Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc/bfacf6f3-8375-3480-9da3-8dd786ea6730.roa
File:                     bfacf6f3-8375-3480-9da3-8dd786ea6730.roa (raw, json)
Hash identifier:          MvFOlvXAniHQXaF7KdtdKBesn9R0+4Xetz9wVqNMkDQ=
Subject key identifier:   75:E7:AC:E2:E1:15:CB:BA:0A:7D:BF:C2:FC:5E:FB:78:F6:A5:1A:89
Certificate issuer:       /CN=5054a223-c485-46b0-b02c-2fdc3bfe26bc
Certificate serial:       010D0C9F4328583E420282F1F50879072C39DA00
Authority key identifier: 8B:F7:51:E2:E3:D2:43:13:56:DE:2E:5A:0B:B4:F8:A0:BA:4D:40:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc/bfacf6f3-8375-3480-9da3-8dd786ea6730.roa
Signing time:             Mon 21 Mar 2022 14:36:10 +0000
ROA not before:           Mon 21 Mar 2022 14:36:10 +0000
ROA not after:            Tue 18 Sep 2029 04:00:00 +0000
asID:                     60438
IP address blocks:        216.146.25.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:42:02:82:f1:f5:08:79:07:2c:39:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5054a223-c485-46b0-b02c-2fdc3bfe26bc
        Validity
            Not Before: Mar 21 14:36:10 2022 GMT
            Not After : Sep 18 04:00:00 2029 GMT
        Subject: CN=ffca470d-a6be-4626-819f-bafeab6878ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7d:6a:09:7d:74:82:68:c5:24:28:31:1a:de:
                    69:15:a3:72:5a:5e:bd:90:49:ef:5a:1e:5b:c0:9a:
                    47:fd:25:0b:a3:3b:96:93:7a:26:25:f5:94:af:b4:
                    65:90:48:a9:87:58:6e:6d:35:14:ab:e5:17:38:2e:
                    75:d1:38:3c:b2:0f:f1:10:94:0d:49:ac:bb:28:99:
                    ad:e9:72:db:b7:d0:7e:0e:c5:35:4d:99:fb:b2:07:
                    0e:8a:90:91:32:3d:0c:6d:aa:2f:09:88:9a:f9:f0:
                    f9:51:f0:29:b6:1d:62:b7:54:21:7e:88:9e:6a:1e:
                    02:8d:b5:0c:0e:54:31:23:48:98:c0:ab:86:b6:21:
                    82:3f:ad:59:91:5f:f0:14:26:3a:6d:0f:ca:8b:bb:
                    b9:79:14:d6:79:c1:78:13:6e:7b:4d:e2:29:a1:c0:
                    57:d4:31:19:fc:fa:5c:2d:34:49:34:90:5a:73:e8:
                    ba:e4:6a:23:43:1f:30:65:b5:8e:b5:4f:16:8c:a4:
                    75:62:3a:61:5f:23:9c:8d:86:ba:df:29:cb:32:b4:
                    38:a2:46:3d:94:de:89:e6:6d:56:78:91:7e:0b:ca:
                    78:27:d2:8b:b2:49:01:1a:72:ad:e7:d2:5a:bf:94:
                    b8:62:ae:06:b5:b0:6a:c6:14:dd:97:7b:b2:94:37:
                    d9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E7:AC:E2:E1:15:CB:BA:0A:7D:BF:C2:FC:5E:FB:78:F6:A5:1A:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc/bfacf6f3-8375-3480-9da3-8dd786ea6730.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc/5054a223-c485-46b0-b02c-2fdc3bfe26bc.crl

            X509v3 Authority Key Identifier:
                keyid:8B:F7:51:E2:E3:D2:43:13:56:DE:2E:5A:0B:B4:F8:A0:BA:4D:40:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:de:d0:2c:9a:cc:cc:a3:1e:2e:77:b4:44:cf:37:52:47:00:
         15:b3:b9:44:61:e0:51:98:5a:b4:d9:d7:ed:bb:f3:dd:2d:6f:
         bd:b1:86:f0:38:68:e5:1b:c8:b9:b1:6a:a9:e2:19:be:bc:c8:
         86:b5:04:90:43:36:c5:ab:7b:ac:2c:4b:19:75:0b:91:a1:85:
         97:a2:2f:b3:07:4f:d5:74:cb:d1:ae:9a:a0:e0:13:c2:3a:b1:
         b5:7c:f1:d2:d0:8b:e2:b4:17:8f:1a:8d:fe:2e:df:80:93:08:
         14:92:80:fa:86:92:73:50:0f:26:b1:92:64:98:54:92:48:c0:
         05:3f:15:d3:e7:72:71:97:6b:ec:ac:25:36:a8:af:5f:68:ce:
         16:d3:7b:41:0f:29:9d:73:d0:f7:91:e4:f4:88:86:a8:f5:65:
         48:2d:87:e6:ed:22:41:6a:e8:13:64:84:6e:2b:ec:d1:a7:ab:
         d5:09:a5:f2:6f:a7:92:17:5e:a1:4d:f8:5c:36:07:26:d3:01:
         73:af:6b:17:86:79:78:16:a7:2c:c5:eb:13:96:47:dd:83:4b:
         f8:07:66:f7:d5:a1:52:75:f7:c5:76:e8:d3:ab:a2:f5:ad:32:
         39:4c:34:f2:4c:b0:d3:30:fd:dc:ba:30:89:e1:bc:28:88:59:
         94:2f:bd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----