Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/2a24212a-5aec-374c-a8b5-85172011149e.roa
File:                     2a24212a-5aec-374c-a8b5-85172011149e.roa (raw, json)
Hash identifier:          YFXVXNG7zkPKCPRifPTJrHm1FqovlcTwQri3l9kU940=
Subject key identifier:   0E:0F:EB:44:5E:D8:A2:25:6D:BE:BF:05:16:CF:13:16:09:57:01:74
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583DD11E051A5579097A0F54DD80
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/2a24212a-5aec-374c-a8b5-85172011149e.roa
Signing time:             Fri 06 May 2022 12:00:00 +0000
ROA not before:           Fri 06 May 2022 12:00:00 +0000
ROA not after:            Sat 11 Jun 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        204.246.160.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d1:1e:05:1a:55:79:09:7a:0f:54:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: May  6 12:00:00 2022 GMT
            Not After : Jun 11 04:00:00 2022 GMT
        Subject: CN=65f16119-6bca-4a58-acd5-ad56037a0e67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:89:a8:48:81:dd:ec:8e:53:54:88:f0:55:9f:
                    68:c7:19:65:40:82:9a:8f:91:0e:ea:d7:51:7d:27:
                    17:1a:d4:dd:8d:36:81:0b:d3:69:13:eb:55:fa:03:
                    32:60:b4:7a:f1:18:0d:0f:eb:43:10:13:8d:3d:c9:
                    74:01:1f:bb:bd:10:76:72:91:e4:3c:97:f6:65:83:
                    ed:d2:2c:1a:2b:9a:11:ca:5d:1e:7a:89:fc:11:81:
                    b3:6d:6c:2c:f5:d2:99:93:12:ed:35:b3:75:20:56:
                    0a:e4:65:ef:88:b7:57:da:70:6d:91:05:06:aa:fc:
                    a3:3b:47:d7:7d:3c:2a:f7:b7:e0:dd:80:49:ae:45:
                    3e:b7:01:97:49:01:1f:c5:29:aa:0a:91:cb:d1:29:
                    0b:1a:14:e5:fc:e8:7d:e8:cf:5b:1c:27:f8:7c:ef:
                    33:af:eb:aa:38:17:94:35:5b:e8:c4:7e:a5:99:06:
                    e5:35:40:cd:bd:e4:78:33:d9:5f:4a:17:9a:b0:b5:
                    d8:b9:f7:8f:1e:1f:6b:da:31:fd:d6:46:89:b7:5f:
                    2f:fd:42:c9:aa:db:fb:6c:d5:f5:93:ff:e1:f0:12:
                    7c:51:e7:24:7b:5a:d0:fb:9c:d6:a8:4d:ab:61:e4:
                    ba:31:3a:77:fa:ef:27:9f:e7:a0:d1:84:f6:d2:c4:
                    32:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0F:EB:44:5E:D8:A2:25:6D:BE:BF:05:16:CF:13:16:09:57:01:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/2a24212a-5aec-374c-a8b5-85172011149e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.246.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:50:ed:7d:4e:8b:39:ec:85:27:68:19:15:bc:25:39:5f:38:
         69:f9:37:10:fa:ec:db:81:91:90:d2:7a:d1:52:2a:44:5f:93:
         a3:d5:54:a5:40:05:cb:fb:46:ee:bf:ca:12:c0:19:41:af:66:
         8f:74:8e:4f:c0:a1:94:ce:03:a2:96:81:58:61:4d:25:0c:e3:
         6d:a9:a2:6b:5e:49:c5:f7:e4:45:8d:dd:39:ce:33:73:48:43:
         47:71:10:66:45:d8:8d:36:4f:86:a7:9e:1a:63:ec:5b:a8:7e:
         1d:a6:d5:35:06:ac:a6:e1:54:a8:62:32:07:e1:4b:4b:09:3a:
         86:d9:67:95:78:35:ab:2a:aa:a8:d7:76:30:de:58:13:ad:3b:
         db:81:52:bb:7b:69:1a:db:8e:bd:ca:1c:50:bf:7a:f7:02:b6:
         07:b2:d6:8e:cd:9d:5e:f5:b6:c3:c4:20:d9:61:3d:f7:8b:62:
         2f:95:16:24:ee:b8:9a:0a:72:06:53:3a:5b:0e:75:d4:ec:74:
         2b:f4:ab:8b:12:a7:3a:6d:64:0d:e9:31:92:02:20:2a:d0:c3:
         a9:61:9a:87:5c:9c:6c:df:de:87:a1:00:f6:1b:82:6c:20:8b:
         1d:4c:98:b9:a9:22:20:4e:dd:2b:d3:2c:4c:90:38:9a:28:d6:
         39:ee:08:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----