Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/adf3d71e-4968-3f29-a371-39673dbbd46b.roa
File:                     adf3d71e-4968-3f29-a371-39673dbbd46b.roa (raw, json)
Hash identifier:          t8wuVLsf2lRvueKCsmbn9HllRiPZBnq74hVlasVmfAg=
Subject key identifier:   ED:D6:3C:4C:73:60:08:AF:32:57:0A:BE:10:87:A6:6A:D3:A0:F0:F7
Certificate issuer:       /CN=505332f5-c843-4e04-add6-4ef51984b8f2
Certificate serial:       010D0C9F4328583D0BEC0F420E4406DEA8CFF200
Authority key identifier: 4B:AF:0A:76:57:5E:C4:4D:30:4D:82:DE:3B:0F:0E:02:60:57:28:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/adf3d71e-4968-3f29-a371-39673dbbd46b.roa
Signing time:             Fri 25 Feb 2022 05:00:00 +0000
ROA not before:           Fri 25 Feb 2022 05:00:00 +0000
ROA not after:            Fri 01 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        96.127.0.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0b:ec:0f:42:0e:44:06:de:a8:cf:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505332f5-c843-4e04-add6-4ef51984b8f2
        Validity
            Not Before: Feb 25 05:00:00 2022 GMT
            Not After : Apr  1 04:00:00 2022 GMT
        Subject: CN=21fda003-7b19-4ef2-8259-03f25e1bf679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7a:58:ed:c9:99:84:e3:b3:5e:0f:f4:c0:92:
                    e7:34:18:98:01:4c:2b:cb:fe:1e:3c:01:91:b5:52:
                    4e:5f:4d:e5:29:e2:0c:26:05:05:d1:1d:4e:21:16:
                    0a:15:73:e9:5f:e5:f9:1c:7a:7c:e0:53:e6:9e:96:
                    7b:0e:a5:86:02:47:40:72:d0:74:38:e2:45:64:43:
                    06:0a:12:bc:5d:43:c8:1b:c3:4c:ed:73:47:55:8d:
                    9b:ec:8e:5a:a3:ba:7b:e5:29:f2:0d:3e:b7:df:3c:
                    6f:02:cf:32:fc:58:f0:14:8e:49:30:6a:6a:36:5b:
                    22:1b:41:79:54:dc:9c:78:40:93:96:24:69:04:da:
                    39:c9:eb:7e:91:14:86:60:05:47:59:2e:dc:08:ce:
                    0c:74:b7:03:c8:c9:98:f8:d6:31:d0:af:97:1a:34:
                    fa:99:b9:19:32:43:83:a5:de:a9:2f:b9:fe:0a:9c:
                    c4:2a:cb:b0:03:b9:79:7e:a9:0b:2a:bb:1d:4a:94:
                    82:10:f8:1d:de:e7:ac:f9:07:87:76:be:a7:c1:ef:
                    67:c9:27:81:14:89:fc:9d:e6:e3:4d:10:a6:c1:54:
                    59:59:c9:ba:63:22:06:d7:12:4c:88:63:33:9c:97:
                    a9:7d:3b:8c:fd:14:2d:71:84:cb:22:bb:ea:9b:b7:
                    c7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D6:3C:4C:73:60:08:AF:32:57:0A:BE:10:87:A6:6A:D3:A0:F0:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/adf3d71e-4968-3f29-a371-39673dbbd46b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/505332f5-c843-4e04-add6-4ef51984b8f2.crl

            X509v3 Authority Key Identifier:
                keyid:4B:AF:0A:76:57:5E:C4:4D:30:4D:82:DE:3B:0F:0E:02:60:57:28:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.127.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:ee:44:56:6b:ed:92:c1:03:44:b9:ae:a9:9e:66:b3:4d:1a:
         d8:87:9d:8f:d3:63:4e:8b:dd:60:a1:67:68:c1:c1:18:1f:32:
         8e:b7:c1:de:c3:34:ce:19:e8:7d:df:1b:09:eb:9c:7b:c8:83:
         01:c6:48:8b:81:9c:cb:ec:c7:89:dc:73:9e:0c:2d:04:4a:0a:
         01:7c:06:e2:19:70:43:57:ed:50:5d:94:c8:ce:35:7d:4b:c9:
         d3:ea:70:76:1c:04:e2:58:80:bb:6a:25:df:74:73:aa:3d:cb:
         8a:1c:48:41:4e:88:e4:8c:25:2f:2f:39:9f:a8:4e:8b:ad:c2:
         10:3e:6d:b2:5d:80:19:62:55:11:a1:de:ec:5c:18:c1:1e:a4:
         cb:69:3f:92:fb:9c:a9:dd:ba:9f:69:fa:e1:1b:05:c4:07:89:
         28:0a:fb:5c:e9:d3:3a:7a:3e:c8:af:0f:08:7d:48:1e:61:8c:
         93:f0:98:d6:61:6b:ca:ba:b7:ce:1c:e7:c6:cd:49:c6:28:69:
         35:5f:af:ff:6a:42:e2:33:e4:ca:76:41:fb:34:3d:35:5e:6f:
         6a:89:c1:f4:bb:3e:10:df:f3:09:aa:39:2a:61:c1:a2:16:61:
         93:e7:c0:84:bb:40:6b:7f:c3:31:e9:42:34:5b:3f:4c:65:f7:
         bc:94:bb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----