Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6174d0f9-bf09-485e-8ae7-67987caa5c31/fd4291ba-ba35-3751-93bf-0d9f54f7a07f.roa
File:                     fd4291ba-ba35-3751-93bf-0d9f54f7a07f.roa (raw, json)
Hash identifier:          5gFiBzaagd9CblRrYK1ACiENMKmR9A/93ulc9veUxg8=
Subject key identifier:   C1:84:CC:C9:98:2D:36:A4:35:9D:85:7F:57:A7:F7:9C:05:C6:3C:54
Certificate issuer:       /CN=6174d0f9-bf09-485e-8ae7-67987caa5c31
Certificate serial:       010D0C9F4328583B6D37F6F48C462AE0D3D7A180
Authority key identifier: E9:42:23:2E:46:59:C4:1D:2B:4D:9D:2C:D1:0A:0F:45:2F:C4:DD:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6174d0f9-bf09-485e-8ae7-67987caa5c31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6174d0f9-bf09-485e-8ae7-67987caa5c31/fd4291ba-ba35-3751-93bf-0d9f54f7a07f.roa
Signing time:             Wed 29 Sep 2021 04:00:00 +0000
ROA not before:           Wed 29 Sep 2021 04:00:00 +0000
ROA not after:            Sat 29 Sep 2029 04:00:00 +0000
asID:                     21778
IP address blocks:        167.206.197.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:6d:37:f6:f4:8c:46:2a:e0:d3:d7:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6174d0f9-bf09-485e-8ae7-67987caa5c31
        Validity
            Not Before: Sep 29 04:00:00 2021 GMT
            Not After : Sep 29 04:00:00 2029 GMT
        Subject: CN=3bd93096-3b09-413e-8343-67df61ec8682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:52:0d:f8:13:2d:30:34:67:25:93:7c:1f:e7:
                    11:fa:f4:03:91:61:cb:46:20:c9:b0:8e:ff:ef:5b:
                    6b:a2:c0:cc:1a:01:b7:5e:fd:41:85:7a:71:ab:09:
                    ab:89:c7:32:99:fd:06:64:57:3e:97:71:f9:12:21:
                    7f:a2:51:64:82:ea:45:ad:6e:eb:62:81:b8:bd:53:
                    1a:85:bd:5a:a2:08:3d:46:e0:2d:8f:a5:f0:8a:e3:
                    17:c2:fb:b3:00:e6:ab:ba:0e:72:c5:b0:60:fb:37:
                    c0:cf:f4:4e:f9:a6:b8:8b:4d:91:17:de:6a:41:41:
                    7e:68:f6:42:83:e3:6b:09:06:63:75:ce:44:af:9b:
                    f2:39:73:9d:03:e6:47:3b:f1:8b:b3:1b:5b:80:09:
                    44:ee:9d:04:2f:d6:0d:c6:4b:d2:b6:34:b0:2e:a6:
                    de:8e:f7:86:15:ed:e3:d0:f4:92:73:cc:1c:e9:80:
                    9c:4d:cd:5b:df:78:69:95:af:cb:84:21:c8:5c:87:
                    47:d1:0c:ce:45:35:fb:ad:79:c2:de:28:38:23:c8:
                    8b:7a:7a:86:74:16:4b:b1:5c:14:98:82:bc:fa:ab:
                    1d:1c:01:46:07:5a:c8:ce:d0:1e:d0:44:fe:bd:21:
                    62:9b:be:25:86:c8:16:c6:f3:88:a5:7c:a1:16:21:
                    7f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:84:CC:C9:98:2D:36:A4:35:9D:85:7F:57:A7:F7:9C:05:C6:3C:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6174d0f9-bf09-485e-8ae7-67987caa5c31/fd4291ba-ba35-3751-93bf-0d9f54f7a07f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6174d0f9-bf09-485e-8ae7-67987caa5c31/6174d0f9-bf09-485e-8ae7-67987caa5c31.crl

            X509v3 Authority Key Identifier:
                keyid:E9:42:23:2E:46:59:C4:1D:2B:4D:9D:2C:D1:0A:0F:45:2F:C4:DD:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6174d0f9-bf09-485e-8ae7-67987caa5c31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.206.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:49:d2:93:0b:7b:fe:02:4e:a6:02:88:97:2d:10:12:9c:24:
         83:f5:65:e5:71:91:04:ee:0b:b7:90:f3:e1:9f:87:c7:73:ee:
         33:a7:bf:2b:30:22:ed:fe:c3:7a:6c:a0:ad:f2:ff:0a:ad:be:
         60:31:84:d4:10:c3:8c:d3:c3:8a:2f:37:1a:0f:d8:ed:5d:c8:
         8c:03:c2:9c:7e:33:2a:9c:14:63:46:ed:2b:ff:d5:80:b3:41:
         af:3e:76:e3:47:48:50:85:1e:79:d2:1b:52:b6:0c:f5:78:64:
         01:ab:f9:1d:c6:37:c8:35:47:cc:52:62:7b:67:39:ff:07:ad:
         d8:34:39:51:94:d7:cc:c3:6f:2a:cc:08:27:e5:a1:ab:29:21:
         7f:0d:2a:d3:df:ed:68:e0:de:97:64:ec:87:d6:6f:2e:a6:1d:
         b1:a8:bb:72:0d:18:76:1c:80:9b:cb:e4:0d:09:04:fe:93:96:
         d3:cc:42:3d:e1:c5:81:5a:17:28:1c:db:f8:5a:82:f2:b2:07:
         09:3f:d1:10:66:b6:8b:4e:eb:ff:cb:90:d5:87:28:61:a1:fd:
         5f:dd:1f:bf:f6:b6:06:a0:58:77:eb:dd:d2:9e:62:76:eb:08:
         a1:69:dc:01:c5:fc:00:78:b7:97:7e:69:8b:c4:bb:bf:c6:f8:
         db:ee:e6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----