3c:50:0e:19:6f:99:c3:43:
                    31:f3:5e:cb:9b:2b:bb:d4:49:de:7a:86:ce:8e:c4:
                    d8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D0:2E:36:87:BB:88:1E:AD:6B:FA:E5:A0:BC:B1:45:5A:E4:2B:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9d4d0e8b-df52-4033-8ede-1f00c69412ba/4b3e9d8f-306e-3ae6-894e-762ec1abb1b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9d4d0e8b-df52-4033-8ede-1f00c69412ba/9d4d0e8b-df52-4033-8ede-1f00c69412ba.crl

            X509v3 Authority Key Identifier:
                keyid:3E:C0:79:9B:58:B6:1A:C0:FE:10:11:04:83:57:5E:4E:22:35:30:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9d4d0e8b-df52-4033-8ede-1f00c69412ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.188.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:17:6b:1e:98:8e:59:18:7a:03:8f:26:08:af:ba:fd:a6:18:
         f8:e7:2f:2f:b8:41:3b:6a:0e:ea:bb:ec:f7:a2:bf:89:ac:a6:
         12:15:0d:89:07:3b:4b:49:70:37:e6:d1:cf:44:ad:36:6c:c8:
         db:63:32:d0:46:7b:af:9a:e6:c3:e3:d8:27:9a:b7:b3:fc:86:
         ee:fe:a9:ed:c6:68:cc:d5:c9:9a:dc:76:b8:ec:ab:05:c8:f8:
         c7:03:68:4d:81:d8:f5:61:d0:ae:80:49:c8:61:e7:1e:f4:64:
         c1:2c:85:f7:7b:0a:3c:39:1d:fd:fa:2b:d0:71:0a:e5:0b:e0:
         55:1e:37:58:a0:62:19:99:9b:7e:01:14:9c:08:60:1a:05:71:
         62:6c:49:83:cc:11:9e:ab:07:bb:bd:c2:27:60:9c:c4:be:e5:
         e6:f8:dd:cf:d3:b1:f7:d8:96:a1:55:91:19:43:ff:cc:a7:c7:
         50:e0:28:54:75:4c:83:7e:c5:22:1b:83:14:bc:74:51:90:97:
         87:86:a7:ee:29:dc:37:19:20:0c:e5:55:9a:8f:e9:c9:47:c1:
         f9:22:0e:40:78:1f:f5:98:3d:b9:84:aa:23:e6:0e:b8:67:a0:
         39:0a:f8:d5:32:3a:85:66:b1:61:10:15:b7:38:6b:72:cb:ce:
         52:4b:99:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKszoTPz9GRPLGKlAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWQ0ZDBlOGItZGY1Mi00MDMzLThlZGUtMWYwMGM2OTQx
MmJhMB4XDTIzMDcyNjEzMDAyMFoXDTIzMTAyNDEzMDAyMFowLzEtMCsGA1UEAxMk
ZTcwN2RiMGItZGM0NS00ODExLWFhNDUtMzNlNjA0ZmIwYzU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZTy2CXGeVnmyevFyxqJP9quqC2Di38KzBzw
L2kKeE+9a8oFUro2n0s3yQiDXLA3h5li21xZDZQcijuYn+b8RuUtGssBykdbiKGJ
B3bpNWWqJRtMiOOLm6gbmIS0y40busCZpeCmsFX2jClYjDLvdAqQ5v3DnCSy+2QA
VZdQNRQqkpqxqu2t9c3Btp+SSVu0lvPFAsSHx/WnPYrENrR9Ns3lQ82c5GjCdaJ/
2/G2TPjTe5xpJYdlH0kZg2quCLDCPSZYUaWR+OGD9uls1v1YJ2u0sTjzxJAYGUYJ
ZGJ2QbCRhykg5U6ZPFAOGW+Zw0Mx817Lmyu71EneeobOjsTYnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPTQLjaHu4gerWv65aC8sUVa5Cu8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85ZDRk
MGU4Yi1kZjUyLTQwMzMtOGVkZS0xZjAwYzY5NDEyYmEvNGIzZTlkOGYtMzA2ZS0z
YWU2LTg5NGUtNzYyZWMxYWJiMWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOWQ0ZDBlOGItZGY1Mi00MDMzLThl
ZGUtMWYwMGM2OTQxMmJhLzlkNGQwZThiLWRmNTItNDAzMy04ZWRlLTFmMDBjNjk0
MTJiYS5jcmwwHwYDVR0jBBgwFoAUPsB5m1i2GsD+EBEEg1deTiI1MPMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85ZDRkMGU4Yi1kZjUyLTQwMzMtOGVkZS0xZjAw
YzY5NDEyYmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7zsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI4Xax6YjlkYegOPJgivuv2mGPjnLy+4QTtqDuq77Peiv4msphIVDYkH
O0tJcDfm0c9ErTZsyNtjMtBGe6+a5sPj2Ceat7P8hu7+qe3GaMzVyZrcdrjsqwXI
+McDaE2B2PVh0K6ASchh5x70ZMEshfd7Cjw5Hf36K9BxCuUL4FUeN1igYhmZm34B
FJwIYBoFcWJsSYPMEZ6rB7u9widgnMS+5eb43c/TsffYlqFVkRlD/8ynx1DgKFR1
TIN+xSIbgxS8dFGQl4eGp+4p3DcZIAzlVZqP6clHwfkiDkB4H/WYPbmEqiPmDrhn
oDkK+NUyOoVmsWEQFbc4a3LLzlJLmSU=
-----END CERTIFICATE-----