Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/26fd47a0-e1b1-3090-a55f-d67aa3e198ec.roa
File:                     26fd47a0-e1b1-3090-a55f-d67aa3e198ec.roa (raw, json)
Hash identifier:          fg0yQhTYmEVkgpD/U2JwM31NyBTU+TAP0UFViz6qa9w=
Subject key identifier:   3F:FF:89:01:D0:A8:9F:61:44:8A:F5:4E:3F:B7:04:F9:33:1E:9D:AE
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583F30F6566E1140351BDCB3C780
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/26fd47a0-e1b1-3090-a55f-d67aa3e198ec.roa
Signing time:             Fri 09 Sep 2022 12:00:00 +0000
ROA not before:           Fri 09 Sep 2022 12:00:00 +0000
ROA not after:            Sat 15 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        205.251.192.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:30:f6:56:6e:11:40:35:1b:dc:b3:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Sep  9 12:00:00 2022 GMT
            Not After : Oct 15 04:00:00 2022 GMT
        Subject: CN=ceaaa877-25c7-4116-ad33-52360e518aa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bd:bb:b7:99:23:3d:4c:3d:59:bc:ed:54:48:
                    e6:21:0a:e5:5d:82:ba:15:c2:c0:9d:58:fd:b0:eb:
                    fb:85:93:24:c8:3a:fb:ee:ee:34:24:9b:94:bc:44:
                    f5:2a:1f:74:a5:c1:ba:00:be:1b:fc:ce:1f:e3:ce:
                    ea:53:b0:55:6a:49:50:46:a3:8f:85:96:d6:14:9d:
                    58:9e:bb:5b:3f:2c:d2:f9:75:3e:ec:8f:73:11:96:
                    1e:80:13:59:7d:e0:12:a6:30:07:66:96:bc:ae:a9:
                    67:22:78:d4:32:63:f0:93:07:48:45:ac:6b:20:2a:
                    84:69:ec:bf:6e:b8:eb:72:97:8e:40:b3:c1:43:9e:
                    82:03:a1:29:ed:b3:86:c7:31:aa:d4:ac:f6:8d:ee:
                    58:88:38:ea:3e:5f:0d:14:76:c8:39:70:7a:5a:c9:
                    b6:64:f6:a1:83:f1:30:96:63:f0:7e:94:bd:77:32:
                    d0:45:f0:0b:14:4e:f9:42:ec:8b:45:75:b4:00:3d:
                    60:e2:a7:b5:86:20:aa:fb:aa:ac:21:86:8f:59:19:
                    50:71:f1:85:f1:31:08:cc:ea:91:de:64:f2:41:18:
                    19:ef:11:43:32:e5:02:92:70:9c:ff:b2:4d:1e:62:
                    38:d8:01:75:8b:f0:33:09:fd:7f:47:68:d4:c7:9b:
                    ad:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:FF:89:01:D0:A8:9F:61:44:8A:F5:4E:3F:B7:04:F9:33:1E:9D:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/26fd47a0-e1b1-3090-a55f-d67aa3e198ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:14:8f:33:ad:06:07:75:53:ef:0b:57:1b:27:51:0f:36:18:
         eb:9a:44:d3:72:ad:03:b0:e2:fe:e2:01:f3:f5:6a:c0:27:ef:
         e8:6c:d5:87:9a:0e:ad:17:2f:f4:52:d6:f0:1a:ed:0f:33:98:
         89:19:0b:12:69:54:e2:8f:59:dc:a0:66:e8:b2:13:ea:b1:2c:
         ee:7e:94:e5:c7:4e:bc:b8:f6:50:d0:45:5c:09:2b:77:9f:0e:
         0f:95:58:32:f6:17:d5:73:d8:7f:52:18:16:8f:c3:95:ad:13:
         d7:1b:84:02:00:60:84:4e:52:f7:75:52:df:2c:67:42:98:6f:
         b3:0d:11:82:19:e2:06:3c:7e:44:a0:18:9f:c2:c1:3f:94:c6:
         48:7f:bd:fd:af:c7:9f:95:75:d3:27:f5:6c:a8:bf:28:a9:6c:
         f6:cf:e1:02:f3:c0:41:04:0b:24:ea:c5:3c:84:0f:e1:41:ee:
         20:bf:84:1e:77:ab:44:15:a7:f2:43:68:0e:29:66:88:49:8d:
         da:e0:c2:96:46:ae:c9:2a:0f:88:88:22:8f:f8:a5:60:7e:87:
         cd:58:5c:e6:b2:ea:35:56:54:8f:fd:f6:4c:eb:38:9a:35:71:
         55:70:1d:3d:76:f1:ef:09:16:2b:36:fc:e9:94:cd:e4:e9:ad:
         69:34:8c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----