Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6988df0e-943d-4b39-9efe-14a6bc7ce86d/2d99156f-dc53-317b-8650-c89b96d7681c.roa
File:                     2d99156f-dc53-317b-8650-c89b96d7681c.roa (raw, json)
Hash identifier:          tBeffp+UL85l3ovNLMBZCwnBXT8yCktcZp6xAhC3yv4=
Subject key identifier:   79:3E:F6:D7:63:3B:68:49:E6:94:FE:F0:53:FE:9F:9D:75:64:77:0D
Certificate issuer:       /CN=6988df0e-943d-4b39-9efe-14a6bc7ce86d
Certificate serial:       010D0C9F43285842D6AED337CF5940D4763A0A78
Authority key identifier: 91:92:80:4F:56:48:B9:1A:5A:0E:FD:F9:75:E2:1B:5C:1A:85:B1:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6988df0e-943d-4b39-9efe-14a6bc7ce86d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6988df0e-943d-4b39-9efe-14a6bc7ce86d/2d99156f-dc53-317b-8650-c89b96d7681c.roa
Signing time:             Thu 10 Aug 2023 13:00:24 +0000
ROA not before:           Thu 10 Aug 2023 13:00:24 +0000
ROA not after:            Wed 08 Nov 2023 14:00:24 +0000
asID:                     63221
IP address blocks:        192.55.247.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:d6:ae:d3:37:cf:59:40:d4:76:3a:0a:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6988df0e-943d-4b39-9efe-14a6bc7ce86d
        Validity
            Not Before: Aug 10 13:00:24 2023 GMT
            Not After : Nov  8 14:00:24 2023 GMT
        Subject: CN=6a238ecd-4c6f-4dc9-a4b1-68660eef9c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e7:c4:70:58:a0:63:69:c9:3c:89:75:26:7d:
                    0c:c5:0d:69:fd:be:4d:a8:58:fa:c9:7b:73:db:cd:
                    3a:7d:cc:c3:70:a9:71:cc:47:e3:17:45:61:e5:4a:
                    7c:3e:16:b4:5c:db:68:b1:dd:c8:b6:5d:01:79:4e:
                    89:9c:45:a7:08:d4:a2:3a:a2:0c:ff:15:6e:96:ce:
                    fa:6f:55:95:8a:99:9e:bd:5a:d7:1d:dc:79:f6:1f:
                    e4:2f:df:93:90:4b:8e:14:18:91:bb:a7:49:b5:7c:
                    99:48:5b:51:6b:66:d9:be:bd:04:d2:19:19:74:5e:
                    b7:f1:d3:aa:a2:d2:39:ef:ba:4c:56:51:27:da:f9:
                    86:c3:a0:b8:81:6d:25:9d:1d:f7:8c:4f:f6:72:44:
                    b7:a3:f2:a3:0b:06:02:44:e4:02:6e:c9:eb:37:40:
                    2d:da:10:bb:cb:7d:b3:92:3b:71:dc:13:b6:69:f9:
                    2a:8e:29:55:3b:44:d9:ff:3d:69:6a:ab:90:03:84:
                    ec:60:3f:58:35:31:2f:6a:72:96:93:77:40:3f:0a:
                    b3:d9:f5:f3:9e:6b:d8:9f:61:fe:14:09:6a:44:fd:
                    93:7f:24:db:16:f5:11:03:f7:c4:c1:6a:b7:fd:7b:
                    ff:7e:d5:54:a8:a2:0d:e2:92:ac:94:13:d3:14:49:
                    a2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:3E:F6:D7:63:3B:68:49:E6:94:FE:F0:53:FE:9F:9D:75:64:77:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6988df0e-943d-4b39-9efe-14a6bc7ce86d/2d99156f-dc53-317b-8650-c89b96d7681c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6988df0e-943d-4b39-9efe-14a6bc7ce86d/6988df0e-943d-4b39-9efe-14a6bc7ce86d.crl

            X509v3 Authority Key Identifier:
                keyid:91:92:80:4F:56:48:B9:1A:5A:0E:FD:F9:75:E2:1B:5C:1A:85:B1:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6988df0e-943d-4b39-9efe-14a6bc7ce86d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:90:5e:b8:9b:d6:1a:8a:a9:0c:52:9d:54:32:5f:21:b6:5d:
         4c:e8:ff:5c:f2:19:45:68:82:0f:81:1f:e9:57:fc:22:49:1e:
         e3:1d:24:fd:f7:cf:c8:b7:2d:ad:94:ad:d2:44:5c:7e:bc:c1:
         b4:fe:0f:bf:01:3f:cd:af:de:cd:4b:49:8a:61:66:6e:aa:db:
         a4:aa:b3:cd:6b:76:5c:d3:18:70:d3:8d:37:1c:31:20:a2:a0:
         69:da:1c:58:4c:e6:a9:43:af:b1:a1:1c:93:80:70:2e:7c:00:
         53:05:12:74:a8:89:58:25:a1:85:de:59:de:01:30:31:24:cc:
         b4:29:f1:e6:63:dd:b1:84:6f:81:46:ce:03:78:27:df:7c:d3:
         2b:62:f2:8b:f4:ed:c1:a0:4f:46:73:5e:b1:a1:94:6f:cb:22:
         52:01:20:5f:52:fc:c9:03:df:ab:42:84:38:02:b5:59:cf:b7:
         de:eb:d0:26:c0:a0:34:59:b1:ef:c6:8a:81:ca:a2:be:7d:49:
         a2:55:d1:0e:e5:32:dc:c3:c8:49:1e:3d:50:2f:60:f8:8c:54:
         7e:26:41:cb:49:62:d7:fc:e1:28:55:21:68:b7:fe:59:4b:64:
         c9:44:6d:29:4b:38:e3:ae:54:a4:9e:71:c5:88:14:10:f7:27:
         58:3d:a7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----