Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d79deee4-2cfa-4f53-b7e1-31d4ff09ced9/c8336115-454d-353f-b026-51e3bcda5960.roa
File:                     c8336115-454d-353f-b026-51e3bcda5960.roa (raw, json)
Hash identifier:          jzx+yofTDoSNd1w/DdTvaBe1ammSDbGPa+DCXKAIUaw=
Subject key identifier:   C7:39:8D:57:A9:8D:06:94:0B:38:43:9A:88:45:AC:6B:DB:31:85:A5
Certificate issuer:       /CN=d79deee4-2cfa-4f53-b7e1-31d4ff09ced9
Certificate serial:       010D0C9F4328583F8975943383DEA7E45EE5D900
Authority key identifier: 64:D6:FF:F2:1C:0A:5F:23:F9:9F:51:E4:3F:2F:A9:2A:38:A3:12:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d79deee4-2cfa-4f53-b7e1-31d4ff09ced9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d79deee4-2cfa-4f53-b7e1-31d4ff09ced9/c8336115-454d-353f-b026-51e3bcda5960.roa
Signing time:             Tue 27 Sep 2022 17:31:40 +0000
ROA not before:           Tue 27 Sep 2022 17:31:40 +0000
ROA not after:            Mon 30 Dec 2024 05:00:00 +0000
asID:                     8075
IP address blocks:        198.52.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:89:75:94:33:83:de:a7:e4:5e:e5:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d79deee4-2cfa-4f53-b7e1-31d4ff09ced9
        Validity
            Not Before: Sep 27 17:31:40 2022 GMT
            Not After : Dec 30 05:00:00 2024 GMT
        Subject: CN=e62cf689-74e6-41e6-aa76-a10d06b0fd9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:65:44:59:f2:50:69:89:3c:cf:48:e3:b5:e0:
                    3c:68:b1:28:22:24:c5:c6:f1:f4:e4:5d:03:12:fa:
                    a6:3c:36:8d:f4:8f:74:ad:21:6c:ae:42:c4:c8:2d:
                    ae:07:62:61:4a:97:9e:03:04:d2:f0:f0:7a:93:17:
                    be:bd:eb:c4:af:ac:d4:8b:ae:6d:c8:0e:89:5d:82:
                    ea:45:ff:0c:41:3f:da:c9:3f:c8:3b:62:0a:ad:34:
                    70:4f:3f:4c:89:b1:6a:30:38:f3:22:68:76:0b:f0:
                    97:74:81:a3:41:c0:82:a5:86:0e:20:8e:7a:f0:d1:
                    8a:61:d4:7d:ba:ad:cb:47:5a:86:18:2c:d4:88:22:
                    83:d5:8e:1c:42:44:5c:18:44:4a:71:92:50:bf:2e:
                    1e:3d:27:1b:c4:c7:c1:db:f9:aa:e7:92:3b:18:cb:
                    92:13:9e:25:d4:b4:b6:10:99:2c:3d:47:58:6c:4d:
                    f7:aa:2f:5d:e3:ee:41:71:f8:c0:d1:b3:95:77:eb:
                    1f:9c:2b:59:4b:fa:96:c5:9b:fd:03:bd:ed:34:cc:
                    72:d1:9f:b6:15:0f:a2:7c:26:94:10:74:0a:e0:ef:
                    a4:ef:ca:83:a7:5d:56:67:11:f6:ab:4d:c0:7c:98:
                    93:4a:a2:15:56:d7:19:f4:92:7f:8b:2d:06:2c:6f:
                    61:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:39:8D:57:A9:8D:06:94:0B:38:43:9A:88:45:AC:6B:DB:31:85:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d79deee4-2cfa-4f53-b7e1-31d4ff09ced9/c8336115-454d-353f-b026-51e3bcda5960.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d79deee4-2cfa-4f53-b7e1-31d4ff09ced9/d79deee4-2cfa-4f53-b7e1-31d4ff09ced9.crl

            X509v3 Authority Key Identifier:
                keyid:64:D6:FF:F2:1C:0A:5F:23:F9:9F:51:E4:3F:2F:A9:2A:38:A3:12:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d79deee4-2cfa-4f53-b7e1-31d4ff09ced9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.52.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:fb:91:ca:9e:4e:c4:77:18:ea:41:03:1f:02:c5:8a:dc:e0:
         ed:2e:ed:d0:75:d7:c9:68:3c:76:73:18:df:bf:95:74:47:fb:
         13:13:e3:da:8a:a2:ff:fb:f7:b1:7a:8c:ee:e1:97:25:96:68:
         96:24:d1:75:40:a9:80:a2:78:73:4c:9e:0d:1f:93:bc:e5:31:
         3a:88:15:b4:9b:e6:c1:6e:cb:d6:31:17:30:e0:36:45:90:57:
         0f:ad:ad:c2:7b:a4:7c:2d:d5:ea:bf:4e:e9:88:33:d9:d2:45:
         58:15:15:f8:f3:bd:80:ea:21:53:70:12:d2:59:54:f7:bc:91:
         c0:97:33:f9:80:58:5f:ae:bf:0b:93:1d:8d:8c:2a:b8:a1:7c:
         14:cb:78:a0:7e:d0:7b:68:d7:0f:7d:b9:9f:06:33:8a:14:3d:
         98:fe:30:36:ee:f4:a1:3f:8f:e9:d7:72:2a:a1:1a:c3:c7:0b:
         c3:41:9f:33:a1:a5:e2:b6:37:67:af:71:23:da:8a:05:dd:d0:
         5b:a3:19:e0:4d:df:cc:87:a7:4b:b6:fa:54:c7:dc:2e:52:e9:
         78:86:36:45:f2:d5:ac:a9:c2:72:d0:00:5b:9f:2b:60:d0:57:
         ff:4a:02:5c:2b:d2:b8:1e:0b:cc:89:5d:8f:ad:b2:86:80:99:
         af:19:dc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----