Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0/197ca69c-f6d5-3b63-ae60-623cff8b7efb.roa
File:                     197ca69c-f6d5-3b63-ae60-623cff8b7efb.roa (raw, json)
Hash identifier:          J1MqOm3UpuuNfMEh9xT4NXFb++LZhuDGQwMgsU+dX9o=
Subject key identifier:   BA:37:3A:5E:54:52:1E:A8:9A:D1:20:89:0D:64:63:7B:DD:06:CA:3A
Certificate issuer:       /CN=b450e5ef-41c2-4834-b6b3-6d1a1efe28f0
Certificate serial:       010D0C9F4328584930DE638F6EE0BCA018225840
Authority key identifier: 44:70:52:90:13:82:B9:35:9C:3D:3F:EF:73:C2:83:91:9B:95:22:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0/197ca69c-f6d5-3b63-ae60-623cff8b7efb.roa
Signing time:             Sat 15 Mar 2025 01:00:39 +0000
ROA not before:           Sat 15 Mar 2025 01:00:39 +0000
ROA not after:            Fri 13 Jun 2025 01:00:39 +0000
asID:                     557
IP address blocks:        209.222.192.0/19 maxlen: 24
                          2610:48::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:de:63:8f:6e:e0:bc:a0:18:22:58:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b450e5ef-41c2-4834-b6b3-6d1a1efe28f0
        Validity
            Not Before: Mar 15 01:00:39 2025 GMT
            Not After : Jun 13 01:00:39 2025 GMT
        Subject: CN=e55ca23b-f793-4edf-b28b-f0ac1ea9a2f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2c:c8:c6:cb:2a:f3:6a:ce:27:d8:ca:47:96:
                    6f:bf:14:b8:62:0e:52:4b:11:90:3c:9f:71:31:14:
                    6d:a0:c1:fb:6d:7b:8d:5a:e2:06:1d:c8:e4:a4:b1:
                    58:a3:13:d3:51:3e:e0:4a:05:29:d6:e7:1c:a0:74:
                    68:ea:45:53:10:8e:c8:e1:cd:a4:8f:1e:43:35:6d:
                    2a:92:0a:c9:4c:d7:68:65:f2:e3:d4:05:e5:59:e5:
                    95:44:18:6c:2e:62:cc:92:15:f3:48:bd:b3:da:ba:
                    2a:2f:1e:9f:7a:25:49:71:04:c0:ab:b5:de:bf:2c:
                    ff:05:c6:b3:55:bc:59:1a:3d:7e:73:1a:6b:bf:c8:
                    ae:d3:05:e6:ed:6d:cb:8a:33:f5:71:96:73:70:29:
                    c2:ea:9b:22:d1:86:b4:ec:96:22:e9:40:68:f9:3a:
                    2f:2c:3a:2d:13:10:43:a7:26:cd:cd:b8:d7:7a:aa:
                    5c:59:e9:3a:d7:a8:7c:bf:52:d8:6e:43:32:94:22:
                    01:05:9a:4e:9b:19:e6:f3:1f:93:d0:2d:36:9a:63:
                    48:a5:94:6a:52:2d:e1:90:b0:1b:a8:ca:08:8e:ca:
                    d4:d5:e5:e3:e5:50:78:aa:f6:2e:05:59:d7:19:69:
                    4a:f9:0c:8f:33:38:13:d7:f7:60:f5:d5:ac:87:29:
                    0a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:37:3A:5E:54:52:1E:A8:9A:D1:20:89:0D:64:63:7B:DD:06:CA:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0/197ca69c-f6d5-3b63-ae60-623cff8b7efb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0.crl

            X509v3 Authority Key Identifier:
                keyid:44:70:52:90:13:82:B9:35:9C:3D:3F:EF:73:C2:83:91:9B:95:22:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.222.192.0/19
                IPv6:
                  2610:48::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:63:9f:05:47:88:3f:80:85:23:37:e4:3b:90:23:2c:7f:57:
         9d:99:f1:a7:c5:72:c2:d2:37:9f:ca:6e:cc:f2:ba:5c:3b:ab:
         09:bf:b8:8f:ad:13:93:ec:e1:72:9f:48:78:fc:88:66:da:e9:
         ff:ab:11:5b:3f:6d:d8:fb:37:a3:51:fa:9a:99:e9:7a:e2:e0:
         d3:79:8f:10:6f:04:12:5d:79:47:c7:10:84:31:d6:7f:27:07:
         fa:c9:d7:e7:f8:15:7c:70:2c:a6:b7:90:9f:27:ef:d4:37:3b:
         99:3e:de:02:68:63:73:4e:17:71:34:c1:6b:85:f1:c3:ea:1d:
         79:b1:39:8a:52:cc:3b:fa:52:33:22:69:93:58:50:ae:b1:d8:
         e6:a8:a1:78:cd:f9:f3:ea:f0:de:64:a3:e2:69:db:49:71:49:
         76:98:6c:a6:05:e8:82:3a:dc:af:80:da:0f:ea:fd:25:c2:9b:
         f3:34:0f:94:2b:f3:f4:0c:a5:68:61:0f:59:d2:88:5d:c2:cc:
         05:81:a9:79:b4:29:84:f3:2e:ad:47:a7:6a:dc:bb:c4:82:13:
         fd:3e:02:70:08:80:29:1e:af:95:e6:36:8b:2b:ab:a5:4c:d7:
         81:37:1e:cf:b2:e8:51:14:dc:23:93:b7:12:d1:11:ce:b0:ec:
         23:fa:6d:d5
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEkw3mOPbuC8oBgiWEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQ1MGU1ZWYtNDFjMi00ODM0LWI2YjMtNmQxYTFlZmUy
OGYwMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk
ZTU1Y2EyM2ItZjc5My00ZWRmLWIyOGItZjBhYzFlYTlhMmY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCzIxssq82rOJ9jKR5ZvvxS4Yg5SSxGQPJ9x
MRRtoMH7bXuNWuIGHcjkpLFYoxPTUT7gSgUp1uccoHRo6kVTEI7I4c2kjx5DNW0q
kgrJTNdoZfLj1AXlWeWVRBhsLmLMkhXzSL2z2roqLx6feiVJcQTAq7Xevyz/Bcaz
VbxZGj1+cxprv8iu0wXm7W3LijP1cZZzcCnC6psi0Ya07JYi6UBo+TovLDotExBD
pybNzbjXeqpcWek616h8v1LYbkMylCIBBZpOmxnm8x+T0C02mmNIpZRqUi3hkLAb
qMoIjsrU1eXj5VB4qvYuBVnXGWlK+QyPMzgT1/dg9dWshykKmwIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFLo3Ol5UUh6omtEgiQ1kY3vdBso6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNDUw
ZTVlZi00MWMyLTQ4MzQtYjZiMy02ZDFhMWVmZTI4ZjAvMTk3Y2E2OWMtZjZkNS0z
YjYzLWFlNjAtNjIzY2ZmOGI3ZWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjQ1MGU1ZWYtNDFjMi00ODM0LWI2
YjMtNmQxYTFlZmUyOGYwL2I0NTBlNWVmLTQxYzItNDgzNC1iNmIzLTZkMWExZWZl
MjhmMC5jcmwwHwYDVR0jBBgwFoAURHBSkBOCuTWcPT/vc8KDkZuVIr0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iNDUwZTVlZi00MWMyLTQ4MzQtYjZiMy02ZDFh
MWVmZTI4ZjAuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQF0d7AMA0E
AgACMAcDBQAmEABIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAFdjnwVHiD+AhSM35DuQIyx/V52Z8afFcsLS
N5/Kbszyulw7qwm/uI+tE5Ps4XKfSHj8iGba6f+rEVs/bdj7N6NR+pqZ6Xri4NN5
jxBvBBJdeUfHEIQx1n8nB/rJ1+f4FXxwLKa3kJ8n79Q3O5k+3gJoY3NOF3E0wWuF
8cPqHXmxOYpSzDv6UjMiaZNYUK6x2OaooXjN+fPq8N5ko+Jp20lxSXaYbKYF6II6
3K+A2g/q/SXCm/M0D5Qr8/QMpWhhD1nSiF3CzAWBqXm0KYTzLq1Hp2rcu8SCE/0+
AnAIgCker5XmNosrq6VM14E3Hs+y6FEU3COTtxLREc6w7CP6bdU=
-----END CERTIFICATE-----