Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/db91d16a-b30d-47f9-ad78-f468da19daa9/399e96bf-fc6f-3070-90a1-5587c7835fb2.roa
File:                     399e96bf-fc6f-3070-90a1-5587c7835fb2.roa (raw, json)
Hash identifier:          H4bHnVyBC9Fh/JWis6YrZptapSVhVQ8wOmAy9e3bJ5g=
Subject key identifier:   1C:55:12:3E:B1:C1:5B:E8:57:12:65:34:23:BB:F7:CB:BD:47:96:8D
Certificate issuer:       /CN=db91d16a-b30d-47f9-ad78-f468da19daa9
Certificate serial:       010D0C9F4328584288C2AA5C89617574DD08EC00
Authority key identifier: 3E:79:12:4D:84:1A:40:DD:FE:0E:C0:15:41:55:0B:D6:A2:64:CF:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/db91d16a-b30d-47f9-ad78-f468da19daa9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/db91d16a-b30d-47f9-ad78-f468da19daa9/399e96bf-fc6f-3070-90a1-5587c7835fb2.roa
Signing time:             Thu 13 Jul 2023 15:07:25 +0000
ROA not before:           Thu 13 Jul 2023 15:07:25 +0000
ROA not after:            Wed 11 Oct 2023 15:07:25 +0000
asID:                     834
IP address blocks:        206.197.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:88:c2:aa:5c:89:61:75:74:dd:08:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db91d16a-b30d-47f9-ad78-f468da19daa9
        Validity
            Not Before: Jul 13 15:07:25 2023 GMT
            Not After : Oct 11 15:07:25 2023 GMT
        Subject: CN=b63088c5-0a86-4ae1-b2b8-4754a7c915ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2e:19:3a:5b:81:0b:e2:33:c3:12:6d:b4:b2:
                    b0:2b:50:10:0c:cb:59:5d:0c:13:d2:8b:5d:7e:d0:
                    7b:c7:c8:d8:fb:59:0f:4f:70:50:39:29:03:3f:bd:
                    97:07:02:24:72:4b:30:0b:99:23:95:71:50:d8:a0:
                    27:a4:43:62:c4:ac:94:d7:86:1f:bf:22:ce:0c:9c:
                    7c:f8:4f:2a:c5:6c:80:38:67:e6:0b:cf:a5:4c:c1:
                    17:fe:3e:d9:57:3f:e3:c6:73:87:9e:9d:c3:4f:5f:
                    2d:8e:7d:07:79:68:34:69:f9:85:5e:9a:54:0f:60:
                    59:ca:1d:5d:97:3e:b4:2e:eb:47:12:d7:16:e0:65:
                    8b:e3:5b:28:6d:d4:b7:4b:6c:aa:cf:5c:18:70:7f:
                    26:c9:a7:7a:fa:d5:ea:e0:e5:23:b6:24:8a:20:c3:
                    9f:23:ee:c8:df:eb:c8:e3:43:aa:39:41:93:b7:de:
                    50:38:54:50:76:e7:38:68:b1:ee:41:30:1f:43:04:
                    19:ad:c9:7c:48:ba:25:af:eb:40:1d:a9:4b:3f:18:
                    5b:9b:ca:40:78:f5:6e:25:50:ea:bd:11:15:3b:8e:
                    2a:7a:ff:93:bf:50:9c:5a:d4:3f:73:a2:45:79:d8:
                    d2:3a:67:9e:4a:fa:92:72:ff:46:a3:af:70:98:40:
                    17:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:55:12:3E:B1:C1:5B:E8:57:12:65:34:23:BB:F7:CB:BD:47:96:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/db91d16a-b30d-47f9-ad78-f468da19daa9/399e96bf-fc6f-3070-90a1-5587c7835fb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/db91d16a-b30d-47f9-ad78-f468da19daa9/db91d16a-b30d-47f9-ad78-f468da19daa9.crl

            X509v3 Authority Key Identifier:
                keyid:3E:79:12:4D:84:1A:40:DD:FE:0E:C0:15:41:55:0B:D6:A2:64:CF:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/db91d16a-b30d-47f9-ad78-f468da19daa9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.197.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:e8:16:df:a4:0f:ee:99:11:f0:d2:83:65:66:1c:d3:44:6e:
         06:e0:e6:14:bf:e9:21:32:91:ad:1e:97:78:05:d6:2d:d8:4a:
         c6:54:9c:95:64:5d:b5:b7:86:97:c8:41:01:f6:aa:80:ff:e6:
         10:84:ea:0a:ce:50:83:09:a6:74:d6:6e:b8:30:48:6c:63:99:
         55:55:e9:6b:99:cc:cb:dc:21:61:69:90:84:ed:b5:bb:67:56:
         eb:0c:63:ac:1f:32:fe:c3:f2:5b:4f:d3:72:bb:53:d5:93:17:
         0d:4e:cf:ff:70:92:5c:dd:18:ef:63:a4:ed:ff:ad:64:af:c2:
         c2:a9:1c:7d:2c:92:a6:35:47:03:fc:51:d7:a5:12:d8:50:58:
         7d:71:4b:aa:3c:c4:e3:19:43:89:7d:12:dd:4b:bc:d6:74:8d:
         1c:33:0c:46:4b:40:4c:c6:81:86:d2:c4:91:da:6e:df:de:e6:
         34:b9:6a:aa:3c:0f:fe:68:c0:b2:ea:31:02:db:48:55:3f:80:
         d9:96:4f:d2:69:83:85:e0:1c:b0:8e:4a:5f:43:79:25:47:1e:
         9d:12:2e:c3:47:77:39:c9:45:12:ad:80:62:f0:57:67:11:1e:
         7f:5c:e7:ce:40:8b:78:59:c3:16:d7:af:a8:a4:8e:0e:a6:79:
         4c:74:3e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----