Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/bfe77360-4305-356a-9160-17034c0dc6c4.roa
File:                     bfe77360-4305-356a-9160-17034c0dc6c4.roa (raw, json)
Hash identifier:          5sODR7hvvh/03IEUDamTExX4ERU9Mfo2/4u1cgHEIGg=
Subject key identifier:   08:F5:34:FA:39:C9:F4:DC:71:5D:DA:EA:EC:76:17:D0:4A:D8:79:40
Certificate issuer:       /CN=505332f5-c843-4e04-add6-4ef51984b8f2
Certificate serial:       010D0C9F4328583FA426BCE5450C49AE825B9A50
Authority key identifier: 4B:AF:0A:76:57:5E:C4:4D:30:4D:82:DE:3B:0F:0E:02:60:57:28:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/bfe77360-4305-356a-9160-17034c0dc6c4.roa
Signing time:             Thu 20 Oct 2022 12:00:00 +0000
ROA not before:           Thu 20 Oct 2022 12:00:00 +0000
ROA not after:            Fri 25 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        96.127.0.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a4:26:bc:e5:45:0c:49:ae:82:5b:9a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505332f5-c843-4e04-add6-4ef51984b8f2
        Validity
            Not Before: Oct 20 12:00:00 2022 GMT
            Not After : Nov 25 05:00:00 2022 GMT
        Subject: CN=94502e3c-e730-485e-8711-b00853e2d5d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:08:3b:e3:96:aa:a8:dc:e4:d7:90:2e:f3:53:
                    59:92:9a:0b:bf:fd:db:43:56:85:3e:b3:54:1a:79:
                    a5:ae:c0:9b:e1:cf:ae:8a:04:ad:6f:36:b8:d4:88:
                    66:f7:33:d7:74:e7:b1:6a:b0:3a:94:83:5c:61:16:
                    fb:88:f1:00:b8:2f:74:6d:00:76:7a:f8:73:0b:b1:
                    53:be:23:f2:ce:e5:5b:d1:7a:11:51:a8:8a:b9:cc:
                    2c:c0:61:64:6d:19:28:75:b6:45:15:a1:ed:8f:58:
                    09:9c:55:4e:8b:55:22:2f:df:06:34:8a:11:d9:d1:
                    33:97:ff:f1:fe:05:df:ae:cb:fd:b7:5c:2e:15:b7:
                    29:2e:94:55:8e:df:b8:09:a4:b5:9e:6a:5a:37:c4:
                    59:43:18:6d:9a:1a:bf:25:fb:31:66:89:2c:4d:cd:
                    0e:dd:3b:91:fc:24:af:96:1c:31:60:31:68:74:c8:
                    e6:ed:c0:59:9c:f4:6f:e3:69:35:11:f1:4b:25:ba:
                    36:ae:21:03:74:e6:7a:48:da:17:95:c0:c4:7f:77:
                    41:3f:07:bf:43:52:f1:be:34:4b:be:25:ce:d6:95:
                    63:d3:bd:16:d3:52:cd:47:f3:3f:7c:12:ff:b8:82:
                    6e:d4:a4:2a:f2:fb:62:0e:88:19:12:34:ff:93:54:
                    fa:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F5:34:FA:39:C9:F4:DC:71:5D:DA:EA:EC:76:17:D0:4A:D8:79:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/bfe77360-4305-356a-9160-17034c0dc6c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/505332f5-c843-4e04-add6-4ef51984b8f2.crl

            X509v3 Authority Key Identifier:
                keyid:4B:AF:0A:76:57:5E:C4:4D:30:4D:82:DE:3B:0F:0E:02:60:57:28:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.127.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:d0:7c:a9:a8:8a:1c:9c:16:61:53:ba:45:ca:8c:1b:3c:03:
         3b:ce:f7:bb:34:7a:c0:78:b4:e0:f7:8f:36:17:83:c9:45:f2:
         9b:71:ed:99:4f:eb:06:9e:82:7a:e9:13:0a:10:19:81:aa:b2:
         47:cd:76:eb:7b:00:1a:45:70:b5:ad:a0:14:44:ba:34:99:41:
         b2:0c:61:bc:88:90:ab:ec:8f:0d:aa:8c:9c:c5:bb:05:d2:61:
         2f:1b:1a:49:37:d0:95:4c:50:62:39:a2:1f:81:fb:96:d4:cc:
         fa:86:f7:d5:51:33:f0:82:26:2b:0e:2f:fd:6e:23:c6:fc:a1:
         fb:ca:42:2d:b4:f7:b3:95:b0:8e:8f:71:3c:8e:7b:aa:71:ee:
         90:44:6f:ef:8a:e7:e3:1e:7d:e7:77:38:f9:9a:c4:2e:ae:bf:
         a0:94:21:75:d3:bc:6d:33:2b:1a:1a:a8:35:d2:26:aa:10:5f:
         e3:2d:ec:4b:eb:05:d3:fb:4a:47:3a:98:f9:83:9c:db:5c:23:
         65:f5:3a:46:e6:ab:b3:72:71:a7:58:b4:9d:7d:71:e6:91:c0:
         bc:4b:86:63:e9:26:d5:94:73:3e:8f:00:d9:bf:96:c7:c7:77:
         bb:9b:52:7e:02:92:67:7c:87:af:9f:1a:12:76:43:7c:92:ee:
         bf:7f:4b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----