Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349/05567ee7-fa40-33dc-a25b-c20b602d99c0.roa
File:                     05567ee7-fa40-33dc-a25b-c20b602d99c0.roa (raw, json)
Hash identifier:          gcuUlkt/9mkV+tA+J4H8EnvJS1m1YZYyJ7aPrFyVUQg=
Subject key identifier:   FD:72:A3:25:C1:BA:51:82:A8:92:34:EE:13:59:9B:4A:1A:13:99:DB
Certificate issuer:       /CN=9389c3cd-af8c-44d4-ae71-4e8073846349
Certificate serial:       010D0C9F4328583F9BF35C4FCC525DD18AF5BD60
Authority key identifier: 42:D6:AD:13:6E:C7:EA:DF:FD:F6:D1:B3:56:21:BA:A9:89:BD:96:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349/05567ee7-fa40-33dc-a25b-c20b602d99c0.roa
Signing time:             Mon 17 Oct 2022 12:00:00 +0000
ROA not before:           Mon 17 Oct 2022 12:00:00 +0000
ROA not after:            Tue 22 Nov 2022 05:00:00 +0000
asID:                     62785
IP address blocks:        172.96.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:9b:f3:5c:4f:cc:52:5d:d1:8a:f5:bd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9389c3cd-af8c-44d4-ae71-4e8073846349
        Validity
            Not Before: Oct 17 12:00:00 2022 GMT
            Not After : Nov 22 05:00:00 2022 GMT
        Subject: CN=4e8c8433-9e6e-4105-8ff5-03c2999334d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:dd:a0:2c:8c:f1:db:7d:20:3d:50:6d:7f:55:
                    c6:d5:4d:3d:c0:3a:3e:da:a9:bf:1f:9d:9d:84:59:
                    5a:2b:45:db:7a:00:6d:de:3f:f4:0e:5a:80:bb:17:
                    f0:58:ea:61:db:45:61:43:cd:f9:ef:11:84:ce:fb:
                    40:d9:78:0e:94:31:89:8f:46:70:58:14:08:32:3d:
                    3a:41:16:4e:bb:15:e5:2d:06:5a:24:28:50:3e:ce:
                    07:b2:ae:d5:6e:c6:f1:14:5e:98:66:dc:41:bf:8f:
                    af:da:2e:99:90:fd:0f:e1:a3:d7:2b:3f:cc:c4:bc:
                    72:53:b6:9f:a3:3c:ba:28:71:f6:f5:52:98:46:09:
                    f6:4d:50:fe:62:36:f5:1e:3b:b6:59:94:dd:bf:12:
                    dc:d2:0b:c8:c9:30:26:91:0b:9d:b7:35:07:60:86:
                    0e:c8:83:31:11:a1:58:e9:ca:1d:c2:11:c8:32:b2:
                    b7:95:c0:39:41:4c:18:9e:35:78:ef:9c:2e:54:e5:
                    6c:73:9c:4d:80:c0:d5:66:6a:62:11:0d:73:47:33:
                    8a:3a:55:67:a7:b1:9f:4e:81:4b:f5:b4:67:28:2b:
                    38:22:6a:57:c1:87:8e:8e:fd:f5:dc:2a:cd:2a:ea:
                    12:f2:51:93:9b:20:02:f3:bd:19:ef:7b:96:ff:67:
                    9f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:72:A3:25:C1:BA:51:82:A8:92:34:EE:13:59:9B:4A:1A:13:99:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349/05567ee7-fa40-33dc-a25b-c20b602d99c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349/9389c3cd-af8c-44d4-ae71-4e8073846349.crl

            X509v3 Authority Key Identifier:
                keyid:42:D6:AD:13:6E:C7:EA:DF:FD:F6:D1:B3:56:21:BA:A9:89:BD:96:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.96.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:9b:1a:c1:8a:8a:8f:2b:1b:7c:3e:b5:91:e9:e0:15:0a:30:
         75:13:69:97:48:d7:fd:0c:2f:aa:dd:02:39:f6:da:f5:72:f8:
         0f:46:ae:a7:3e:83:24:5c:df:f0:76:d3:ef:a5:2e:3e:0e:d2:
         98:82:60:04:ef:c8:78:74:34:6e:ae:7d:ba:09:8f:ef:c4:61:
         bf:e6:ea:f1:11:ea:66:57:8b:20:de:28:24:dc:41:3a:e0:40:
         cc:81:ab:18:a3:f9:77:25:25:5e:27:9f:4c:95:2c:8a:ad:bc:
         6c:9b:14:9a:f8:cf:0f:39:6b:59:be:b0:f7:a0:49:ec:04:11:
         a1:73:68:5d:2f:aa:2f:a1:62:79:94:83:90:9d:32:0f:59:01:
         f1:27:cc:46:77:4c:7a:4e:df:a7:70:f3:7f:b8:39:a2:64:0e:
         c0:a7:81:9e:e9:53:6e:d7:e5:3d:b9:09:88:4f:d5:25:b7:8d:
         21:8b:67:68:9e:02:dc:ba:ef:96:88:3e:1e:fb:2d:5d:ff:b0:
         40:15:b3:59:81:52:1f:41:14:45:c6:19:36:85:32:85:70:6f:
         71:5e:31:92:a5:8f:49:b7:e9:c0:2c:ab:5e:6e:c4:83:1f:06:
         4b:b5:3b:2f:ac:b1:da:98:e4:46:18:2f:b5:91:5f:e3:f6:10:
         de:0d:c2:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD+b81xPzFJd0Yr1vWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM4OWMzY2QtYWY4Yy00NGQ0LWFlNzEtNGU4MDczODQ2
MzQ5MB4XDTIyMTAxNzEyMDAwMFoXDTIyMTEyMjA1MDAwMFowLzEtMCsGA1UEAxMk
NGU4Yzg0MzMtOWU2ZS00MTA1LThmZjUtMDNjMjk5OTMzNGQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN2gLIzx230gPVBtf1XG1U09wDo+2qm/H52d
hFlaK0XbegBt3j/0DlqAuxfwWOph20VhQ8357xGEzvtA2XgOlDGJj0ZwWBQIMj06
QRZOuxXlLQZaJChQPs4Hsq7VbsbxFF6YZtxBv4+v2i6ZkP0P4aPXKz/MxLxyU7af
ozy6KHH29VKYRgn2TVD+Yjb1Hju2WZTdvxLc0gvIyTAmkQudtzUHYIYOyIMxEaFY
6codwhHIMrK3lcA5QUwYnjV475wuVOVsc5xNgMDVZmpiEQ1zRzOKOlVnp7GfToFL
9bRnKCs4ImpXwYeOjv313CrNKuoS8lGTmyAC870Z73uW/2efBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP1yoyXBulGCqJI07hNZm0oaE5nbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85Mzg5
YzNjZC1hZjhjLTQ0ZDQtYWU3MS00ZTgwNzM4NDYzNDkvMDU1NjdlZTctZmE0MC0z
M2RjLWEyNWItYzIwYjYwMmQ5OWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM4OWMzY2QtYWY4Yy00NGQ0LWFl
NzEtNGU4MDczODQ2MzQ5LzkzODljM2NkLWFmOGMtNDRkNC1hZTcxLTRlODA3Mzg0
NjM0OS5jcmwwHwYDVR0jBBgwFoAUQtatE27H6t/99tGzViG6qYm9liUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85Mzg5YzNjZC1hZjhjLTQ0ZDQtYWU3MS00ZTgw
NzM4NDYzNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErGBgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHKbGsGKio8rG3w+tZHp4BUKMHUTaZdI1/0ML6rdAjn22vVy+A9Grqc+
gyRc3/B20++lLj4O0piCYATvyHh0NG6ufboJj+/EYb/m6vER6mZXiyDeKCTcQTrg
QMyBqxij+XclJV4nn0yVLIqtvGybFJr4zw85a1m+sPegSewEEaFzaF0vqi+hYnmU
g5CdMg9ZAfEnzEZ3THpO36dw83+4OaJkDsCngZ7pU27X5T25CYhP1SW3jSGLZ2ie
Aty675aIPh77LV3/sEAVs1mBUh9BFEXGGTaFMoVwb3FeMZKlj0m36cAsq15uxIMf
Bku1Oy+ssdqY5EYYL7WRX+P2EN4NwnU=
-----END CERTIFICATE-----