Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/45d19f35-57e2-368f-be98-a141154e9956.roa
File:                     45d19f35-57e2-368f-be98-a141154e9956.roa (raw, json)
Hash identifier:          2YFQZsGyw2nEVCMOHs5Y3VafUaKT6wXMvnIboCF0JQI=
Subject key identifier:   6F:E8:A6:DF:36:3E:5B:F2:2D:60:66:49:CB:07:F3:7A:C3:8B:3B:A8
Certificate issuer:       /CN=a4994aff-79e3-4800-875a-f4a951d7af28
Certificate serial:       010D0C9F43285841E4470B4B52CAD5DFCE3BD080
Authority key identifier: 4A:41:44:C2:37:55:32:9B:82:E2:88:2B:51:8A:93:7E:E6:74:AF:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/45d19f35-57e2-368f-be98-a141154e9956.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Tue 01 Aug 2023 22:23:25 +0000
asID:                     7040
IP address blocks:        199.68.216.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:47:0b:4b:52:ca:d5:df:ce:3b:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4994aff-79e3-4800-875a-f4a951d7af28
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Aug  1 22:23:25 2023 GMT
        Subject: CN=602acb01-3cb4-48ad-8e12-06b47ef48dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:72:ea:d4:e3:22:72:e0:5f:1a:b1:21:c0:a1:
                    d1:31:bd:cb:27:11:33:10:d8:3f:da:6c:2d:fb:9c:
                    5a:6c:c3:b9:a5:19:91:57:de:16:12:c9:77:0f:6b:
                    5a:84:66:a4:32:ab:bf:a5:da:d6:3e:15:d2:32:f2:
                    46:dd:fa:60:82:55:9d:44:a4:92:13:7b:34:bb:88:
                    7a:04:ce:88:5b:7e:f1:e2:62:86:88:a5:d4:a0:ee:
                    c2:88:f1:b2:c9:49:6e:c1:88:68:b6:50:22:b7:92:
                    00:d4:08:ea:98:6d:b5:e0:e0:44:c1:12:9f:6d:68:
                    d7:df:11:51:2c:7a:68:50:52:cf:a6:e0:a9:47:1d:
                    99:4a:1e:e2:ae:fd:44:d5:cd:8f:47:c7:ce:a1:75:
                    75:74:1a:4c:c8:70:ea:ff:14:15:d2:ca:26:d9:b6:
                    e7:9c:d9:a8:26:fa:d7:0d:c3:8a:a8:c1:d9:49:1d:
                    d0:b9:a9:21:51:b5:3f:0a:d0:5d:53:5b:eb:84:3b:
                    df:61:e1:1e:b7:ec:1e:9b:1c:08:26:a6:fb:c5:22:
                    e9:4e:f8:4b:35:47:fa:a9:79:0b:f4:98:fb:ba:d2:
                    e4:a7:3a:ba:7f:2a:4c:d0:5d:58:e9:74:b8:5f:51:
                    b2:00:b0:e3:8f:6f:bd:3a:94:7f:18:ec:96:1e:bc:
                    a7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E8:A6:DF:36:3E:5B:F2:2D:60:66:49:CB:07:F3:7A:C3:8B:3B:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/45d19f35-57e2-368f-be98-a141154e9956.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/a4994aff-79e3-4800-875a-f4a951d7af28.crl

            X509v3 Authority Key Identifier:
                keyid:4A:41:44:C2:37:55:32:9B:82:E2:88:2B:51:8A:93:7E:E6:74:AF:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.68.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:bc:cd:50:d0:90:ea:ea:2b:30:13:1f:53:55:ba:38:bb:2b:
         8a:a7:cd:5f:6c:51:2b:48:09:05:3a:76:fe:da:d1:ff:6e:81:
         36:1e:3b:16:f9:9b:91:2b:77:e0:1f:d8:cd:0c:4f:d0:3b:c3:
         f0:4c:72:14:a5:4b:48:a6:f6:17:20:36:3e:4f:b4:57:1f:f3:
         0a:01:49:46:cd:9e:cb:05:99:88:5e:a7:55:14:41:fa:9c:a2:
         52:26:1d:ce:14:a8:c9:61:a6:e2:0e:87:a5:04:80:8f:ae:4f:
         06:5b:6c:87:0e:3e:fe:37:81:0a:df:ef:93:82:b2:d5:cb:2e:
         ec:f4:dc:24:6f:f7:b7:ac:b7:82:75:65:04:4a:60:eb:43:c3:
         bd:e3:77:46:db:56:65:4a:42:46:69:d9:b6:91:06:fe:7b:24:
         15:ca:3f:d5:8d:d1:61:73:6d:67:99:55:ab:1e:1a:ef:2f:89:
         87:a4:35:58:8e:44:2a:73:8e:56:65:8d:e6:c9:63:a1:69:49:
         3c:80:c3:cb:db:ab:99:47:ed:5f:a3:1a:40:11:f4:84:68:2b:
         61:3c:6e:fc:70:37:2f:6d:aa:0e:38:d7:25:16:a1:8f:3e:26:
         e6:31:70:bd:06:1a:25:dc:27:47:af:27:fb:8e:d1:13:1b:f6:
         a2:7e:64:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkRwtLUsrV38470IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTQ5OTRhZmYtNzllMy00ODAwLTg3NWEtZjRhOTUxZDdh
ZjI4MB4XDTIzMDUxNTE3MDQ1MloXDTIzMDgwMTIyMjMyNVowLzEtMCsGA1UEAxMk
NjAyYWNiMDEtM2NiNC00OGFkLThlMTItMDZiNDdlZjQ4ZGFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunLq1OMicuBfGrEhwKHRMb3LJxEzENg/2mwt
+5xabMO5pRmRV94WEsl3D2tahGakMqu/pdrWPhXSMvJG3fpgglWdRKSSE3s0u4h6
BM6IW37x4mKGiKXUoO7CiPGyyUluwYhotlAit5IA1AjqmG214OBEwRKfbWjX3xFR
LHpoUFLPpuCpRx2ZSh7irv1E1c2PR8fOoXV1dBpMyHDq/xQV0som2bbnnNmoJvrX
DcOKqMHZSR3QuakhUbU/CtBdU1vrhDvfYeEet+wemxwIJqb7xSLpTvhLNUf6qXkL
9Jj7utLkpzq6fypM0F1Y6XS4X1GyALDjj2+9OpR/GOyWHrynzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG/opt82PlvyLWBmScsH83rDizuoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNDk5
NGFmZi03OWUzLTQ4MDAtODc1YS1mNGE5NTFkN2FmMjgvNDVkMTlmMzUtNTdlMi0z
NjhmLWJlOTgtYTE0MTE1NGU5OTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTQ5OTRhZmYtNzllMy00ODAwLTg3
NWEtZjRhOTUxZDdhZjI4L2E0OTk0YWZmLTc5ZTMtNDgwMC04NzVhLWY0YTk1MWQ3
YWYyOC5jcmwwHwYDVR0jBBgwFoAUSkFEwjdVMpuC4ogrUYqTfuZ0rz0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNDk5NGFmZi03OWUzLTQ4MDAtODc1YS1mNGE5
NTFkN2FmMjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0TYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFe8zVDQkOrqKzATH1NVuji7K4qnzV9sUStICQU6dv7a0f9ugTYeOxb5
m5Erd+Af2M0MT9A7w/BMchSlS0im9hcgNj5PtFcf8woBSUbNnssFmYhep1UUQfqc
olImHc4UqMlhpuIOh6UEgI+uTwZbbIcOPv43gQrf75OCstXLLuz03CRv97est4J1
ZQRKYOtDw73jd0bbVmVKQkZp2baRBv57JBXKP9WN0WFzbWeZVaseGu8viYekNViO
RCpzjlZljebJY6FpSTyAw8vbq5lH7V+jGkAR9IRoK2E8bvxwNy9tqg441yUWoY8+
JuYxcL0GGiXcJ0evJ/uO0RMb9qJ+ZEQ=
-----END CERTIFICATE-----