Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f57e016-3f00-4230-8751-484573ddf8de/d33d98be-8a58-34bb-a6c0-2134c9661776.roa
File:                     d33d98be-8a58-34bb-a6c0-2134c9661776.roa (raw, json)
Hash identifier:          hVKFKVemzb5md79a7KDfZZVuZ3DtgBh3t5+IJEZRVu0=
Subject key identifier:   E1:77:EB:DC:4C:6C:02:33:54:8C:72:00:25:D6:95:7E:F2:78:6D:B8
Certificate issuer:       /CN=6f57e016-3f00-4230-8751-484573ddf8de
Certificate serial:       010D0C9F4328584152C4056676283B09490B2900
Authority key identifier: B0:4A:AC:B4:CD:17:FC:FC:13:9D:45:27:73:67:CB:82:F6:62:48:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f57e016-3f00-4230-8751-484573ddf8de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f57e016-3f00-4230-8751-484573ddf8de/d33d98be-8a58-34bb-a6c0-2134c9661776.roa
Signing time:             Sat 18 Mar 2023 12:00:00 +0000
ROA not before:           Sat 18 Mar 2023 12:00:00 +0000
ROA not after:            Mon 26 Jun 2028 04:00:00 +0000
asID:                     32035
IP address blocks:        66.43.108.0/24 maxlen: 24
                          2607:f778::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:52:c4:05:66:76:28:3b:09:49:0b:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f57e016-3f00-4230-8751-484573ddf8de
        Validity
            Not Before: Mar 18 12:00:00 2023 GMT
            Not After : Jun 26 04:00:00 2028 GMT
        Subject: CN=1c8ef2bb-a5c1-47cd-a111-73fc9e5859f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:fe:76:7d:23:75:3f:48:12:ac:a9:fa:21:99:
                    a9:af:30:30:83:2f:dd:64:21:17:44:2a:a6:8e:4c:
                    c5:7e:40:6b:e7:da:57:28:6f:4b:98:33:d3:5a:60:
                    3a:9b:37:8a:42:60:ab:84:2d:c3:51:a8:1e:53:9f:
                    82:73:5a:af:a8:62:35:4e:96:80:0c:2b:13:8b:bc:
                    6f:36:6f:01:1a:5e:dc:c2:85:19:57:c2:a1:fe:2e:
                    33:85:5d:f9:b6:d8:fb:e5:c7:71:36:6c:e0:64:6f:
                    bf:d5:62:14:81:fd:22:7b:e1:33:50:64:d6:54:8a:
                    61:75:5a:7d:c1:14:fc:65:18:43:33:04:2c:1d:b4:
                    ee:9c:8a:0b:94:6c:d3:08:59:31:6e:c2:3a:91:b7:
                    c7:ed:7c:94:3f:eb:3f:8a:d0:6b:7e:db:3f:55:67:
                    e3:77:8b:99:96:24:8e:ec:37:b4:41:8d:10:92:48:
                    87:ff:d2:31:73:7a:9b:cc:0c:6e:e2:e8:90:56:69:
                    d6:b7:d9:96:2f:87:09:7a:ea:fd:df:5c:27:0e:06:
                    37:67:f7:1d:b6:ef:5f:de:44:ad:d1:2f:98:96:bd:
                    ba:f9:3c:5b:c2:c1:34:79:d7:d1:7d:70:e1:bb:ab:
                    95:ba:d6:b4:7b:06:84:9c:7a:a6:46:1e:35:91:39:
                    a4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:77:EB:DC:4C:6C:02:33:54:8C:72:00:25:D6:95:7E:F2:78:6D:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f57e016-3f00-4230-8751-484573ddf8de/d33d98be-8a58-34bb-a6c0-2134c9661776.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f57e016-3f00-4230-8751-484573ddf8de/6f57e016-3f00-4230-8751-484573ddf8de.crl

            X509v3 Authority Key Identifier:
                keyid:B0:4A:AC:B4:CD:17:FC:FC:13:9D:45:27:73:67:CB:82:F6:62:48:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f57e016-3f00-4230-8751-484573ddf8de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.43.108.0/24
                IPv6:
                  2607:f778::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:03:88:b4:db:d7:44:1b:d7:af:6b:b5:f0:28:b1:98:83:b5:
         86:70:1c:25:b9:88:5b:d9:0b:9b:56:ad:e7:b1:86:09:89:cc:
         3e:45:81:82:99:29:05:f4:ba:59:28:2a:43:4a:43:15:70:0d:
         22:e4:0c:73:07:3d:fd:e6:cb:df:11:ca:36:96:7b:1f:07:17:
         31:c8:80:37:12:01:55:e1:87:e7:11:75:16:35:0e:5b:37:9f:
         78:24:29:9c:29:be:2e:f1:d1:8d:bf:cc:85:09:a9:fb:a8:62:
         7f:22:5d:65:d2:d5:3e:4c:3f:98:68:f4:e9:99:40:dc:19:94:
         ce:d6:e1:01:07:8e:47:03:45:d9:52:b6:1f:01:89:4e:ef:03:
         97:2f:1e:14:49:e4:4c:4f:8d:08:4f:e8:f0:09:f6:29:97:74:
         f5:c6:ac:1d:1c:65:c3:37:02:e5:70:44:50:c1:de:de:30:10:
         a3:08:e4:f0:2b:26:56:a4:1d:65:dd:49:a3:c5:90:25:7d:10:
         d1:05:4a:be:7e:d2:5c:ee:ae:ec:22:40:61:5b:2e:31:af:de:
         3d:71:ae:d5:66:e3:65:74:6f:bd:c3:22:64:75:22:3c:d7:b4:
         61:dd:48:22:e1:c0:28:77:61:88:de:6f:bc:7a:76:20:fe:fc:
         9c:14:ce:49
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEFSxAVmdig7CUkLKQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY1N2UwMTYtM2YwMC00MjMwLTg3NTEtNDg0NTczZGRm
OGRlMB4XDTIzMDMxODEyMDAwMFoXDTI4MDYyNjA0MDAwMFowLzEtMCsGA1UEAxMk
MWM4ZWYyYmItYTVjMS00N2NkLWExMTEtNzNmYzllNTg1OWY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8v52fSN1P0gSrKn6IZmprzAwgy/dZCEXRCqm
jkzFfkBr59pXKG9LmDPTWmA6mzeKQmCrhC3DUageU5+Cc1qvqGI1TpaADCsTi7xv
Nm8BGl7cwoUZV8Kh/i4zhV35ttj75cdxNmzgZG+/1WIUgf0ie+EzUGTWVIphdVp9
wRT8ZRhDMwQsHbTunIoLlGzTCFkxbsI6kbfH7XyUP+s/itBrfts/VWfjd4uZliSO
7De0QY0QkkiH/9Ixc3qbzAxu4uiQVmnWt9mWL4cJeur931wnDgY3Z/cdtu9f3kSt
0S+Ylr26+TxbwsE0edfRfXDhu6uVuta0ewaEnHqmRh41kTmkOQIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFOF369xMbAIzVIxyACXWlX7yeG24MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjU3
ZTAxNi0zZjAwLTQyMzAtODc1MS00ODQ1NzNkZGY4ZGUvZDMzZDk4YmUtOGE1OC0z
NGJiLWE2YzAtMjEzNGM5NjYxNzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY1N2UwMTYtM2YwMC00MjMwLTg3
NTEtNDg0NTczZGRmOGRlLzZmNTdlMDE2LTNmMDAtNDIzMC04NzUxLTQ4NDU3M2Rk
ZjhkZS5jcmwwHwYDVR0jBBgwFoAUsEqstM0X/PwTnUUnc2fLgvZiSPMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjU3ZTAxNi0zZjAwLTQyMzAtODc1MS00ODQ1
NzNkZGY4ZGUuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAQitsMA0E
AgACMAcDBQAmB/d4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBACADiLTb10Qb169rtfAosZiDtYZwHCW5iFvZ
C5tWreexhgmJzD5FgYKZKQX0ulkoKkNKQxVwDSLkDHMHPf3my98RyjaWex8HFzHI
gDcSAVXhh+cRdRY1Dls3n3gkKZwpvi7x0Y2/zIUJqfuoYn8iXWXS1T5MP5ho9OmZ
QNwZlM7W4QEHjkcDRdlSth8BiU7vA5cvHhRJ5ExPjQhP6PAJ9imXdPXGrB0cZcM3
AuVwRFDB3t4wEKMI5PArJlakHWXdSaPFkCV9ENEFSr5+0lzuruwiQGFbLjGv3j1x
rtVm42V0b73DImR1IjzXtGHdSCLhwCh3YYjeb7x6diD+/JwUzkk=
-----END CERTIFICATE-----