Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48fc6e2e-c5fc-40af-bf8f-ca99c4e7923f/08bc7454-b8fe-30a8-9c5b-6d9b9a2fff71.roa
File:                     08bc7454-b8fe-30a8-9c5b-6d9b9a2fff71.roa (raw, json)
Hash identifier:          S55bTl6YcO4oQy0DEV7J45c8r2e51Hg/Tlt9v9lg+tU=
Subject key identifier:   7D:D9:DD:BC:17:49:0F:40:1F:4D:2B:A0:27:35:C2:F2:62:CE:A4:03
Certificate issuer:       /CN=48fc6e2e-c5fc-40af-bf8f-ca99c4e7923f
Certificate serial:       010D0C9F4328583C534140F31868C5E9C4CDBE40
Authority key identifier: EF:03:26:8E:6A:12:1B:93:92:28:6E:D6:36:BD:A3:C7:05:B4:C2:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48fc6e2e-c5fc-40af-bf8f-ca99c4e7923f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48fc6e2e-c5fc-40af-bf8f-ca99c4e7923f/08bc7454-b8fe-30a8-9c5b-6d9b9a2fff71.roa
Signing time:             Tue 02 Nov 2021 04:00:00 +0000
ROA not before:           Tue 02 Nov 2021 04:00:00 +0000
ROA not after:            Mon 25 Mar 2024 04:00:00 +0000
asID:                     13896
IP address blocks:        206.81.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:53:41:40:f3:18:68:c5:e9:c4:cd:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48fc6e2e-c5fc-40af-bf8f-ca99c4e7923f
        Validity
            Not Before: Nov  2 04:00:00 2021 GMT
            Not After : Mar 25 04:00:00 2024 GMT
        Subject: CN=27458642-df38-4ed2-8aae-3e63a32fe92a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d0:3d:58:08:2b:a3:39:56:ae:77:05:0a:1a:
                    bb:0c:86:6d:8a:a8:06:9f:a5:1a:af:d2:ea:05:43:
                    84:ca:ab:9c:a8:1c:d5:18:8c:7d:ae:9a:dd:68:ee:
                    30:f8:cf:43:4d:78:59:f8:f8:43:a3:74:1d:9e:b1:
                    9a:47:0f:9d:ac:b5:e5:8e:52:c5:4e:70:e7:c8:08:
                    ae:3b:be:b1:56:ea:9d:b5:1b:a3:71:20:8a:0c:c8:
                    ba:2b:00:1f:5d:31:fe:b6:dd:1a:e8:9e:1a:ed:91:
                    b6:64:d4:37:01:5b:0f:bb:4e:b5:b5:18:ca:e1:27:
                    75:cb:a3:f9:f4:64:0d:16:26:b9:b1:fc:27:28:b0:
                    7f:43:43:b2:c2:50:1b:c5:fb:16:a9:0d:ed:c7:3e:
                    03:fb:03:ca:83:3b:a2:ae:46:39:82:fa:33:9e:e2:
                    8f:4b:e3:57:cb:22:12:b0:65:bb:63:68:2b:64:a9:
                    79:6a:55:99:01:12:5e:cd:5f:a3:31:0c:1f:ca:2d:
                    cf:42:37:de:29:5c:38:a5:0d:57:c9:1b:ca:6f:5b:
                    8a:99:91:d4:e7:41:54:f7:58:0e:89:e0:b1:6c:bd:
                    43:18:cc:56:09:c1:d0:93:e1:92:fc:d6:ec:40:d1:
                    80:dd:d9:23:ae:a9:ff:cc:e5:29:ae:be:ff:75:cd:
                    fb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D9:DD:BC:17:49:0F:40:1F:4D:2B:A0:27:35:C2:F2:62:CE:A4:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48fc6e2e-c5fc-40af-bf8f-ca99c4e7923f/08bc7454-b8fe-30a8-9c5b-6d9b9a2fff71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48fc6e2e-c5fc-40af-bf8f-ca99c4e7923f/48fc6e2e-c5fc-40af-bf8f-ca99c4e7923f.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:26:8E:6A:12:1B:93:92:28:6E:D6:36:BD:A3:C7:05:B4:C2:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48fc6e2e-c5fc-40af-bf8f-ca99c4e7923f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.81.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:3a:3a:f3:7f:b9:97:11:ae:28:7a:04:ed:90:7c:91:14:bc:
         aa:a9:8d:a8:fc:b0:2d:e3:2f:56:ed:c6:cc:0f:5a:b4:1f:64:
         12:8d:9d:8f:8e:8a:a0:54:66:fb:37:7a:58:e6:38:9e:85:06:
         ae:d2:bd:1f:00:0b:9e:1d:c7:6b:00:77:5e:6f:a9:dc:c4:12:
         65:f3:1d:a3:6a:f8:a6:2e:db:3e:9c:c3:df:1e:e1:0b:0f:2c:
         56:39:84:d4:5a:a7:b6:f8:4d:a1:bf:c2:9f:b4:ec:82:42:4f:
         8f:0e:c9:70:92:21:97:f0:bf:3b:23:ae:63:77:06:2d:13:e3:
         64:9f:f1:0d:54:61:b0:5b:c3:ad:0e:55:54:8b:1a:4b:bd:f4:
         0f:da:e1:19:b6:34:26:c4:63:ec:cd:ef:5a:9e:26:3d:60:bd:
         62:b2:ea:48:55:fe:35:0d:48:f1:74:6b:1b:59:d0:1c:b9:d1:
         12:92:8d:d0:d2:7f:dc:d6:10:b0:06:31:16:f6:8c:02:f8:50:
         a9:3c:e7:e3:06:2d:2f:9e:16:01:15:36:b4:a3:d0:9c:34:1f:
         1d:08:61:ea:bf:66:ba:d6:ea:86:25:6e:d8:25:6a:0f:3d:7f:
         1b:79:a0:11:e0:91:7e:de:39:dd:7f:5b:22:22:df:2f:f8:32:
         30:97:36:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----