Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc/575e552c-2b32-35a3-9e9a-6a500f6018f0.roa
File:                     575e552c-2b32-35a3-9e9a-6a500f6018f0.roa (raw, json)
Hash identifier:          caD4krkwMrjuuO+rIfpQ6NBdI/avqw7wBv4d/AMcQCI=
Subject key identifier:   99:83:D1:19:A1:5F:2F:90:57:D4:F4:09:AF:71:70:23:92:6F:52:7A
Certificate issuer:       /CN=5054a223-c485-46b0-b02c-2fdc3bfe26bc
Certificate serial:       010D0C9F4328583F269C68B849C77EDEE1A77600
Authority key identifier: 8B:F7:51:E2:E3:D2:43:13:56:DE:2E:5A:0B:B4:F8:A0:BA:4D:40:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc/575e552c-2b32-35a3-9e9a-6a500f6018f0.roa
Signing time:             Fri 24 Jun 2022 17:36:07 +0000
ROA not before:           Fri 24 Jun 2022 17:36:07 +0000
ROA not after:            Tue 09 Dec 2025 05:00:00 +0000
asID:                     207599
IP address blocks:        216.146.26.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:26:9c:68:b8:49:c7:7e:de:e1:a7:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5054a223-c485-46b0-b02c-2fdc3bfe26bc
        Validity
            Not Before: Jun 24 17:36:07 2022 GMT
            Not After : Dec  9 05:00:00 2025 GMT
        Subject: CN=7621f513-ce10-46f9-b132-472ed872b265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:aa:f4:a8:dc:1d:22:d3:44:80:6b:d5:bf:67:
                    df:86:b8:bd:68:80:e1:47:9e:86:52:b3:67:0a:b9:
                    20:72:9c:cc:ba:0b:27:2d:4a:72:49:42:a9:dd:be:
                    ab:40:da:8a:4d:99:87:76:4d:b1:96:e4:91:8e:64:
                    44:f0:e5:5c:e5:d3:cc:e2:3c:29:cb:b4:5a:09:7a:
                    a4:e7:12:6e:61:3a:d0:8e:5f:72:ff:05:8a:63:a9:
                    03:d2:c5:a8:9a:60:8c:14:f2:78:47:57:79:4d:ea:
                    06:66:95:a3:14:73:69:d8:c2:06:39:ce:fb:43:4a:
                    86:00:c4:2d:61:b1:2b:a5:28:cc:cc:16:36:0d:63:
                    70:e4:81:6d:9f:a3:d9:45:e6:6a:d9:cc:33:18:68:
                    8f:61:ae:69:73:66:49:8d:5e:ba:6e:08:ff:f7:17:
                    43:55:41:19:c4:1b:ce:72:f4:c7:82:b1:ab:3e:84:
                    46:c5:84:1d:d9:5a:22:f3:87:18:1f:76:88:4b:31:
                    62:15:4d:85:70:a2:d5:33:b1:ae:c5:8e:2a:cd:77:
                    54:0b:b9:49:4a:c7:40:51:ba:07:c3:19:21:8e:b4:
                    5b:63:b2:32:8f:75:fb:c2:5e:c2:dd:9d:d9:7a:fe:
                    a8:c0:4a:72:3b:62:00:83:01:c6:13:b5:f1:54:b4:
                    c0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:83:D1:19:A1:5F:2F:90:57:D4:F4:09:AF:71:70:23:92:6F:52:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc/575e552c-2b32-35a3-9e9a-6a500f6018f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc/5054a223-c485-46b0-b02c-2fdc3bfe26bc.crl

            X509v3 Authority Key Identifier:
                keyid:8B:F7:51:E2:E3:D2:43:13:56:DE:2E:5A:0B:B4:F8:A0:BA:4D:40:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:4a:e4:1e:f3:7f:7a:23:87:1f:94:26:d3:94:ed:90:38:b7:
         58:a3:5c:2d:85:a1:c5:0f:ee:e9:00:9e:c4:46:6c:94:e4:84:
         0c:91:fd:5d:71:c0:f3:4f:ee:6a:3c:af:9d:e1:ba:02:24:e5:
         8c:a6:b6:59:b7:c1:24:f4:fd:67:96:f2:d0:88:38:ef:93:e2:
         ca:a1:af:1b:1b:49:c5:b3:46:81:b6:e3:04:f8:7b:e8:3c:5b:
         30:e8:9e:d7:c0:ae:79:2b:31:25:2e:76:e7:98:26:d6:52:c3:
         29:61:ea:ed:47:73:57:0f:14:06:0d:d1:f8:6b:94:0d:1d:ba:
         0f:fe:c5:29:af:eb:84:ce:7e:b0:a5:ae:66:f0:f2:a1:d8:b7:
         bb:bb:e2:fa:42:2f:34:63:e5:b7:ba:3e:96:85:e4:f2:09:7b:
         6d:13:66:18:ac:57:ac:8e:f1:45:b6:48:0d:ff:b4:bd:8a:18:
         ba:aa:e5:a1:ad:d7:3f:a7:5d:88:cd:52:e5:97:95:2b:b0:c5:
         d1:e8:1b:a4:70:73:18:f0:1f:5e:2a:d9:3f:83:a5:73:ca:26:
         d4:2b:09:2f:c2:46:ab:20:c6:ae:09:4f:2a:69:6e:f4:c6:d9:
         79:9f:a7:e7:f6:92:dd:42:16:81:ca:18:2e:81:b0:b9:15:a9:
         b6:12:48:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----