Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c284d4db-d9bb-4a79-b175-3c50e5c12e7f/42077f51-1cb1-3369-9b9e-bd79889400d6.roa
File:                     42077f51-1cb1-3369-9b9e-bd79889400d6.roa (raw, json)
Hash identifier:          UyZnC6kb8agKZFY0xmEjZsj+0jQuktYOiA5v7BQUc9o=
Subject key identifier:   4F:9D:4C:AE:B0:5C:D7:83:0A:75:EB:5A:2C:49:87:C0:12:28:33:A9
Certificate issuer:       /CN=c284d4db-d9bb-4a79-b175-3c50e5c12e7f
Certificate serial:       010D0C9F4328583EE19C9AEE7502E2B802ADD800
Authority key identifier: C9:FA:77:7E:3C:25:6C:54:91:F5:FB:FF:2C:08:21:D5:80:DA:CF:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c284d4db-d9bb-4a79-b175-3c50e5c12e7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c284d4db-d9bb-4a79-b175-3c50e5c12e7f/42077f51-1cb1-3369-9b9e-bd79889400d6.roa
Signing time:             Thu 11 Aug 2022 20:17:01 +0000
ROA not before:           Thu 11 Aug 2022 20:17:01 +0000
ROA not after:            Wed 08 Mar 2023 05:00:00 +0000
asID:                     204968
IP address blocks:        216.252.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e1:9c:9a:ee:75:02:e2:b8:02:ad:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c284d4db-d9bb-4a79-b175-3c50e5c12e7f
        Validity
            Not Before: Aug 11 20:17:01 2022 GMT
            Not After : Mar  8 05:00:00 2023 GMT
        Subject: CN=373ab456-33fc-4f29-a8dd-309be394edb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e3:42:af:59:e8:79:7e:f9:60:1b:df:1b:cf:
                    2a:71:6f:ba:ea:1e:84:ac:1e:71:fb:0f:70:12:54:
                    7a:14:b0:dd:2b:9b:f8:29:d4:d2:f1:f7:ff:56:91:
                    c3:58:3e:52:3f:cd:3d:73:a1:4a:03:13:e5:61:97:
                    fe:fd:06:ff:ee:0a:d8:e3:f2:e5:2b:45:2a:a2:4a:
                    e4:28:2b:f1:bc:c4:df:4f:f4:91:b8:6d:35:cb:5b:
                    ad:55:9e:94:14:04:88:bc:30:ff:92:0c:fb:1c:e6:
                    36:72:b8:97:e7:76:84:cd:9f:75:2f:9a:a5:19:52:
                    b8:97:61:99:f1:71:4f:27:c2:ce:a8:26:64:2f:ff:
                    c4:f1:3a:92:30:a9:0c:95:96:f5:26:63:e1:b8:eb:
                    af:8c:fb:bf:fc:27:02:3f:b8:8c:e9:76:c6:3a:4f:
                    2e:12:f0:37:10:4c:e9:7c:b0:2e:40:1b:34:75:7a:
                    72:53:96:c2:90:3b:e6:f9:b1:db:b8:a2:19:75:51:
                    0a:2a:6f:84:ce:23:13:00:a5:8c:09:12:b1:4f:51:
                    61:f3:9b:e7:da:df:c9:12:63:03:fb:f2:57:16:c6:
                    f8:9d:04:77:45:d2:fb:7c:d1:b4:89:5e:d3:6a:25:
                    91:99:66:4d:05:ca:82:03:61:37:7b:d7:af:a8:a6:
                    3d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:9D:4C:AE:B0:5C:D7:83:0A:75:EB:5A:2C:49:87:C0:12:28:33:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c284d4db-d9bb-4a79-b175-3c50e5c12e7f/42077f51-1cb1-3369-9b9e-bd79889400d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c284d4db-d9bb-4a79-b175-3c50e5c12e7f/c284d4db-d9bb-4a79-b175-3c50e5c12e7f.crl

            X509v3 Authority Key Identifier:
                keyid:C9:FA:77:7E:3C:25:6C:54:91:F5:FB:FF:2C:08:21:D5:80:DA:CF:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c284d4db-d9bb-4a79-b175-3c50e5c12e7f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.252.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:ab:f9:f5:73:97:d5:0b:b5:d9:7f:05:22:2a:00:97:51:ba:
         f5:2e:4a:bb:70:dd:b5:4c:68:47:6a:b4:9f:20:c1:d8:b3:c8:
         45:07:9e:17:1c:f2:c3:a1:b6:be:b7:75:ce:e9:cc:47:97:2c:
         b8:37:46:14:46:28:43:c2:c2:7b:8b:d9:e5:0d:59:be:b9:42:
         6f:36:c7:7d:7d:31:7f:69:4b:e1:b7:ee:41:b7:ac:2a:48:ec:
         59:be:fa:88:30:9d:4a:ef:96:38:6d:62:d7:3e:ef:43:7e:31:
         c8:70:12:5b:b5:d6:c2:b7:ff:e9:a2:ac:9d:79:65:41:88:e0:
         1c:89:0d:c6:4d:9d:6e:c4:96:88:a7:1e:56:e7:3a:ad:f7:ac:
         39:02:6e:fb:dc:14:d0:48:f0:eb:b7:0f:83:52:d7:df:9a:62:
         b1:6b:f4:7d:ce:3f:6e:3d:93:18:f8:2c:c8:8e:37:fe:47:98:
         c7:f4:6f:a4:ec:c1:38:ef:b3:1a:3a:9f:18:cd:f5:23:37:66:
         dc:3f:05:47:fc:f5:be:14:e0:71:84:c6:0b:ec:1b:0d:8a:be:
         7e:42:5e:c3:03:f4:34:cf:ee:e8:53:7c:7b:9d:ed:59:86:11:
         fb:e2:8b:c2:78:ff:c8:a4:0a:c4:6c:56:53:2a:7e:e7:68:c5:
         d5:b6:45:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----