Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/954961fd-862d-45fd-b4b2-221bffb319b0/264dd4f5-fbc8-30ae-a95e-b7b5d34832e9.roa
File:                     264dd4f5-fbc8-30ae-a95e-b7b5d34832e9.roa (raw, json)
Hash identifier:          4cdmBc1tkpfgAzaOvYXMY/V+WcOppzTXPqkPAhhLzDc=
Subject key identifier:   0D:B2:C8:8C:58:1F:09:E7:18:24:A5:D6:89:F1:12:3B:E5:19:05:26
Certificate issuer:       /CN=954961fd-862d-45fd-b4b2-221bffb319b0
Certificate serial:       010D0C9F4328583E8E1D10CDF65152962B73CF40
Authority key identifier: 03:AD:1C:CE:67:03:35:63:36:89:3F:97:FA:C9:32:BB:1C:24:84:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/954961fd-862d-45fd-b4b2-221bffb319b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/954961fd-862d-45fd-b4b2-221bffb319b0/264dd4f5-fbc8-30ae-a95e-b7b5d34832e9.roa
Signing time:             Tue 12 Jul 2022 19:38:24 +0000
ROA not before:           Tue 12 Jul 2022 19:38:24 +0000
ROA not after:            Mon 14 Oct 2024 04:00:00 +0000
asID:                     19402
IP address blocks:        208.66.228.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:8e:1d:10:cd:f6:51:52:96:2b:73:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=954961fd-862d-45fd-b4b2-221bffb319b0
        Validity
            Not Before: Jul 12 19:38:24 2022 GMT
            Not After : Oct 14 04:00:00 2024 GMT
        Subject: CN=79dfe409-675e-42bb-8ccd-8e6fa6621ee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6b:b6:e6:68:ca:73:2c:94:30:4b:aa:fe:bf:
                    40:f9:f1:b8:0d:ed:91:ae:35:f5:40:c8:c5:56:3a:
                    5c:92:b7:cc:12:3c:d9:97:ad:83:3c:d2:a8:bb:88:
                    05:36:99:30:79:e0:7b:7f:30:c0:8e:d3:7e:b0:04:
                    02:a7:5a:49:57:f8:b5:48:c3:8c:6d:57:2e:27:96:
                    38:dd:c2:70:f4:89:c3:2d:f8:00:81:ad:78:ff:74:
                    2f:32:c7:8e:84:58:75:e0:b0:e3:47:94:d9:83:f6:
                    d2:3c:96:a7:e2:4b:4a:31:d8:ee:c0:46:d8:0d:a5:
                    b1:d3:01:26:4f:8b:ad:1b:98:ac:22:2f:1e:cc:54:
                    8c:b6:ae:73:47:a1:75:13:ab:15:d6:3a:dc:54:3a:
                    b7:9f:ff:ad:ca:85:76:16:67:13:1b:f2:49:b6:e6:
                    d2:13:d2:9f:df:9d:6a:2a:92:d6:e2:0a:69:ec:51:
                    a6:1a:29:f3:cf:e0:c7:4e:19:37:ef:6d:dc:82:ba:
                    cf:66:c8:d4:2d:2f:e7:0f:36:06:03:0c:2b:9d:57:
                    33:01:47:9d:c4:a2:53:56:4c:54:63:77:b1:06:d7:
                    c5:fd:14:4f:b0:aa:7b:61:09:d4:e0:56:f3:f3:49:
                    79:f7:59:b7:65:74:32:4b:b1:3c:05:8f:8e:ae:c5:
                    d1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B2:C8:8C:58:1F:09:E7:18:24:A5:D6:89:F1:12:3B:E5:19:05:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/954961fd-862d-45fd-b4b2-221bffb319b0/264dd4f5-fbc8-30ae-a95e-b7b5d34832e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/954961fd-862d-45fd-b4b2-221bffb319b0/954961fd-862d-45fd-b4b2-221bffb319b0.crl

            X509v3 Authority Key Identifier:
                keyid:03:AD:1C:CE:67:03:35:63:36:89:3F:97:FA:C9:32:BB:1C:24:84:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/954961fd-862d-45fd-b4b2-221bffb319b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.66.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:dd:19:aa:ad:30:18:77:8a:66:4f:5e:e7:aa:c8:e6:8e:8f:
         fc:01:94:cf:de:af:ba:69:da:0b:fe:b8:e7:50:d5:ba:6f:77:
         f9:43:4b:2c:5d:ae:dc:d4:06:59:b1:b3:b8:33:ad:22:c4:58:
         71:dc:6b:77:c0:7d:44:2e:65:74:e1:37:aa:70:10:ee:27:00:
         61:e4:f6:19:b9:45:2a:c4:27:7b:0f:ec:f1:1e:bf:55:b9:bb:
         38:bd:e6:5c:fc:a2:21:0f:26:65:22:f2:e4:2f:f7:e3:a6:b2:
         fc:fb:12:6c:66:fc:fb:66:cc:39:d5:5a:26:f3:d1:69:41:78:
         a5:46:be:43:28:42:89:a5:e3:d4:c0:01:3e:25:c3:3c:58:61:
         4a:9d:cb:8c:37:bc:46:37:af:ad:89:13:a5:60:ef:5a:8f:b0:
         fd:21:ce:d4:37:0e:17:46:c6:3a:6d:48:e0:8c:b4:aa:35:31:
         56:84:b4:88:a4:47:08:bc:7a:68:3a:13:20:78:96:77:5c:95:
         2e:f7:68:63:45:c7:13:4b:bf:60:02:74:d9:7d:9c:18:54:5c:
         27:bc:a2:6c:d8:03:d8:64:a5:77:e1:c6:3d:c1:48:d8:73:4a:
         8c:f6:08:50:dc:4f:65:b8:fd:78:df:fd:18:12:ca:54:ba:07:
         61:55:43:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----