Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/0fed2b47-f8ba-35af-86e2-1b96ab14b164.roa
File:                     0fed2b47-f8ba-35af-86e2-1b96ab14b164.roa (raw, json)
Hash identifier:          NyAJgI5Kss52AKGU78LKZS+ubACXfV0hTaUDV/Hj3G8=
Subject key identifier:   5C:A3:0E:C9:45:BD:58:B0:A6:9A:CC:40:04:B1:06:28:2F:A3:6F:47
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583F09D961B3BA5D2E7815165DE0
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/0fed2b47-f8ba-35af-86e2-1b96ab14b164.roa
Signing time:             Fri 26 Aug 2022 12:00:00 +0000
ROA not before:           Fri 26 Aug 2022 12:00:00 +0000
ROA not after:            Sat 01 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        205.251.192.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:09:d9:61:b3:ba:5d:2e:78:15:16:5d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Aug 26 12:00:00 2022 GMT
            Not After : Oct  1 04:00:00 2022 GMT
        Subject: CN=0c5142d8-a617-456c-b267-fbaedafaa3b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ce:88:a2:4a:36:2a:b7:be:ff:35:d3:b9:87:
                    6e:83:0d:9f:be:f3:80:17:9e:3d:5a:ca:66:2b:90:
                    95:d7:11:a1:c9:f8:40:31:a0:3d:68:aa:03:37:49:
                    d3:6b:b6:e0:93:64:a0:0b:18:34:af:63:a8:15:74:
                    3d:9a:e6:f5:de:23:ee:f4:a6:8a:92:1a:6c:43:da:
                    57:65:00:45:83:90:88:fe:c4:81:30:4d:ee:4f:25:
                    20:5f:f1:3f:96:34:9b:36:73:62:e6:6b:de:84:03:
                    3c:3e:3c:b1:db:6f:4f:31:bb:3f:e3:93:fe:2b:1b:
                    00:f9:ae:50:13:05:4f:8e:3c:6a:8a:50:78:9b:86:
                    04:67:c0:bf:c2:1c:6b:af:6b:4a:87:97:dd:2d:0e:
                    04:21:9d:1e:61:31:27:f4:56:a4:17:ae:d0:87:4a:
                    f3:53:94:1e:6a:e5:fd:de:28:b1:be:6f:d7:a8:c9:
                    73:f6:13:db:ac:e9:85:cd:9c:67:98:5d:86:75:96:
                    1c:05:01:5b:30:46:2a:d9:2f:19:aa:e8:f1:ec:53:
                    08:07:dc:9a:de:ce:13:a0:e7:8b:0a:10:f0:09:38:
                    36:39:e7:dd:e2:d1:6a:2e:ba:49:b3:6d:6e:21:ca:
                    e0:8a:53:18:66:b8:23:7a:52:c7:2c:8f:fb:35:39:
                    c8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A3:0E:C9:45:BD:58:B0:A6:9A:CC:40:04:B1:06:28:2F:A3:6F:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/0fed2b47-f8ba-35af-86e2-1b96ab14b164.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:0c:16:a8:3c:b8:1f:b9:a4:38:5f:9d:aa:db:3c:43:b0:ba:
         98:5e:2f:8d:f7:66:57:87:36:da:4f:c7:67:81:98:1e:0d:ad:
         d4:96:7c:54:62:51:0b:da:0f:23:38:2e:24:3a:53:47:4b:f2:
         20:0f:3a:e0:0a:77:ac:9c:58:97:e8:29:6a:35:d2:4f:cd:aa:
         c8:f9:c1:17:09:e5:87:1e:d4:96:e1:71:9e:b3:60:f4:e1:8e:
         7a:fd:d5:75:5e:f8:64:f0:bf:79:ec:40:67:24:24:42:16:14:
         b1:b2:a7:9e:3b:f5:66:13:29:31:8d:30:cb:9a:a4:fb:07:e5:
         99:52:63:29:43:68:55:98:ee:6b:23:66:9b:0a:eb:e4:69:69:
         8c:f4:6b:c6:48:c5:bc:c7:d6:56:65:0a:4d:ae:d3:95:04:a4:
         66:02:a8:66:21:f6:6d:dd:12:00:ff:b7:1c:40:af:c6:70:b9:
         93:47:b5:d9:d8:b0:9c:ad:6f:16:08:27:da:32:7b:cf:10:cd:
         29:fd:cb:55:a5:fe:4b:58:ff:28:84:2e:f8:2c:a5:c6:34:db:
         0b:5f:58:1e:13:31:ae:c4:c1:44:8e:3a:72:0a:0e:42:a3:7d:
         67:05:26:7c:b4:31:ac:a7:cf:62:26:94:d4:08:e8:04:0e:8b:
         7d:1d:f2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----