Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/63d23fe8-1e00-39b4-91fd-c0baf897d361.roa
File:                     63d23fe8-1e00-39b4-91fd-c0baf897d361.roa (raw, json)
Hash identifier:          GZjIScMe2SnToI6M8HzBuRPcftnzrriPMyRJkmavU1s=
Subject key identifier:   B2:BF:54:AE:2E:3F:DF:E2:F7:90:74:8D:B0:6F:51:BE:4E:90:23:85
Certificate issuer:       /CN=505332f5-c843-4e04-add6-4ef51984b8f2
Certificate serial:       010D0C9F4328583CE4CEE824FAACFB904747FF00
Authority key identifier: 4B:AF:0A:76:57:5E:C4:4D:30:4D:82:DE:3B:0F:0E:02:60:57:28:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/63d23fe8-1e00-39b4-91fd-c0baf897d361.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        96.127.0.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e4:ce:e8:24:fa:ac:fb:90:47:47:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505332f5-c843-4e04-add6-4ef51984b8f2
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=4159e3c6-7769-4c1d-bba1-7bf10d66a567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6f:33:8c:66:b8:1c:3e:4c:f1:01:d0:1c:72:
                    54:cc:15:08:d6:57:80:aa:cf:62:bd:1e:61:cc:d8:
                    5f:dc:6e:ae:f1:1f:4c:a5:5d:2f:f1:48:97:e7:4f:
                    89:12:21:ea:61:8d:be:14:ed:97:ee:17:1d:8b:ef:
                    84:53:10:bd:c2:67:94:e7:61:a4:d7:21:26:c6:32:
                    67:fe:d9:34:7c:fe:6f:80:d5:b3:53:b4:a4:f6:d9:
                    0f:56:5d:f3:0b:ff:a8:e1:27:64:97:3e:ff:f7:56:
                    42:62:58:03:04:2b:7b:53:1c:ad:b3:89:3b:ab:70:
                    c0:8d:8e:9c:09:a9:e0:1d:2c:c3:e3:44:e0:b5:ad:
                    ba:93:1d:bb:cd:8d:b1:4d:09:1b:5e:59:81:9c:6d:
                    a8:79:73:c7:14:03:03:66:5e:ae:0b:28:db:68:e4:
                    5f:a7:f9:2c:da:55:58:b7:bd:24:7d:a6:d7:de:d3:
                    0f:2c:4f:c5:98:a5:fa:7e:ea:ce:68:ca:45:26:5f:
                    03:dd:37:9d:48:e8:0c:80:22:bf:83:b7:ff:7d:aa:
                    1c:a6:00:2a:02:b0:7b:97:61:58:50:1c:e2:ff:01:
                    01:a1:48:11:7f:13:59:4f:52:da:68:ef:14:2e:60:
                    ad:53:8f:0b:83:7f:ec:be:ea:61:bc:57:14:d6:ee:
                    d5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:BF:54:AE:2E:3F:DF:E2:F7:90:74:8D:B0:6F:51:BE:4E:90:23:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/63d23fe8-1e00-39b4-91fd-c0baf897d361.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/505332f5-c843-4e04-add6-4ef51984b8f2.crl

            X509v3 Authority Key Identifier:
                keyid:4B:AF:0A:76:57:5E:C4:4D:30:4D:82:DE:3B:0F:0E:02:60:57:28:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.127.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:21:22:8a:26:06:22:79:aa:93:83:b1:0e:eb:7d:37:65:f8:
         c2:8c:98:5f:9a:d5:b6:c7:3a:45:05:43:eb:53:14:98:e9:ce:
         96:75:fb:b1:16:90:61:e3:00:a8:f9:04:c0:bb:b2:77:14:d3:
         2f:10:51:c9:c2:d7:d2:94:8e:3f:2f:29:f4:fa:64:31:7c:2c:
         e2:72:f1:97:ee:98:8a:66:e4:5b:a0:a8:8f:88:d2:08:3f:63:
         dd:93:30:2c:f4:8e:47:35:8f:ff:75:c1:7a:ec:ff:cb:bc:87:
         9c:b7:8f:79:8a:d8:e1:9b:96:d0:a3:c6:3e:a4:b3:44:33:28:
         8b:2b:2d:42:b2:12:ed:30:f4:58:e4:32:79:51:04:83:f9:47:
         4b:2b:15:de:0d:99:62:e7:00:98:c6:c7:b6:dd:68:16:a5:66:
         2d:ba:e4:09:cb:4b:8e:d2:89:e5:5b:9e:64:19:50:cf:a5:91:
         79:9a:66:9f:e4:b8:3c:1f:2d:f0:5c:7f:e0:0d:4c:0d:96:3f:
         77:e1:6b:3b:8a:99:ab:e8:0e:f8:f1:88:f1:37:62:04:ee:6d:
         db:69:20:af:0d:e5:19:dd:2e:ef:83:05:cd:6a:7d:bf:f7:3d:
         02:47:bc:25:61:ec:1d:a7:48:52:91:c3:a5:d3:09:2e:74:c9:
         f1:26:01:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----