Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/e19ccd90-e78d-3512-91aa-3ea1f5875b0c.roa
File:                     e19ccd90-e78d-3512-91aa-3ea1f5875b0c.roa (raw, json)
Hash identifier:          OVU4r+HNrpmQB6i8oQL47vDW6KFCCpwl8RXjSTIDy/8=
Subject key identifier:   80:5F:D9:EB:A0:1D:BB:C4:27:46:81:C4:CD:E4:D5:16:8F:75:33:26
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F4328583DD472B90355C350EC5FBB6B00
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/e19ccd90-e78d-3512-91aa-3ea1f5875b0c.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Tue 31 Jan 2023 05:00:00 +0000
asID:                     23352
IP address blocks:        206.53.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d4:72:b9:03:55:c3:50:ec:5f:bb:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Jan 31 05:00:00 2023 GMT
        Subject: CN=ac82edf3-4adf-4805-a7bf-b39a9fc063e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:90:ca:3e:91:f1:41:aa:40:5a:80:dd:0d:79:
                    7a:2b:96:14:7d:4c:69:7b:1f:f0:f6:ea:c8:c1:2a:
                    dc:da:e8:fe:b7:22:74:18:69:6f:be:39:c0:71:c3:
                    e9:43:ef:ca:f0:25:0d:0c:2e:7c:ec:4a:99:56:f3:
                    20:14:cc:fd:28:6c:63:23:7a:db:45:ca:ce:be:fb:
                    bb:4f:2f:71:57:9a:66:68:85:11:5b:68:7b:10:89:
                    d7:d0:f7:d9:a3:86:44:dd:f8:42:a4:79:f5:f3:8d:
                    cc:55:42:18:d5:de:7b:dd:9a:e8:cf:4a:87:eb:fe:
                    ef:38:18:02:d3:6b:eb:c7:72:78:6c:d3:6d:ab:b2:
                    50:31:60:c9:77:50:90:0c:cc:ec:7e:3a:d2:18:76:
                    5a:fd:6e:c6:b5:99:ab:d7:b3:21:ed:d1:b0:09:00:
                    ed:99:2c:06:49:bc:15:81:98:e6:66:79:e8:5f:1b:
                    d5:df:d2:af:25:7d:7b:0d:85:03:85:da:05:43:3a:
                    37:df:35:04:b3:28:8d:2b:fd:5e:82:79:6e:18:ec:
                    b4:c2:77:07:36:bb:4d:0d:fb:ac:47:ff:3d:c8:1d:
                    d9:3a:49:b8:3f:f9:d9:ef:2d:b8:f6:80:7f:85:b3:
                    2d:2a:99:23:1b:cc:5b:16:09:6c:a7:53:22:b9:e9:
                    79:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5F:D9:EB:A0:1D:BB:C4:27:46:81:C4:CD:E4:D5:16:8F:75:33:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/e19ccd90-e78d-3512-91aa-3ea1f5875b0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:3a:48:b4:24:73:f9:7a:4c:47:17:09:c2:bd:1e:39:85:4d:
         f6:55:65:51:a7:8c:ec:91:6a:f9:ba:76:4a:1b:b2:a8:11:ea:
         47:7d:94:9d:dd:b4:a8:88:f5:56:9b:49:e3:3e:51:fe:f1:2f:
         6a:92:75:07:b9:f6:ed:19:bd:e5:e0:2b:2d:0d:f1:fc:39:c2:
         56:6a:58:3e:5e:27:05:6f:42:aa:50:b2:ee:d5:a9:54:6f:16:
         41:c0:24:bb:e9:d1:30:5d:57:10:31:84:1d:9e:63:21:c2:1d:
         b3:a4:78:7a:50:32:71:4d:df:bb:8b:14:cc:55:30:61:ab:f4:
         1d:6e:91:cc:bf:3c:dc:c8:a2:01:1a:3f:1f:37:73:d8:c1:de:
         a1:d1:79:ee:65:f1:f0:12:9e:bb:25:83:68:ce:aa:db:3b:f9:
         05:f1:58:02:31:87:d5:5a:88:4d:53:3d:e1:91:ba:b4:90:92:
         7c:55:4a:8e:da:b9:a7:74:2e:d8:1e:82:d7:03:40:14:1e:b5:
         1f:3d:d0:14:52:1f:ad:a4:ef:b7:d6:37:46:b7:d9:44:da:2d:
         54:79:53:83:55:8d:7b:75:71:25:7e:8f:0f:ae:88:fc:8b:55:
         e3:93:48:4d:c8:fd:38:d6:dd:9a:78:4f:77:5e:5f:2c:c7:4e:
         a7:41:dc:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD3UcrkDVcNQ7F+7awAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmY2ZjZkYmQtNWExZi00OGIxLWFjN2EtN2I3YzAzNmM3
MGYwMB4XDTIxMTIxMzE1MTgwMFoXDTIzMDEzMTA1MDAwMFowLzEtMCsGA1UEAxMk
YWM4MmVkZjMtNGFkZi00ODA1LWE3YmYtYjM5YTlmYzA2M2U5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZDKPpHxQapAWoDdDXl6K5YUfUxpex/w9urI
wSrc2uj+tyJ0GGlvvjnAccPpQ+/K8CUNDC587EqZVvMgFMz9KGxjI3rbRcrOvvu7
Ty9xV5pmaIURW2h7EInX0PfZo4ZE3fhCpHn1843MVUIY1d573Zroz0qH6/7vOBgC
02vrx3J4bNNtq7JQMWDJd1CQDMzsfjrSGHZa/W7GtZmr17Mh7dGwCQDtmSwGSbwV
gZjmZnnoXxvV39KvJX17DYUDhdoFQzo33zUEsyiNK/1egnluGOy0wncHNrtNDfus
R/89yB3ZOkm4P/nZ7y249oB/hbMtKpkjG8xbFglsp1Miuel5qwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIBf2eugHbvEJ0aBxM3k1RaPdTMmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mZjZm
NmRiZC01YTFmLTQ4YjEtYWM3YS03YjdjMDM2YzcwZjAvZTE5Y2NkOTAtZTc4ZC0z
NTEyLTkxYWEtM2VhMWY1ODc1YjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmY2ZjZkYmQtNWExZi00OGIxLWFj
N2EtN2I3YzAzNmM3MGYwL2ZmNmY2ZGJkLTVhMWYtNDhiMS1hYzdhLTdiN2MwMzZj
NzBmMC5jcmwwHwYDVR0jBBgwFoAUtiZZXutxL1WTpJ9RO8h8b3R0PQUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mZjZmNmRiZC01YTFmLTQ4YjEtYWM3YS03Yjdj
MDM2YzcwZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzjU/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEg6SLQkc/l6TEcXCcK9HjmFTfZVZVGnjOyRavm6dkobsqgR6kd9lJ3d
tKiI9VabSeM+Uf7xL2qSdQe59u0ZveXgKy0N8fw5wlZqWD5eJwVvQqpQsu7VqVRv
FkHAJLvp0TBdVxAxhB2eYyHCHbOkeHpQMnFN37uLFMxVMGGr9B1ukcy/PNzIogEa
Px83c9jB3qHRee5l8fASnrslg2jOqts7+QXxWAIxh9VaiE1TPeGRurSQknxVSo7a
uad0LtgegtcDQBQetR890BRSH62k77fWN0a32UTaLVR5U4NVjXt1cSV+jw+uiPyL
VeOTSE3I/TjW3Zp4T3deXyzHTqdB3Oc=
-----END CERTIFICATE-----