Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/0a45517f-f8e3-3d40-9abe-ee954b4021c8.roa
File:                     0a45517f-f8e3-3d40-9abe-ee954b4021c8.roa (raw, json)
Hash identifier:          U/Gr9M4J+3U1q9da+7QD/h5J215hz+XVKqoGV72z6JA=
Subject key identifier:   5E:E7:0E:8A:E0:22:19:41:9D:88:42:9B:EC:EA:33:B5:4F:0F:7C:A0
Certificate issuer:       /CN=a4994aff-79e3-4800-875a-f4a951d7af28
Certificate serial:       010D0C9F432858430BB9C64DE0E860322009A500
Authority key identifier: 4A:41:44:C2:37:55:32:9B:82:E2:88:2B:51:8A:93:7E:E6:74:AF:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/0a45517f-f8e3-3d40-9abe-ee954b4021c8.roa
Signing time:             Tue 29 Aug 2023 13:00:24 +0000
ROA not before:           Tue 29 Aug 2023 13:00:24 +0000
ROA not after:            Mon 27 Nov 2023 14:00:24 +0000
asID:                     206150
IP address blocks:        199.68.216.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0b:b9:c6:4d:e0:e8:60:32:20:09:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4994aff-79e3-4800-875a-f4a951d7af28
        Validity
            Not Before: Aug 29 13:00:24 2023 GMT
            Not After : Nov 27 14:00:24 2023 GMT
        Subject: CN=d1ed1792-20b5-48e2-9f6b-85638bf69934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f9:cc:b7:ad:74:81:24:4e:f9:63:d3:ae:1d:
                    c7:1f:81:37:fc:f7:a9:f0:6f:35:33:76:67:e0:fe:
                    00:1f:38:25:14:f8:63:d6:94:ef:ec:4e:18:cf:3e:
                    2c:ff:ea:38:02:e4:6f:db:38:0f:fd:67:d1:48:b9:
                    ae:f2:f4:4c:0f:b5:20:55:af:af:9e:e0:bc:18:36:
                    61:ca:5f:b3:ad:a3:46:c2:66:44:d6:e3:e2:e5:2a:
                    9d:00:e6:18:a9:19:61:4d:61:0e:fa:29:11:e7:ac:
                    a5:60:0a:4b:cf:f7:0d:2d:6d:1c:75:a0:d6:95:fd:
                    0d:55:32:93:ad:6e:71:e5:a3:80:e5:d3:91:1f:63:
                    0b:f2:85:01:27:5b:54:9b:0d:62:f6:2b:56:5d:29:
                    e1:15:a9:ad:eb:e9:e3:33:67:7a:f9:66:c0:6f:5f:
                    85:9d:b2:80:9d:8d:5a:07:20:a2:e3:27:0d:82:11:
                    b1:ea:ff:59:b3:09:04:d9:fa:aa:5c:08:a3:1d:3d:
                    4b:66:5a:76:46:5e:77:bd:a8:77:61:aa:58:28:09:
                    ba:cc:2d:14:12:39:a5:57:80:f8:8e:3f:8a:3b:36:
                    af:9e:00:69:dc:d2:d3:0e:3f:b6:fb:7d:24:09:2b:
                    c1:f5:d7:59:0d:f4:77:e8:06:61:75:b5:03:b0:9b:
                    3e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E7:0E:8A:E0:22:19:41:9D:88:42:9B:EC:EA:33:B5:4F:0F:7C:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/0a45517f-f8e3-3d40-9abe-ee954b4021c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/a4994aff-79e3-4800-875a-f4a951d7af28.crl

            X509v3 Authority Key Identifier:
                keyid:4A:41:44:C2:37:55:32:9B:82:E2:88:2B:51:8A:93:7E:E6:74:AF:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.68.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:dd:c0:68:84:94:1b:4c:5e:16:81:1b:ab:82:c2:be:10:c5:
         b3:7b:00:9b:47:6a:c1:31:96:d6:7d:58:aa:f8:e7:e5:88:f1:
         c0:ce:0e:90:3b:03:9b:9f:9a:4c:26:ba:92:6c:ce:e9:2f:40:
         b1:94:96:5f:61:fe:42:cc:5c:05:13:38:fa:27:36:36:d9:74:
         74:8f:0f:b0:9f:cb:b3:b6:ea:dc:71:55:4a:fa:74:7e:b9:d0:
         34:2c:33:8c:10:66:ac:a8:be:d5:8d:72:19:c0:71:cf:87:97:
         9e:2f:fc:38:10:c5:d7:30:20:b7:11:3e:7e:63:4e:10:58:01:
         46:14:4a:d2:82:ea:6c:6e:41:5d:d1:a0:41:57:9e:28:83:21:
         13:a5:f8:af:dd:6a:f7:12:42:ca:6b:53:00:fb:68:0e:f6:f5:
         51:c3:38:22:50:c9:19:06:64:53:67:f4:6e:32:af:58:25:06:
         b4:40:9d:ef:79:bc:2b:fe:57:d7:08:62:d2:36:7a:a4:83:d0:
         f9:07:55:f6:79:32:b3:9e:e2:a2:11:4b:4a:8d:9c:8b:ea:dc:
         e5:55:3e:6e:4d:d3:2a:88:1e:17:f5:42:3d:8c:f0:a1:e0:13:
         4e:3e:7d:e2:34:5e:e5:a5:21:b4:0a:b3:61:18:34:73:d3:ed:
         95:b0:a5:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMLucZN4OhgMiAJpQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTQ5OTRhZmYtNzllMy00ODAwLTg3NWEtZjRhOTUxZDdh
ZjI4MB4XDTIzMDgyOTEzMDAyNFoXDTIzMTEyNzE0MDAyNFowLzEtMCsGA1UEAxMk
ZDFlZDE3OTItMjBiNS00OGUyLTlmNmItODU2MzhiZjY5OTM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PnMt610gSRO+WPTrh3HH4E3/Pep8G81M3Zn
4P4AHzglFPhj1pTv7E4Yzz4s/+o4AuRv2zgP/WfRSLmu8vRMD7UgVa+vnuC8GDZh
yl+zraNGwmZE1uPi5SqdAOYYqRlhTWEO+ikR56ylYApLz/cNLW0cdaDWlf0NVTKT
rW5x5aOA5dORH2ML8oUBJ1tUmw1i9itWXSnhFamt6+njM2d6+WbAb1+FnbKAnY1a
ByCi4ycNghGx6v9ZswkE2fqqXAijHT1LZlp2Rl53vah3YapYKAm6zC0UEjmlV4D4
jj+KOzavngBp3NLTDj+2+30kCSvB9ddZDfR36AZhdbUDsJs+gQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF7nDorgIhlBnYhCm+zqM7VPD3ygMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNDk5
NGFmZi03OWUzLTQ4MDAtODc1YS1mNGE5NTFkN2FmMjgvMGE0NTUxN2YtZjhlMy0z
ZDQwLTlhYmUtZWU5NTRiNDAyMWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTQ5OTRhZmYtNzllMy00ODAwLTg3
NWEtZjRhOTUxZDdhZjI4L2E0OTk0YWZmLTc5ZTMtNDgwMC04NzVhLWY0YTk1MWQ3
YWYyOC5jcmwwHwYDVR0jBBgwFoAUSkFEwjdVMpuC4ogrUYqTfuZ0rz0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNDk5NGFmZi03OWUzLTQ4MDAtODc1YS1mNGE5
NTFkN2FmMjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0TYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGPdwGiElBtMXhaBG6uCwr4QxbN7AJtHasExltZ9WKr45+WI8cDODpA7
A5ufmkwmupJszukvQLGUll9h/kLMXAUTOPonNjbZdHSPD7Cfy7O26txxVUr6dH65
0DQsM4wQZqyovtWNchnAcc+Hl54v/DgQxdcwILcRPn5jThBYAUYUStKC6mxuQV3R
oEFXniiDIROl+K/davcSQsprUwD7aA729VHDOCJQyRkGZFNn9G4yr1glBrRAne95
vCv+V9cIYtI2eqSD0PkHVfZ5MrOe4qIRS0qNnIvq3OVVPm5N0yqIHhf1Qj2M8KHg
E04+feI0XuWlIbQKs2EYNHPT7ZWwpeM=
-----END CERTIFICATE-----