Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/2101eaa8-47d1-335a-b57d-4499096ca6bb.roa
File:                     2101eaa8-47d1-335a-b57d-4499096ca6bb.roa (raw, json)
Hash identifier:          vmJbh/jhDniox556hQ5hmuhyvJ+3d15kr7EPOrlkXZM=
Subject key identifier:   71:50:F8:65:C9:F2:B4:D0:E5:EB:A9:38:AC:9A:ED:D4:CA:E6:B5:B0
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583DF80E31682EB58EDF4CA1EA40
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/2101eaa8-47d1-335a-b57d-4499096ca6bb.roa
Signing time:             Thu 19 May 2022 12:00:00 +0000
ROA not before:           Thu 19 May 2022 12:00:00 +0000
ROA not after:            Fri 24 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        205.251.192.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f8:0e:31:68:2e:b5:8e:df:4c:a1:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: May 19 12:00:00 2022 GMT
            Not After : Jun 24 04:00:00 2022 GMT
        Subject: CN=2da692c5-7bec-44fb-81c1-458948a4b72a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:73:03:03:70:5e:de:6a:65:18:31:22:d3:2a:
                    c4:93:c6:d3:78:ef:1e:cf:16:6a:0f:57:1b:f7:49:
                    12:54:c0:b2:bd:08:f8:05:6a:b7:88:5e:b8:c6:7a:
                    96:b6:e9:64:c9:22:20:27:b3:36:6e:0a:17:e2:7c:
                    e4:a0:a0:84:95:f1:22:7f:53:1c:0e:62:e0:c3:ff:
                    5a:56:4e:46:72:2f:d8:13:8e:a2:b9:d1:05:bb:2e:
                    b7:0b:bf:cb:51:0c:d3:26:2a:d0:9b:66:0a:cb:e0:
                    09:24:43:95:85:6b:fe:3c:e7:d1:f9:96:74:d1:83:
                    30:ed:7f:7c:64:22:cd:a9:15:52:6e:30:42:c9:57:
                    26:dd:6e:62:c1:bc:19:45:c7:fd:1f:aa:b8:60:fa:
                    c4:41:a8:7e:3f:a9:c6:41:50:48:46:c3:8c:fa:2f:
                    64:6d:30:0b:3b:20:c8:33:52:9c:21:03:27:68:54:
                    f3:94:e8:b0:80:8e:c7:98:6c:11:4f:f7:be:cc:ab:
                    20:f2:ef:c1:28:b3:9f:e9:0e:87:6f:e9:af:b6:8d:
                    6e:19:4e:8c:d7:cc:92:53:0d:65:23:9d:69:83:07:
                    d4:b3:24:58:c5:a4:69:0b:bb:10:14:04:fa:a6:50:
                    5a:fc:51:52:45:a7:43:98:e4:82:46:53:9d:85:06:
                    ec:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:50:F8:65:C9:F2:B4:D0:E5:EB:A9:38:AC:9A:ED:D4:CA:E6:B5:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/2101eaa8-47d1-335a-b57d-4499096ca6bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:95:88:4a:a2:3c:ba:5c:ba:ae:a6:36:06:ec:43:88:e6:e9:
         4b:89:e1:63:58:9c:e4:09:9a:7b:6e:dc:44:f6:cb:49:e3:2c:
         b4:3c:ae:17:c3:e7:3b:8c:d1:e9:37:d8:76:c5:5e:85:93:53:
         ac:28:01:67:63:6a:95:a3:ef:94:3f:d4:01:46:96:33:4e:3f:
         a5:d9:54:5d:4d:54:6a:3c:1a:49:3b:89:8b:b5:74:4e:bd:9c:
         d5:47:c9:52:72:c1:f4:8b:48:18:4a:48:de:5b:5f:29:c3:15:
         80:48:ee:42:d5:55:cc:4e:72:55:6c:e1:75:8d:5c:d6:31:8d:
         59:ca:94:bd:26:9d:16:b1:dd:71:7e:57:ed:ca:09:c3:46:dd:
         a5:5d:04:6d:59:be:eb:9a:7a:ce:91:1f:1b:31:44:29:89:44:
         05:4e:de:fb:27:e2:14:3d:cd:da:9a:f2:d6:5b:48:25:6b:0f:
         e5:ed:c3:90:3f:9a:59:18:61:c4:b1:5a:8f:86:4b:c9:4d:97:
         ca:84:a8:52:03:e6:f8:27:ca:03:05:a1:d5:2a:8f:dc:9d:7d:
         bc:a3:e9:00:2b:0f:fc:35:1b:4a:83:e2:d4:9f:a6:87:ea:b0:
         bd:c6:19:15:26:bb:cb:7e:a7:16:78:63:44:6a:12:03:88:14:
         97:27:09:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----