Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22aa1c2f-1bcb-4a02-88fc-3fcbf174e172/d1ef1afd-b383-3951-b6b0-fd372cd4a0d2.roa
File:                     d1ef1afd-b383-3951-b6b0-fd372cd4a0d2.roa (raw, json)
Hash identifier:          xPLJm4cVEZgPKnQba/9V0H0DA8WpMmZrFpepr1dGU9c=
Subject key identifier:   69:38:66:35:59:7D:77:2D:4E:28:8B:F4:C0:A4:7E:26:E6:45:2A:69
Certificate issuer:       /CN=22aa1c2f-1bcb-4a02-88fc-3fcbf174e172
Certificate serial:       010D0C9F4328583F5EF23D1B1BAD700C15D25600
Authority key identifier: 82:2F:3C:DC:1F:34:07:07:3D:91:83:84:A4:5D:65:99:7B:9F:CD:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22aa1c2f-1bcb-4a02-88fc-3fcbf174e172.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22aa1c2f-1bcb-4a02-88fc-3fcbf174e172/d1ef1afd-b383-3951-b6b0-fd372cd4a0d2.roa
Signing time:             Sun 25 Sep 2022 12:00:00 +0000
ROA not before:           Sun 25 Sep 2022 12:00:00 +0000
ROA not after:            Sun 29 Dec 2024 05:00:00 +0000
asID:                     61317
IP address blocks:        204.69.217.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:5e:f2:3d:1b:1b:ad:70:0c:15:d2:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22aa1c2f-1bcb-4a02-88fc-3fcbf174e172
        Validity
            Not Before: Sep 25 12:00:00 2022 GMT
            Not After : Dec 29 05:00:00 2024 GMT
        Subject: CN=12fb5420-190b-4284-9534-c8402a9b7682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:29:db:6a:a8:90:26:58:91:eb:9c:8f:e6:9e:
                    01:ed:1e:c5:bd:c0:1f:26:24:62:64:54:22:07:3e:
                    06:b9:8a:47:65:9b:4e:11:e7:44:33:bb:be:bf:35:
                    e9:cd:12:cf:53:2d:d1:91:07:ba:a8:54:13:7f:ed:
                    db:a2:7e:03:b7:c3:59:2e:3d:2d:4c:d7:31:e5:17:
                    1e:8b:5f:87:5d:a1:97:96:b2:47:d0:79:b4:d5:1f:
                    38:92:bf:41:b8:c8:95:1c:29:2f:71:02:7c:ca:39:
                    87:1c:9b:a0:68:9e:5e:de:b0:4a:c9:e7:6f:b3:69:
                    f1:e0:16:cd:b2:c9:ba:c7:8e:52:91:29:49:c1:ac:
                    ff:19:48:0b:de:27:61:30:6f:71:e7:23:f1:e2:b6:
                    86:95:2a:47:9a:be:ff:14:de:69:40:fc:ab:58:a9:
                    26:95:60:72:eb:80:9a:a8:39:1d:67:bc:04:57:8e:
                    ca:67:ec:87:21:e2:a0:a5:20:da:2b:07:5f:07:df:
                    ea:8d:30:c1:f9:3b:ba:58:15:c7:93:19:f5:3b:cf:
                    9f:2e:8b:09:af:29:94:77:55:22:cc:96:29:98:30:
                    3d:b5:3f:29:57:96:f7:0f:f7:1c:68:80:cd:71:02:
                    0a:eb:94:f3:44:63:05:c9:c3:39:ba:02:03:21:08:
                    6b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:38:66:35:59:7D:77:2D:4E:28:8B:F4:C0:A4:7E:26:E6:45:2A:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22aa1c2f-1bcb-4a02-88fc-3fcbf174e172/d1ef1afd-b383-3951-b6b0-fd372cd4a0d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22aa1c2f-1bcb-4a02-88fc-3fcbf174e172/22aa1c2f-1bcb-4a02-88fc-3fcbf174e172.crl

            X509v3 Authority Key Identifier:
                keyid:82:2F:3C:DC:1F:34:07:07:3D:91:83:84:A4:5D:65:99:7B:9F:CD:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22aa1c2f-1bcb-4a02-88fc-3fcbf174e172.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.69.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:01:e9:36:96:d9:f9:72:4f:56:c4:a4:34:03:74:48:5f:59:
         5b:83:f3:29:ce:d3:28:4e:a4:c7:58:15:d6:13:16:0c:ec:69:
         85:ac:28:54:69:31:75:60:04:18:e6:86:cb:e4:50:d5:cc:fc:
         cb:9f:e6:86:c2:2a:dd:ae:4d:f7:11:35:0b:23:c8:46:f2:34:
         13:37:91:b4:e2:e6:fe:4a:fd:9b:f8:13:d6:8b:99:4e:35:03:
         fa:15:50:63:3e:11:7f:94:62:cd:bc:0e:2b:54:22:f9:bf:7c:
         56:f3:e7:5d:90:81:ba:ad:20:35:a6:39:c0:b8:21:ad:56:a6:
         fe:18:56:d7:f5:2a:1f:f7:db:54:f8:f5:fb:6b:d1:71:41:26:
         11:7d:54:7a:85:73:41:0d:19:96:aa:84:60:75:d6:73:e6:37:
         d2:6d:81:07:a1:e9:01:2c:bf:9c:f3:36:78:c2:6e:b4:47:53:
         15:ee:76:9a:01:79:5d:e6:24:2a:e9:be:3e:b6:5a:63:77:89:
         54:57:5f:6d:f1:13:33:40:21:6e:3b:20:f0:a2:7f:15:3c:67:
         53:df:ac:b2:b5:57:53:96:44:6b:c6:0e:22:46:ac:56:f3:bd:
         48:4b:1b:c3:60:8c:28:f0:7c:a1:25:c6:dc:35:af:15:2d:38:
         54:5e:21:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----