Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/15189b14-a8e3-3ce1-bdec-14b9b6b6f700.roa
File:                     15189b14-a8e3-3ce1-bdec-14b9b6b6f700.roa (raw, json)
Hash identifier:          Kp3g+wg/B0ZgxkIx/oz1WabhxRYM9pSMPJg78KDMvGo=
Subject key identifier:   08:1B:27:5D:02:79:9F:6E:53:14:2A:D6:7E:B2:B5:BC:29:4F:B1:E8
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583FA53A33994D458EDC64550680
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/15189b14-a8e3-3ce1-bdec-14b9b6b6f700.roa
Signing time:             Thu 20 Oct 2022 12:00:00 +0000
ROA not before:           Thu 20 Oct 2022 12:00:00 +0000
ROA not after:            Fri 25 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        216.137.32.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a5:3a:33:99:4d:45:8e:dc:64:55:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Oct 20 12:00:00 2022 GMT
            Not After : Nov 25 05:00:00 2022 GMT
        Subject: CN=8ca115b8-ccab-483e-8c05-d4d501ccb6fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:df:81:8e:be:10:2e:c4:2e:0a:77:27:aa:d6:
                    49:16:0c:6b:c4:50:16:ac:e3:cc:ff:82:aa:84:16:
                    0e:a6:c8:65:c2:6b:ac:22:b0:89:93:69:38:d5:54:
                    51:72:41:0c:49:27:81:24:c8:22:21:7d:c1:73:8f:
                    37:3e:8b:36:15:e3:29:5b:18:a4:7c:39:78:82:3a:
                    65:f3:5c:ba:e5:25:6f:07:18:16:1d:93:0a:47:91:
                    a4:42:83:d2:f5:0a:1c:56:7e:68:a8:07:08:c3:09:
                    de:88:cd:24:84:da:75:06:7b:bc:67:f1:e6:55:d1:
                    70:b4:2b:cf:b7:e5:b4:33:cf:8a:61:f7:7f:84:50:
                    bd:b1:17:6e:3a:15:f7:57:16:43:e7:e0:97:64:6a:
                    d4:f7:f2:57:11:23:72:01:20:2f:e2:10:b1:5b:f7:
                    fd:fb:0d:bd:cc:58:cc:f0:87:ff:61:56:cc:34:25:
                    f8:bd:72:61:7f:db:73:31:21:1b:ca:d4:ed:1c:19:
                    fe:48:c4:7c:95:9b:55:88:72:cf:97:03:e8:ff:7f:
                    bc:8c:a3:2b:eb:d7:bd:09:45:8d:b2:d8:48:e3:f7:
                    86:6b:d9:da:db:20:63:c1:70:74:d7:b1:8a:6f:b1:
                    e2:35:ea:be:cc:c3:8e:c0:2d:f9:48:c5:47:de:6d:
                    0f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:1B:27:5D:02:79:9F:6E:53:14:2A:D6:7E:B2:B5:BC:29:4F:B1:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/15189b14-a8e3-3ce1-bdec-14b9b6b6f700.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.137.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:b7:fd:07:ee:6f:dd:12:3c:51:42:2e:a5:70:ed:b4:d9:fb:
         cc:82:8d:e5:05:c2:fe:3a:d6:c8:44:0f:a1:29:8b:d8:de:31:
         df:13:6a:80:b2:d9:41:0c:ce:2b:ac:17:a9:b2:3d:ad:2c:d2:
         c2:9d:1d:93:d7:17:76:dd:c3:ac:23:f5:75:21:49:04:44:1c:
         30:3e:66:62:1a:52:6e:a2:9b:71:86:7b:4b:93:69:94:44:16:
         66:dd:22:60:51:88:44:01:b1:c3:b1:cd:5a:e2:cb:e9:6c:7d:
         7e:90:ba:fd:55:de:8e:2c:02:e4:19:66:80:4f:22:87:0a:ee:
         f8:95:41:12:b4:0a:4d:65:67:5c:12:6a:cb:c2:49:3f:29:c1:
         ac:0d:ff:bf:ef:f4:76:b8:7c:70:2d:66:59:88:98:b5:ce:31:
         5f:c4:16:17:7e:7a:bb:8f:7a:60:93:c3:b4:22:32:00:2c:e4:
         6b:aa:9f:8c:b5:c7:e1:12:12:8d:4c:a4:0f:a0:a6:cd:c9:85:
         2d:89:97:4a:62:47:42:37:9f:ed:e6:ad:5d:db:2f:5b:90:a8:
         c8:b3:28:8d:ca:7a:fa:93:be:45:41:15:9f:f9:21:40:df:f0:
         68:db:ca:7b:f2:9d:a4:e5:25:a9:df:9b:78:5a:2c:95:cf:2b:
         7d:b8:19:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----