Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/12c501d2-a0fc-3c4b-a6b0-a5f75d3ae39a.roa
File:                     12c501d2-a0fc-3c4b-a6b0-a5f75d3ae39a.roa (raw, json)
Hash identifier:          6ZZPU0toviHBp5dx8b7YHbpPbZixtpZ60q9GMp11bDI=
Subject key identifier:   13:15:C5:B0:44:98:A1:81:F7:A8:F8:CA:04:35:93:F9:DE:1C:CA:77
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583E6D91F0CC4C34D039962C8180
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/12c501d2-a0fc-3c4b-a6b0-a5f75d3ae39a.roa
Signing time:             Fri 01 Jul 2022 12:00:00 +0000
ROA not before:           Fri 01 Jul 2022 12:00:00 +0000
ROA not after:            Sat 06 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        204.246.160.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6d:91:f0:cc:4c:34:d0:39:96:2c:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Jul  1 12:00:00 2022 GMT
            Not After : Aug  6 04:00:00 2022 GMT
        Subject: CN=3303f404-e76e-4977-b617-aec116db2604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ae:3c:00:65:73:ed:e6:db:89:a0:c7:96:40:
                    93:2d:9e:b9:2e:ee:92:14:21:4b:cd:4a:6c:30:4a:
                    ec:4d:38:df:55:4e:49:3c:1b:b7:67:a3:8c:f1:8a:
                    e3:ed:fc:70:41:f1:55:75:16:22:7f:a1:bb:aa:29:
                    ca:1a:fb:a7:15:cd:50:8d:fe:ed:af:b3:74:41:05:
                    63:60:d3:d3:59:81:ff:36:57:9c:1a:a3:30:3e:aa:
                    71:a3:97:aa:22:85:c5:01:6f:25:01:b1:55:54:c8:
                    b1:1e:ae:a8:c9:e8:e3:7b:6b:22:d8:1d:35:07:f2:
                    d3:4f:52:d5:d2:b5:d8:48:41:c8:26:74:52:16:95:
                    d2:78:03:f9:ac:89:92:1f:21:2e:42:41:ae:e9:05:
                    9f:b3:6c:61:26:ba:a9:40:39:79:2e:db:3c:17:da:
                    f5:a9:c3:73:e6:2c:a5:8b:30:eb:d6:f9:a5:08:15:
                    d6:c6:7a:04:e8:c2:cc:14:97:ca:d3:90:d5:53:84:
                    ee:0c:2d:4e:6a:ef:37:4b:69:da:0b:75:f0:ce:19:
                    17:58:01:e1:1e:8d:af:a1:94:8e:ae:14:40:06:49:
                    c8:c3:ba:f4:16:e6:d5:f0:1e:6d:0f:3b:8d:4a:66:
                    41:20:a7:c2:ca:86:20:34:82:c4:e7:65:0e:ac:ae:
                    b9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:15:C5:B0:44:98:A1:81:F7:A8:F8:CA:04:35:93:F9:DE:1C:CA:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/12c501d2-a0fc-3c4b-a6b0-a5f75d3ae39a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.246.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:b2:8d:fa:b7:ee:8b:6b:a2:62:cc:72:dd:98:19:65:1f:7d:
         5b:3f:6a:ec:64:aa:37:82:92:22:16:24:09:ff:6b:a8:ce:71:
         9b:4c:96:e5:85:b7:e4:5a:31:b9:0b:9d:16:5f:ec:7d:10:7c:
         50:0f:dd:8a:f3:b8:db:9e:0d:69:92:09:d3:8c:4e:97:d3:28:
         a5:6f:0e:29:ac:2f:53:9b:73:e3:fa:e1:62:02:9d:67:c4:d8:
         87:58:17:06:70:b7:8a:1a:6e:be:87:e1:65:e7:9b:a0:ae:a3:
         56:63:2e:6c:f6:00:b7:7f:7e:d2:f8:a2:54:7e:dd:64:9f:ee:
         12:b2:d8:cd:c5:c1:4b:a3:31:de:1e:88:c7:38:b8:db:3c:16:
         93:d5:16:a0:95:36:f9:86:c1:de:c0:6e:c6:df:00:6d:c7:e7:
         6d:97:c8:97:d0:87:1a:16:89:69:a8:d8:38:ea:12:5a:29:5a:
         29:06:64:b7:a2:eb:1c:3c:4d:58:22:af:80:67:cf:7a:42:ec:
         58:9c:12:58:73:5d:f3:68:48:46:62:1a:27:f4:ed:18:99:41:
         aa:ec:be:bd:62:cf:06:55:b2:b3:de:30:7d:ae:23:5e:28:da:
         5b:52:1d:c2:49:a3:6b:5b:ef:b4:d5:78:1a:25:2d:d7:fd:20:
         73:20:f9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----