Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80f0e919-8ed6-4b5f-bc05-1b833ab626da/1a4c476a-72e8-30ba-aca2-4f258963dc13.roa
File:                     1a4c476a-72e8-30ba-aca2-4f258963dc13.roa (raw, json)
Hash identifier:          YRWfr3z/3zoEa+NnsBCYrsN3TRurt2/S6o0W1x/yRMw=
Subject key identifier:   7A:75:E6:AC:7B:B4:FF:B0:76:9C:73:A9:A6:C7:41:3C:5F:03:7A:A1
Certificate issuer:       /CN=80f0e919-8ed6-4b5f-bc05-1b833ab626da
Certificate serial:       010D0C9F4328583F5278E31D8EA70F163A1162E0
Authority key identifier: A7:02:98:3F:AE:FA:FE:7F:00:28:35:A9:4C:B2:34:5D:C9:C2:81:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80f0e919-8ed6-4b5f-bc05-1b833ab626da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80f0e919-8ed6-4b5f-bc05-1b833ab626da/1a4c476a-72e8-30ba-aca2-4f258963dc13.roa
Signing time:             Wed 24 Aug 2022 18:39:08 +0000
ROA not before:           Wed 24 Aug 2022 18:39:08 +0000
ROA not after:            Tue 24 Dec 2024 05:00:00 +0000
asID:                     60721
IP address blocks:        140.99.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:52:78:e3:1d:8e:a7:0f:16:3a:11:62:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80f0e919-8ed6-4b5f-bc05-1b833ab626da
        Validity
            Not Before: Aug 24 18:39:08 2022 GMT
            Not After : Dec 24 05:00:00 2024 GMT
        Subject: CN=f211d3d2-3329-4786-a2b6-452a93dd9369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:82:e1:0b:d1:36:4f:76:45:31:2c:3b:25:10:
                    81:6e:75:78:72:0a:7e:ad:7b:1e:3b:21:a9:b1:25:
                    ee:1e:65:25:ba:46:52:47:9a:a4:73:06:37:bb:fe:
                    6e:2b:0a:c2:a7:9c:50:54:0e:69:3b:5a:01:79:15:
                    36:c4:4e:b8:eb:f2:19:09:ba:67:c2:32:b0:03:9e:
                    f5:e7:87:2a:79:c3:80:90:11:19:f4:f7:f2:d8:06:
                    0b:4a:15:73:49:4d:ed:c3:8b:df:6d:a8:89:bd:0e:
                    e8:d4:36:db:5f:81:62:89:9e:f9:e6:ee:7a:a5:38:
                    30:f2:04:65:27:df:10:3a:c3:19:98:b5:89:4e:39:
                    95:ad:ea:c7:8c:06:be:b6:15:4c:71:97:b9:47:da:
                    1e:d8:8b:85:26:cf:3d:b5:cc:f9:3c:d6:ff:51:29:
                    22:b6:04:73:0d:38:d9:36:f4:aa:7c:a0:fa:0e:6a:
                    fc:92:9b:f4:58:2b:9a:a9:33:24:de:53:8f:cb:7c:
                    05:63:70:69:7e:2d:50:32:6d:fc:76:c2:4a:b7:db:
                    be:e9:cb:34:79:d3:b8:cf:74:20:9e:fb:8b:66:05:
                    84:15:9c:66:8b:fa:de:af:5c:bb:3e:e9:22:2e:22:
                    29:5e:2a:fb:52:11:f9:ae:2b:3a:a5:9f:78:6d:12:
                    20:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:75:E6:AC:7B:B4:FF:B0:76:9C:73:A9:A6:C7:41:3C:5F:03:7A:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80f0e919-8ed6-4b5f-bc05-1b833ab626da/1a4c476a-72e8-30ba-aca2-4f258963dc13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80f0e919-8ed6-4b5f-bc05-1b833ab626da/80f0e919-8ed6-4b5f-bc05-1b833ab626da.crl

            X509v3 Authority Key Identifier:
                keyid:A7:02:98:3F:AE:FA:FE:7F:00:28:35:A9:4C:B2:34:5D:C9:C2:81:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80f0e919-8ed6-4b5f-bc05-1b833ab626da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:fe:3d:69:db:5f:6d:33:16:36:5f:79:83:14:d8:d5:e0:f3:
         2a:e9:05:43:2d:e6:d2:21:c0:0c:27:11:d2:57:8a:bb:21:f3:
         ec:73:bf:72:f9:d8:97:99:55:10:fa:27:fe:dd:de:61:38:87:
         75:e9:c6:6c:c2:0b:5a:d2:b2:8b:d5:f6:70:32:1b:5b:d1:13:
         cb:1d:04:c8:84:6f:91:2e:7d:8d:dc:6a:3b:5e:44:06:da:b4:
         85:a6:24:8e:7a:b6:be:26:bd:60:27:05:c3:c3:11:25:55:33:
         d6:0b:10:bb:dc:d2:6a:ac:46:bf:f7:37:c0:27:3e:ea:d5:d7:
         2c:be:74:fa:6e:e9:8b:54:df:26:f4:ab:df:f8:ff:3e:ee:04:
         cb:20:0b:76:15:e4:cc:66:28:0d:9f:74:54:8b:43:54:f4:49:
         a3:cf:7a:7b:8c:fe:e7:29:1f:46:d4:ea:23:f8:82:73:a3:5f:
         49:fc:6f:de:e7:91:b9:a0:04:a9:ef:5a:32:a0:5b:c1:c2:71:
         9d:d0:6c:66:65:6d:2f:f1:c5:a0:c1:d4:73:6b:e4:c3:5d:4e:
         3c:e7:24:a3:ae:db:f4:77:7d:d9:23:9e:df:4b:90:22:c1:da:
         2e:b8:fb:74:bf:ff:87:c3:5a:11:1a:30:63:41:a7:14:18:bf:
         43:a9:be:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----