Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/35a1b486-615a-3860-bf00-8e9a87abcdfd.roa
File:                     35a1b486-615a-3860-bf00-8e9a87abcdfd.roa (raw, json)
Hash identifier:          /C1fXSWYDr/yGJ+i//j9a649V5iWOuLasg0O8HVDNrQ=
Subject key identifier:   40:43:A2:B2:21:34:C1:AB:9A:EB:74:6F:7D:AA:40:C6:9D:0A:F1:C1
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583FCDD2DEAD3B7AEF4746E7E540
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/35a1b486-615a-3860-bf00-8e9a87abcdfd.roa
Signing time:             Fri 04 Nov 2022 12:00:00 +0000
ROA not before:           Fri 04 Nov 2022 12:00:00 +0000
ROA not after:            Sat 10 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        205.251.192.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:cd:d2:de:ad:3b:7a:ef:47:46:e7:e5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Nov  4 12:00:00 2022 GMT
            Not After : Dec 10 05:00:00 2022 GMT
        Subject: CN=6c8c1ab7-6222-4d1c-a9b8-e275aa83d62c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:21:37:11:f3:fa:3d:b8:a4:26:66:a1:23:a1:
                    81:b9:ee:22:3d:f4:74:37:34:0b:a1:8d:f4:82:ed:
                    3b:ac:20:87:32:e9:15:b7:c8:01:67:36:8b:6f:5a:
                    bb:a5:f6:8e:cb:55:0e:a0:ed:13:10:40:2f:ca:1f:
                    31:0a:b7:01:77:13:42:ba:70:4a:cd:9b:6b:7c:4f:
                    dc:ad:a2:a5:0b:ce:57:76:39:03:84:6c:f0:f0:4a:
                    b7:f5:89:c9:d8:79:c4:21:51:f6:12:47:b1:a3:1c:
                    ac:74:22:6c:03:b2:9c:6f:36:b9:6a:d7:6d:e8:3f:
                    c2:55:9f:89:a2:3c:16:ae:31:64:a9:7d:6b:94:98:
                    41:82:7c:c4:5d:9d:1d:61:07:9c:09:3e:f1:31:6a:
                    e7:ad:a6:c5:ee:9a:9f:13:45:4d:cd:57:c4:a1:f5:
                    36:07:5e:b3:df:90:41:7a:6b:74:46:3e:ab:27:8d:
                    7a:8e:77:03:a6:d5:bc:6e:8f:25:ed:f9:e7:ab:e0:
                    35:63:6c:64:05:84:d8:ea:0a:4f:c5:38:29:ec:00:
                    a3:72:0b:06:f2:53:25:d3:ec:8b:84:84:75:46:77:
                    0a:dc:9e:5c:20:21:00:ca:af:00:14:69:57:0a:6e:
                    02:03:8a:6c:97:cc:6c:8d:2e:85:39:dd:cf:79:aa:
                    15:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:43:A2:B2:21:34:C1:AB:9A:EB:74:6F:7D:AA:40:C6:9D:0A:F1:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/35a1b486-615a-3860-bf00-8e9a87abcdfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:50:15:5e:ee:58:a2:15:0d:06:25:27:36:70:38:df:b4:79:
         72:80:0c:f9:ae:f9:d0:67:8e:4b:db:2c:f7:17:cc:9e:00:b3:
         68:15:d9:2d:f7:98:a0:11:23:bb:9c:e9:82:82:39:6c:bc:5b:
         52:8f:ca:04:97:f8:41:a1:96:8e:84:53:eb:fa:12:d6:60:c7:
         a5:6c:3e:0d:26:85:6c:43:10:b4:8b:1d:27:a8:5c:61:d4:99:
         3e:95:bb:8a:44:e5:35:b9:1b:67:e6:f4:d8:23:94:08:75:42:
         2f:de:ef:e8:13:bb:97:24:92:9c:61:57:77:2e:f1:fa:72:78:
         e8:f3:5d:55:06:50:a1:d2:6f:d4:94:36:67:d8:17:3d:41:ee:
         ad:a4:9d:3d:29:f5:51:e1:6b:16:a2:d9:f5:4f:dd:ff:cc:44:
         21:fb:f2:cf:00:6b:32:1b:b1:ba:0d:d0:b2:89:fb:ec:75:81:
         7e:fd:61:55:2b:1d:05:f2:5b:a6:30:07:ce:dd:61:f8:56:3f:
         4e:1b:cd:d0:cd:c4:18:e5:e3:b7:36:4b:6a:c7:ce:67:22:a6:
         3b:9b:a4:18:ed:ca:96:28:5f:38:7a:8f:86:cd:c2:83:df:ae:
         26:6c:e5:27:99:25:3d:7c:c7:8f:69:c2:a3:47:3f:cf:47:9e:
         32:ee:93:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----