Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/834a133c-cb8e-4375-b34d-1e934ae9212c/01e086cf-6319-3144-ad6d-d5e7280a099f.roa
File:                     01e086cf-6319-3144-ad6d-d5e7280a099f.roa (raw, json)
Hash identifier:          XVUeMGcH3pTMyppNwNBuhSzWmQGt0Z1Q2DOmxm6ywCE=
Subject key identifier:   01:77:9B:EC:0E:E4:3A:CC:CF:30:31:2C:EE:22:16:E3:B3:36:6A:92
Certificate issuer:       /CN=834a133c-cb8e-4375-b34d-1e934ae9212c
Certificate serial:       010D0C9F4328583EA3A1BDF8927CE2D893C78240
Authority key identifier: 1E:C5:CA:1D:AE:D3:A3:88:FD:59:1C:CA:FF:C7:22:EF:E7:E0:79:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/834a133c-cb8e-4375-b34d-1e934ae9212c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/834a133c-cb8e-4375-b34d-1e934ae9212c/01e086cf-6319-3144-ad6d-d5e7280a099f.roa
Signing time:             Wed 20 Jul 2022 11:07:06 +0000
ROA not before:           Wed 20 Jul 2022 11:07:06 +0000
ROA not after:            Tue 22 Oct 2024 04:00:00 +0000
asID:                     61317
IP address blocks:        144.162.18.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:a3:a1:bd:f8:92:7c:e2:d8:93:c7:82:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=834a133c-cb8e-4375-b34d-1e934ae9212c
        Validity
            Not Before: Jul 20 11:07:06 2022 GMT
            Not After : Oct 22 04:00:00 2024 GMT
        Subject: CN=0162e1fa-2757-45fc-850d-3815f1bb3d45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:df:92:1d:aa:c7:6a:5b:c4:89:50:7c:2b:79:
                    1e:fc:1e:7e:d2:c8:7a:df:78:ee:8a:cc:62:34:96:
                    fe:31:0e:df:7c:89:9e:86:8a:f2:48:0d:f9:8d:ff:
                    7b:9f:6c:24:ca:7a:a4:6b:cc:a0:a6:c1:8d:61:4a:
                    f2:ef:15:8d:0b:4c:14:09:cc:ba:1f:dc:d4:da:4e:
                    4d:53:ae:98:0f:20:b9:7d:5a:12:e3:32:f0:6f:9c:
                    3d:a1:ec:a8:bc:a8:c9:f1:70:30:df:e6:86:fe:ba:
                    86:68:ef:d9:8c:c9:de:d5:5c:19:19:1d:33:81:c4:
                    40:2e:01:a8:bb:92:3e:4f:65:2a:e7:19:86:5d:2e:
                    00:fe:31:bb:68:f2:1f:05:5f:0e:49:23:ea:44:9f:
                    6d:0e:5d:69:19:97:47:9a:62:d1:d1:ee:76:ec:ba:
                    ef:18:2d:c8:25:33:cc:f7:d5:bc:53:94:c9:59:2a:
                    39:c1:20:fa:08:1e:f2:a2:6f:f3:9f:70:4e:d7:2c:
                    26:4c:9c:7b:0b:d7:6a:23:24:21:6e:ef:24:d6:9c:
                    ad:d6:07:e8:ba:15:9a:2d:01:57:e7:86:ee:00:c1:
                    d4:d4:4c:03:97:0f:6d:53:d2:c5:eb:ae:0c:56:f8:
                    01:da:52:40:14:de:14:3f:50:81:da:5e:e1:b6:5f:
                    ac:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:77:9B:EC:0E:E4:3A:CC:CF:30:31:2C:EE:22:16:E3:B3:36:6A:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/834a133c-cb8e-4375-b34d-1e934ae9212c/01e086cf-6319-3144-ad6d-d5e7280a099f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/834a133c-cb8e-4375-b34d-1e934ae9212c/834a133c-cb8e-4375-b34d-1e934ae9212c.crl

            X509v3 Authority Key Identifier:
                keyid:1E:C5:CA:1D:AE:D3:A3:88:FD:59:1C:CA:FF:C7:22:EF:E7:E0:79:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/834a133c-cb8e-4375-b34d-1e934ae9212c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.162.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:75:8d:70:a6:8e:1c:81:c2:f2:91:10:95:42:04:9a:a8:59:
         d7:d1:4e:b5:38:88:e4:41:81:4c:4c:ac:38:96:59:f6:3e:27:
         a6:46:c4:26:f1:92:67:c7:8e:3e:be:70:26:de:b6:fb:fa:a9:
         a1:e4:eb:1b:d3:4f:de:75:fa:a1:ba:53:86:4e:81:9b:1e:9d:
         0c:49:5a:ee:67:ed:8d:4b:ba:e2:45:b1:01:ec:c4:52:f6:7f:
         c1:8a:60:cb:6d:17:fa:ca:3a:44:3c:70:ef:fd:bc:95:ef:b0:
         8d:23:91:4f:25:de:f4:78:c6:31:7b:4b:3c:df:1d:d0:33:41:
         ba:f9:85:60:68:5a:7c:bb:db:5c:cb:4d:c6:9a:93:0c:2b:cc:
         b8:0d:fc:ba:15:ee:88:eb:ee:13:0c:6c:0c:8d:a3:1e:f1:94:
         08:aa:b3:89:dd:5d:b2:fa:b6:40:19:23:24:24:aa:6e:9f:19:
         b7:2a:06:41:85:89:6e:c3:bf:c9:59:60:9b:71:c1:c6:06:ef:
         65:92:a5:28:ca:f5:7e:8f:6f:fd:66:ff:e7:9a:a3:86:1b:3d:
         b5:c6:42:c8:a4:19:10:be:b0:96:0c:db:ee:d3:c2:48:0d:ee:
         bc:55:2b:05:88:f6:4f:78:57:3a:3f:22:5f:be:90:e4:4c:a4:
         45:64:e8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----