Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/834a133c-cb8e-4375-b34d-1e934ae9212c/5f9fdfab-3ddf-3e11-8f7c-94d5dc69eea7.roa
File:                     5f9fdfab-3ddf-3e11-8f7c-94d5dc69eea7.roa (raw, json)
Hash identifier:          5m78xx7rFtjrOYXq6YI2/bdRS5s+1o9AxdKtuz0z3m4=
Subject key identifier:   E8:02:2D:D1:D2:1E:F2:23:84:89:7A:92:64:0D:7A:1A:4E:6B:EF:15
Certificate issuer:       /CN=834a133c-cb8e-4375-b34d-1e934ae9212c
Certificate serial:       010D0C9F4328583EA39DD75015AC54B1E7BAEF40
Authority key identifier: 1E:C5:CA:1D:AE:D3:A3:88:FD:59:1C:CA:FF:C7:22:EF:E7:E0:79:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/834a133c-cb8e-4375-b34d-1e934ae9212c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/834a133c-cb8e-4375-b34d-1e934ae9212c/5f9fdfab-3ddf-3e11-8f7c-94d5dc69eea7.roa
Signing time:             Wed 20 Jul 2022 11:07:06 +0000
ROA not before:           Wed 20 Jul 2022 11:07:06 +0000
ROA not after:            Tue 22 Oct 2024 04:00:00 +0000
asID:                     61317
IP address blocks:        144.162.6.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:a3:9d:d7:50:15:ac:54:b1:e7:ba:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=834a133c-cb8e-4375-b34d-1e934ae9212c
        Validity
            Not Before: Jul 20 11:07:06 2022 GMT
            Not After : Oct 22 04:00:00 2024 GMT
        Subject: CN=ec20a4c4-19b4-4539-9bf2-7587d8634133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:12:1a:7d:0f:e6:54:b3:84:cb:c9:92:8c:b6:
                    e1:7c:d7:75:0f:82:da:32:ed:3d:e3:79:4f:2c:d2:
                    ea:30:41:54:42:7a:e3:8f:98:12:16:93:6c:2b:b8:
                    cb:e1:86:e2:22:c2:09:26:b8:31:1d:bb:67:2f:29:
                    e9:f0:8b:e5:f3:a1:66:4c:b2:71:5c:c1:0f:85:c3:
                    f0:82:bb:fe:c8:70:17:bc:1a:48:55:cc:32:ca:58:
                    66:54:cd:9e:fb:de:29:c3:f2:ab:3c:cb:a6:3a:45:
                    cf:4e:1f:54:51:e3:87:dd:10:08:c1:80:ee:d2:2d:
                    e0:dd:1c:28:d0:5d:5b:bb:e4:3a:9b:37:d4:c4:4e:
                    a6:d8:98:3b:b1:82:11:7d:26:f2:8a:b6:79:ca:c4:
                    4f:e1:c6:e3:1c:dc:7f:55:b7:a3:e4:3a:a8:be:ed:
                    b7:1c:b2:84:c4:61:e9:22:40:12:44:91:d1:c7:42:
                    2a:29:e7:42:8c:2d:50:a4:d1:dd:5e:82:3d:a1:30:
                    87:af:d4:a4:17:8f:8e:0f:15:9d:b0:3c:ec:77:2d:
                    aa:43:7c:f3:ee:3d:90:00:e1:9f:86:e7:dc:dc:cd:
                    d5:70:bb:79:b0:32:44:e9:9b:2d:d4:3b:53:d6:e6:
                    9f:f3:2f:6c:55:84:6a:43:e9:08:d8:b6:3a:17:c6:
                    20:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:02:2D:D1:D2:1E:F2:23:84:89:7A:92:64:0D:7A:1A:4E:6B:EF:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/834a133c-cb8e-4375-b34d-1e934ae9212c/5f9fdfab-3ddf-3e11-8f7c-94d5dc69eea7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/834a133c-cb8e-4375-b34d-1e934ae9212c/834a133c-cb8e-4375-b34d-1e934ae9212c.crl

            X509v3 Authority Key Identifier:
                keyid:1E:C5:CA:1D:AE:D3:A3:88:FD:59:1C:CA:FF:C7:22:EF:E7:E0:79:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/834a133c-cb8e-4375-b34d-1e934ae9212c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.162.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:ff:23:fc:60:41:12:74:81:ae:ab:43:d8:14:d9:4a:90:ce:
         df:67:a6:66:cb:60:f9:c6:12:6a:68:9a:78:ce:b3:16:26:18:
         4e:ac:2b:fe:2f:4c:a9:92:a1:39:92:d2:e7:f8:4c:37:5c:b0:
         13:e4:57:66:c3:04:22:a0:3f:e4:9f:93:79:3c:e2:fc:1d:3c:
         10:22:e7:cb:0d:8e:85:46:55:d1:6e:63:d5:73:af:71:ce:2d:
         5c:75:99:56:3a:2a:ed:ab:e3:45:f2:d4:9f:96:6a:52:18:ed:
         d9:b2:ac:54:f9:47:f2:da:af:bb:ab:84:00:9e:09:6b:41:f2:
         41:10:48:53:29:36:ec:79:e1:98:8d:a3:5f:82:ba:1f:75:33:
         9d:e4:73:bd:67:86:32:4b:3d:e8:f9:f6:39:ae:69:0b:90:77:
         71:d8:e6:28:43:ca:4e:6a:9f:db:24:93:68:33:9d:71:60:ce:
         78:67:71:6b:72:99:37:1e:ac:55:a1:8d:21:f8:31:f1:dd:d9:
         dc:cf:73:5f:5c:93:35:ea:ca:18:25:2f:f9:df:d2:6b:74:79:
         95:de:50:52:1e:db:89:d9:4b:0f:2e:14:f5:6c:9f:d9:ba:87:
         85:14:19:88:e8:c3:c4:fa:84:c8:da:b0:6d:0e:a4:4d:a0:2f:
         ce:ae:6b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----