Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7d82b70a-1d8c-4526-b2c3-d9e15479f4c0/ee51ab53-64bd-3c1c-99de-8662d94ce94e.roa
File:                     ee51ab53-64bd-3c1c-99de-8662d94ce94e.roa (raw, json)
Hash identifier:          apam0xDOPWyeoxpyaVuDcPKCn2ojzBjAQo01s2XsLb4=
Subject key identifier:   DA:E1:C3:B7:DD:C4:C6:18:15:76:B6:80:53:7F:AF:2B:28:12:16:2B
Certificate issuer:       /CN=7d82b70a-1d8c-4526-b2c3-d9e15479f4c0
Certificate serial:       010D0C9F4328584071B87C535FD2D6F5999E0980
Authority key identifier: 70:2D:81:B2:BA:38:CB:AD:32:55:D6:96:44:BE:BF:46:E8:4A:8F:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7d82b70a-1d8c-4526-b2c3-d9e15479f4c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7d82b70a-1d8c-4526-b2c3-d9e15479f4c0/ee51ab53-64bd-3c1c-99de-8662d94ce94e.roa
Signing time:             Thu 31 Dec 2020 14:58:01 +0000
ROA not before:           Thu 31 Dec 2020 14:58:01 +0000
ROA not after:            Mon 07 Apr 2025 04:00:00 +0000
asID:                     9312
IP address blocks:        74.120.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:71:b8:7c:53:5f:d2:d6:f5:99:9e:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d82b70a-1d8c-4526-b2c3-d9e15479f4c0
        Validity
            Not Before: Dec 31 14:58:01 2020 GMT
            Not After : Apr  7 04:00:00 2025 GMT
        Subject: CN=1ea498f8-7b7e-4fe2-973d-6b5f07439f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ed:a7:51:4a:8f:40:5c:fa:14:2d:9a:ce:60:
                    62:67:d1:6d:89:2c:8b:e3:65:1e:2c:d5:7e:d1:63:
                    82:8f:33:fe:82:75:f8:12:46:68:cc:cc:36:4b:78:
                    c7:fa:cc:21:8f:18:90:40:45:ed:81:0c:44:8b:b5:
                    a6:da:9e:fa:b6:72:dc:2d:d7:61:a6:85:01:3e:4e:
                    3b:73:d8:43:3f:b0:e5:69:b2:a0:44:ad:7a:11:77:
                    fc:d1:90:f5:e9:02:91:b9:d9:32:8c:22:e5:d1:13:
                    ad:1e:3b:fc:80:dd:e2:e9:7c:92:62:18:4a:c0:98:
                    7a:d6:8b:e5:4d:f8:7d:0c:1e:87:84:9b:12:3b:40:
                    d7:a4:8d:7c:9f:fd:a0:6a:04:25:a4:8e:3d:63:d5:
                    94:88:41:36:1a:37:76:d3:be:2d:f7:58:6d:a9:c5:
                    1e:c5:14:ff:f3:9b:97:ef:bb:9d:1c:48:bd:bf:fc:
                    09:ef:b9:5b:57:5c:8d:89:89:f2:6a:48:1d:7a:bf:
                    84:c4:9e:53:14:36:2c:0a:32:72:8f:38:d8:d6:36:
                    1d:31:c1:d8:9c:da:22:76:c1:6b:50:0d:13:e1:0e:
                    19:5a:12:e9:8f:c3:3c:ba:ac:95:bf:d6:53:65:ee:
                    12:a4:d2:47:e2:80:9d:1e:23:cb:df:11:7c:1d:b7:
                    33:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E1:C3:B7:DD:C4:C6:18:15:76:B6:80:53:7F:AF:2B:28:12:16:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7d82b70a-1d8c-4526-b2c3-d9e15479f4c0/ee51ab53-64bd-3c1c-99de-8662d94ce94e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7d82b70a-1d8c-4526-b2c3-d9e15479f4c0/7d82b70a-1d8c-4526-b2c3-d9e15479f4c0.crl

            X509v3 Authority Key Identifier:
                keyid:70:2D:81:B2:BA:38:CB:AD:32:55:D6:96:44:BE:BF:46:E8:4A:8F:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7d82b70a-1d8c-4526-b2c3-d9e15479f4c0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:21:1e:98:ea:b0:62:ad:f7:25:04:39:0e:80:e1:82:1e:63:
         f6:c8:0f:a1:4e:9e:1a:a7:3e:be:a0:24:f1:f2:2a:35:e3:46:
         50:ac:88:c1:74:a6:ce:01:78:b4:4a:3e:af:65:5d:62:2d:0d:
         df:c5:d4:65:4c:ff:8d:d4:c7:84:fa:2a:d1:ed:45:a8:cc:e0:
         1a:32:b4:21:6a:a0:b4:bc:13:e1:d7:a6:85:d2:0a:9b:c8:9b:
         57:ea:b2:80:7f:f8:84:77:1f:97:38:77:14:61:a0:ec:83:44:
         79:6b:9f:e0:8c:c0:bb:93:53:52:c7:d3:01:aa:72:df:a5:79:
         06:5a:07:48:6f:14:f7:d5:e4:d8:c9:5a:43:1f:66:b8:12:80:
         15:b4:6a:eb:35:8f:50:e3:fe:18:49:58:b8:ae:9f:15:80:99:
         9f:6d:4f:ed:51:c7:c5:1c:64:47:a4:73:35:ba:1b:33:b7:26:
         8e:d3:46:57:bc:6f:dc:ed:60:22:23:97:89:23:6e:01:05:6e:
         8a:c1:46:ca:31:e0:bb:17:fc:02:80:e4:fc:a2:ff:09:87:5f:
         32:c7:17:f5:4d:b4:12:0d:13:33:c3:39:fa:8f:2a:01:b9:ca:
         75:e2:0f:c2:f6:09:a1:12:68:3b:8e:4c:6b:93:ec:b0:1e:1e:
         e9:f0:4b:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEBxuHxTX9LW9ZmeCYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2Q4MmI3MGEtMWQ4Yy00NTI2LWIyYzMtZDllMTU0Nzlm
NGMwMB4XDTIwMTIzMTE0NTgwMVoXDTI1MDQwNzA0MDAwMFowLzEtMCsGA1UEAxMk
MWVhNDk4ZjgtN2I3ZS00ZmUyLTk3M2QtNmI1ZjA3NDM5ZjNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxO2nUUqPQFz6FC2azmBiZ9FtiSyL42UeLNV+
0WOCjzP+gnX4EkZozMw2S3jH+swhjxiQQEXtgQxEi7Wm2p76tnLcLddhpoUBPk47
c9hDP7DlabKgRK16EXf80ZD16QKRudkyjCLl0ROtHjv8gN3i6XySYhhKwJh61ovl
Tfh9DB6HhJsSO0DXpI18n/2gagQlpI49Y9WUiEE2Gjd2074t91htqcUexRT/85uX
77udHEi9v/wJ77lbV1yNiYnyakgder+ExJ5TFDYsCjJyjzjY1jYdMcHYnNoidsFr
UA0T4Q4ZWhLpj8M8uqyVv9ZTZe4SpNJH4oCdHiPL3xF8HbczDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNrhw7fdxMYYFXa2gFN/rysoEhYrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83ZDgy
YjcwYS0xZDhjLTQ1MjYtYjJjMy1kOWUxNTQ3OWY0YzAvZWU1MWFiNTMtNjRiZC0z
YzFjLTk5ZGUtODY2MmQ5NGNlOTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2Q4MmI3MGEtMWQ4Yy00NTI2LWIy
YzMtZDllMTU0NzlmNGMwLzdkODJiNzBhLTFkOGMtNDUyNi1iMmMzLWQ5ZTE1NDc5
ZjRjMC5jcmwwHwYDVR0jBBgwFoAUcC2Bsro4y60yVdaWRL6/RuhKjwYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83ZDgyYjcwYS0xZDhjLTQ1MjYtYjJjMy1kOWUx
NTQ3OWY0YzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnh4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGkhHpjqsGKt9yUEOQ6A4YIeY/bID6FOnhqnPr6gJPHyKjXjRlCsiMF0
ps4BeLRKPq9lXWItDd/F1GVM/43Ux4T6KtHtRajM4BoytCFqoLS8E+HXpoXSCpvI
m1fqsoB/+IR3H5c4dxRhoOyDRHlrn+CMwLuTU1LH0wGqct+leQZaB0hvFPfV5NjJ
WkMfZrgSgBW0aus1j1Dj/hhJWLiunxWAmZ9tT+1Rx8UcZEekczW6GzO3Jo7TRle8
b9ztYCIjl4kjbgEFborBRsox4LsX/AKA5Pyi/wmHXzLHF/VNtBINEzPDOfqPKgG5
ynXiD8L2CaESaDuOTGuT7LAeHunwS9U=
-----END CERTIFICATE-----