Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/427c86f1-dfc6-37df-b0cb-d9e1a74d61d3.roa
File:                     427c86f1-dfc6-37df-b0cb-d9e1a74d61d3.roa (raw, json)
Hash identifier:          9mLbsoKND5+Z5va8JsVFKp7UVRt2Me8ikIjGb+3AFIk=
Subject key identifier:   D9:67:B1:64:F3:DE:1D:F0:62:D9:81:85:51:41:AB:4C:2C:24:6D:4D
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583D5A95F792E07DD05F5B5353C0
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/427c86f1-dfc6-37df-b0cb-d9e1a74d61d3.roa
Signing time:             Fri 25 Mar 2022 04:00:00 +0000
ROA not before:           Fri 25 Mar 2022 04:00:00 +0000
ROA not after:            Fri 29 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        204.246.160.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:5a:95:f7:92:e0:7d:d0:5f:5b:53:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Mar 25 04:00:00 2022 GMT
            Not After : Apr 29 04:00:00 2022 GMT
        Subject: CN=3af1bb4b-b29a-4397-8acc-bc678c062875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cd:44:e2:57:be:fa:ce:43:93:bd:18:c4:48:
                    3d:10:6f:fe:77:52:be:96:ad:2d:f6:be:e6:a6:b3:
                    f0:53:b3:22:53:a3:a1:ae:0a:ed:25:96:de:f6:21:
                    f2:b0:c8:94:59:a9:b1:56:84:ef:cc:37:43:53:86:
                    cd:e4:2c:d1:22:88:8f:74:9a:bd:79:86:ad:c1:0c:
                    c4:79:d2:1a:e8:21:80:56:1f:33:8d:2c:a9:e5:4a:
                    d9:10:da:1a:9b:30:3a:0c:54:c2:d6:ee:cf:ff:84:
                    70:61:a3:4a:70:47:e7:e7:df:e6:ac:b6:81:b6:a9:
                    a8:cd:e8:e7:29:68:3f:e8:31:fe:ed:c8:7e:0f:17:
                    42:1b:77:ad:1b:4a:2e:30:7e:bb:7a:9d:ab:7e:69:
                    eb:35:f1:c0:3c:1c:17:26:ba:c7:62:2b:6f:9b:07:
                    56:60:f2:12:e5:29:f1:24:c2:31:4b:ee:fa:3c:48:
                    bb:3c:b3:a4:d5:ca:09:14:70:e2:c5:72:b6:5e:8b:
                    cc:4a:0b:72:4b:07:dd:bb:e9:75:35:67:89:29:ee:
                    87:a3:e3:57:fc:23:64:22:21:fb:a7:07:3a:92:23:
                    80:1e:fd:62:b5:2e:d2:9c:cc:8b:ff:88:c8:a6:62:
                    7f:2c:4a:b7:1e:a2:81:eb:3b:69:42:71:9a:dc:d6:
                    0a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:67:B1:64:F3:DE:1D:F0:62:D9:81:85:51:41:AB:4C:2C:24:6D:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/427c86f1-dfc6-37df-b0cb-d9e1a74d61d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.246.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:5e:02:02:09:50:9a:0d:6b:28:56:04:52:94:70:4d:f3:4a:
         39:5d:ed:af:4d:a6:dc:a8:28:5f:7b:5a:57:7a:b9:de:fc:95:
         1b:5c:91:58:e0:38:f0:8b:1a:b9:62:c1:bc:1d:7f:f6:b8:d1:
         3b:87:df:b5:a6:da:c0:2d:98:da:e1:a4:ea:e9:79:33:58:a2:
         d6:2d:4a:4b:1d:73:e2:8f:5b:f6:a9:2f:d0:8a:2c:97:02:95:
         94:e6:68:2c:46:eb:69:88:40:ea:33:7e:2c:14:20:dd:ef:ec:
         d5:74:b2:6c:a9:fc:32:89:72:7b:82:51:26:97:f3:a2:ef:9e:
         3f:90:29:5c:ca:9e:92:b5:2f:c6:9f:83:04:16:18:57:c0:94:
         33:46:cb:79:89:3f:f9:64:0e:c4:81:77:eb:84:7b:fb:e1:1c:
         53:df:b3:81:37:61:da:dd:bd:8c:ba:04:c0:29:26:22:b4:62:
         e4:2f:e6:6c:5d:c3:2a:a7:eb:47:87:bf:b5:38:1d:56:31:b5:
         e2:27:21:07:77:40:ae:53:2c:0b:fc:c8:61:fa:72:aa:d2:d2:
         ec:eb:55:af:41:f0:85:c3:e3:82:93:9d:a3:4c:73:ae:f6:a4:
         17:ff:5c:7a:f3:2a:67:d7:09:51:7d:52:41:da:6a:2b:01:3e:
         6b:36:26:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----