Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/968407b3-e2a9-4ec2-9f39-e02d0486ee63/8ae20485-d58e-3fd1-bf1a-cf29a68d863e.roa
File:                     8ae20485-d58e-3fd1-bf1a-cf29a68d863e.roa (raw, json)
Hash identifier:          Hw/CVEWClqDdZAc9e6Sm7Pyo3Aw9XqLiU5gnPluNEl4=
Subject key identifier:   24:A0:9F:47:8E:CA:E1:DB:E9:4B:3D:46:61:37:71:7F:97:98:83:52
Certificate issuer:       /CN=968407b3-e2a9-4ec2-9f39-e02d0486ee63
Certificate serial:       010D0C9F4328583D9E1AC6320F59586F87B72680
Authority key identifier: 67:F0:FD:54:48:16:3E:36:E3:34:5B:3A:5B:1E:03:11:7F:EB:E6:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/968407b3-e2a9-4ec2-9f39-e02d0486ee63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/968407b3-e2a9-4ec2-9f39-e02d0486ee63/8ae20485-d58e-3fd1-bf1a-cf29a68d863e.roa
Signing time:             Tue 19 Apr 2022 04:00:00 +0000
ROA not before:           Tue 19 Apr 2022 04:00:00 +0000
ROA not after:            Mon 22 Jul 2024 04:00:00 +0000
asID:                     136250
IP address blocks:        104.166.112.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:9e:1a:c6:32:0f:59:58:6f:87:b7:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=968407b3-e2a9-4ec2-9f39-e02d0486ee63
        Validity
            Not Before: Apr 19 04:00:00 2022 GMT
            Not After : Jul 22 04:00:00 2024 GMT
        Subject: CN=e31249d3-11df-40d0-a2e3-386d548bde28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1d:05:b6:b1:1d:eb:64:c1:89:23:60:de:40:
                    cc:51:e7:c5:6b:42:1f:7f:2d:07:ff:b1:40:0e:92:
                    44:4f:a4:06:27:52:19:cd:94:0e:80:a2:85:5a:de:
                    4e:88:74:cf:a9:e3:d7:8e:ed:28:d3:fc:5a:f7:0a:
                    4a:f3:b4:b4:3f:29:6d:2f:4e:d5:a0:34:8b:e8:eb:
                    4b:06:20:3e:b2:33:05:a4:57:75:24:71:79:2a:ea:
                    38:74:31:49:e3:e0:c8:b5:43:ad:25:ef:d5:7a:99:
                    17:13:91:83:e8:40:6c:95:a6:02:ec:02:bb:51:e9:
                    84:31:1b:50:d0:37:27:3e:5b:9e:11:ad:50:c3:27:
                    ff:c8:b9:6a:2f:20:c5:4a:a7:a4:62:0f:55:f6:42:
                    82:f2:3a:bf:fd:95:bb:9b:06:3d:1d:ac:63:31:36:
                    d3:d8:50:fb:c0:f5:90:5c:eb:b8:0a:5f:94:86:df:
                    ce:89:f1:66:56:c5:a0:25:e1:b0:89:e7:89:10:d0:
                    e6:00:6f:e9:6b:fa:3a:5c:03:69:ef:c9:b0:af:72:
                    22:ff:93:a3:73:bd:e2:48:21:81:19:58:79:31:99:
                    75:99:ba:e5:76:52:dc:27:4c:35:20:26:8a:44:4f:
                    37:83:0d:13:e6:20:4a:64:2c:17:bc:ac:38:0a:fd:
                    9d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A0:9F:47:8E:CA:E1:DB:E9:4B:3D:46:61:37:71:7F:97:98:83:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/968407b3-e2a9-4ec2-9f39-e02d0486ee63/8ae20485-d58e-3fd1-bf1a-cf29a68d863e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/968407b3-e2a9-4ec2-9f39-e02d0486ee63/968407b3-e2a9-4ec2-9f39-e02d0486ee63.crl

            X509v3 Authority Key Identifier:
                keyid:67:F0:FD:54:48:16:3E:36:E3:34:5B:3A:5B:1E:03:11:7F:EB:E6:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/968407b3-e2a9-4ec2-9f39-e02d0486ee63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.166.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:fc:f8:ff:aa:05:e5:f0:0e:1d:69:8d:f9:69:dd:93:44:f4:
         10:6e:00:c9:79:d1:64:91:92:2c:e7:a2:4f:0b:de:ab:4d:58:
         ce:9e:ee:6c:34:6e:6e:d6:be:3f:ec:3b:bb:fd:8f:b8:5f:f8:
         e7:0d:9e:e0:83:03:b0:b8:84:b1:0a:f3:05:e0:e0:b7:6a:e1:
         dc:f9:05:c2:8f:b1:20:8a:f4:55:e9:b1:40:d3:23:c4:3d:dd:
         b5:12:60:ce:64:c9:0d:47:5c:86:77:c6:f6:13:7c:e6:87:fd:
         ee:1d:a0:da:3f:9c:e9:1a:f4:89:c5:71:73:c8:69:f7:93:9d:
         64:d7:fb:e9:99:2d:87:ad:60:d5:58:ae:c7:84:d5:4e:f5:06:
         e5:35:ed:d7:81:5a:f3:a3:27:6a:f3:58:98:66:67:ee:cf:77:
         0d:e6:66:85:70:24:12:89:c1:0c:18:60:f6:19:e2:a2:79:10:
         46:26:e6:1a:a9:f6:c9:c9:ff:d1:34:56:08:a7:5b:7f:6c:8e:
         64:48:eb:82:b0:8b:65:d2:32:2f:3b:f5:7f:73:f2:99:a3:e5:
         22:da:a6:45:11:81:d6:bd:5b:a2:3c:d2:82:10:29:0c:a4:be:
         f9:30:aa:fd:0c:d2:1b:f9:07:a9:be:38:45:c2:94:fa:4b:d4:
         4b:29:09:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----