Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6174d0f9-bf09-485e-8ae7-67987caa5c31/b42480eb-e348-3934-a59c-3ce764915317.roa
File:                     b42480eb-e348-3934-a59c-3ce764915317.roa (raw, json)
Hash identifier:          HyTQ46qPDDhra6wOuIBmMEvBLZi0BvwtG3M4WdHpGnQ=
Subject key identifier:   B1:34:2A:B3:76:A5:7E:A1:5C:64:CD:BD:B8:11:3F:4F:1D:5B:09:DF
Certificate issuer:       /CN=6174d0f9-bf09-485e-8ae7-67987caa5c31
Certificate serial:       010D0C9F4328583C546B5A11492FEEA7E9858800
Authority key identifier: E9:42:23:2E:46:59:C4:1D:2B:4D:9D:2C:D1:0A:0F:45:2F:C4:DD:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6174d0f9-bf09-485e-8ae7-67987caa5c31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6174d0f9-bf09-485e-8ae7-67987caa5c31/b42480eb-e348-3934-a59c-3ce764915317.roa
Signing time:             Tue 21 Dec 2021 05:00:00 +0000
ROA not before:           Tue 21 Dec 2021 05:00:00 +0000
ROA not after:            Fri 21 Dec 2029 05:00:00 +0000
asID:                     26564
IP address blocks:        167.206.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:54:6b:5a:11:49:2f:ee:a7:e9:85:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6174d0f9-bf09-485e-8ae7-67987caa5c31
        Validity
            Not Before: Dec 21 05:00:00 2021 GMT
            Not After : Dec 21 05:00:00 2029 GMT
        Subject: CN=35fb3e22-2539-4c81-8c87-cf8e4739f95d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e7:5e:c8:4f:6d:8a:3c:a8:f6:4f:f2:ca:f1:
                    91:d0:54:91:a3:2d:95:ba:e2:aa:98:7f:96:07:99:
                    0b:eb:36:63:b6:b9:f0:88:62:a7:c5:ab:0a:e3:63:
                    39:2c:b2:6a:fc:e5:d6:4b:47:53:01:68:df:1d:3f:
                    75:7d:9a:c2:07:06:70:8b:20:ae:77:a8:f4:2e:6b:
                    92:0e:17:0b:77:b3:87:68:10:83:7c:cb:bc:b3:b8:
                    e1:79:59:d5:29:4f:12:8e:60:22:6c:33:7e:e7:17:
                    6b:00:90:cb:4a:31:7d:28:6a:7e:1b:97:36:ed:e5:
                    10:81:3c:a5:82:c8:7c:1b:87:fa:96:42:d2:b0:2d:
                    1a:2a:5d:a0:4f:5b:7a:d7:1b:4d:7f:81:41:7d:1d:
                    04:0e:ca:0a:38:0f:ce:79:a7:27:8f:24:21:de:b4:
                    ff:58:49:74:6e:18:5a:3a:e0:2d:4f:ea:03:a6:1a:
                    94:04:fd:32:5c:00:22:6a:df:c0:29:88:5d:70:17:
                    10:ca:51:df:62:16:74:d5:e3:19:01:d9:2e:99:b1:
                    a7:d2:b7:c1:82:d8:0c:23:7b:90:27:7b:ad:5f:c9:
                    e1:25:aa:f4:d6:35:f4:bb:36:5e:e3:2b:a9:59:c9:
                    36:40:cf:6b:ad:8b:9d:b3:2c:2a:88:de:30:48:44:
                    99:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:34:2A:B3:76:A5:7E:A1:5C:64:CD:BD:B8:11:3F:4F:1D:5B:09:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6174d0f9-bf09-485e-8ae7-67987caa5c31/b42480eb-e348-3934-a59c-3ce764915317.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6174d0f9-bf09-485e-8ae7-67987caa5c31/6174d0f9-bf09-485e-8ae7-67987caa5c31.crl

            X509v3 Authority Key Identifier:
                keyid:E9:42:23:2E:46:59:C4:1D:2B:4D:9D:2C:D1:0A:0F:45:2F:C4:DD:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6174d0f9-bf09-485e-8ae7-67987caa5c31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.206.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:1e:38:af:02:14:f1:0e:0d:e3:03:4c:dc:75:b2:57:ed:21:
         8b:97:17:85:c8:36:fd:b9:1c:a7:1a:99:3f:97:50:7f:f3:8f:
         a2:30:ab:47:4d:9b:88:46:f5:7f:09:9c:29:40:47:de:6a:1d:
         f7:9e:44:df:40:82:b4:77:2f:e9:fd:ad:4e:34:ba:af:46:57:
         8d:5d:c3:19:0f:eb:27:5b:bf:d2:95:f9:38:ef:9e:91:40:b7:
         98:d1:b4:3e:16:ab:36:41:59:bf:40:01:77:b2:ca:45:ad:d6:
         9a:be:bd:1e:bc:f3:c0:75:ef:28:1b:c2:1f:3f:8d:98:59:e5:
         3c:46:62:1c:13:4c:57:de:7d:a6:93:52:b4:74:c6:ae:a9:6c:
         d6:7c:1f:30:63:3b:2a:98:e7:02:4a:7b:9f:c2:4b:eb:2c:ef:
         df:d1:92:fd:e5:45:36:01:a8:3b:c9:43:b9:c4:53:36:69:a0:
         b9:2e:c7:4e:c9:ee:82:75:1e:5f:a5:47:88:88:38:fe:0f:d9:
         55:00:55:2c:d8:0a:96:21:81:b8:9e:32:7c:c5:dc:86:28:02:
         d3:10:bc:d3:5f:db:7b:17:84:b2:5d:bc:6c:14:c0:ce:1f:28:
         37:de:bc:97:88:40:d1:ad:88:6d:c0:5a:1e:7a:0c:cb:75:0c:
         d8:b1:a1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----