Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/5348844a-7fb3-3fe8-8c0e-d3a89a1d3e36.roa
File:                     5348844a-7fb3-3fe8-8c0e-d3a89a1d3e36.roa (raw, json)
Hash identifier:          kG2uc3IHW1SlN5xzzig+G+iEX36UnCfmXG4pbMsxJ+4=
Subject key identifier:   88:BF:4A:CC:38:6F:9F:5F:A3:76:C9:E8:9B:32:35:76:0F:C3:1A:39
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583E1EB42B2D601C25A016290000
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/5348844a-7fb3-3fe8-8c0e-d3a89a1d3e36.roa
Signing time:             Thu 02 Jun 2022 12:00:00 +0000
ROA not before:           Thu 02 Jun 2022 12:00:00 +0000
ROA not after:            Fri 08 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        216.137.32.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1e:b4:2b:2d:60:1c:25:a0:16:29:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Jun  2 12:00:00 2022 GMT
            Not After : Jul  8 04:00:00 2022 GMT
        Subject: CN=f8d40779-1165-452f-8440-212f0d53a048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e7:48:0e:2a:dc:45:a7:1c:fc:6a:6e:a4:c4:
                    f9:22:c5:a6:ef:5c:72:88:ab:28:5b:7d:93:4e:7d:
                    39:6d:6b:7a:1d:9b:37:e5:30:27:ae:1a:7b:1d:4e:
                    28:e7:51:99:df:6f:61:2c:a1:c4:0d:01:a3:c1:c1:
                    fb:ea:09:ee:94:f0:ca:58:3b:a9:d6:0b:46:a0:d3:
                    45:26:bc:da:49:0d:d9:83:83:ed:a0:07:91:aa:65:
                    e3:37:d0:64:cb:cb:1f:d2:7f:37:ef:3b:d3:56:69:
                    19:89:09:53:c1:d4:37:8c:e4:fe:fe:16:b1:20:b6:
                    7d:65:49:df:eb:96:6d:90:6d:ba:6d:1c:1b:b9:9a:
                    2a:f6:62:87:46:1f:58:33:6e:1f:27:e4:a2:0c:ef:
                    09:b5:89:35:94:79:c7:2a:54:3e:31:ff:09:99:78:
                    85:20:a3:f3:2d:00:61:69:f1:62:5b:0a:15:e0:fd:
                    83:6d:94:c9:61:4b:26:26:82:27:5c:71:36:75:05:
                    4e:fb:4f:96:0e:9e:6d:29:75:eb:d2:6f:07:bc:55:
                    73:c1:5b:05:c9:f3:7d:32:af:01:25:11:ef:6f:0b:
                    6c:70:0c:4d:a2:49:55:93:77:e1:8a:4c:85:39:d7:
                    5c:ca:43:70:65:6c:a3:3a:77:71:c6:1f:16:8e:61:
                    75:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:BF:4A:CC:38:6F:9F:5F:A3:76:C9:E8:9B:32:35:76:0F:C3:1A:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/5348844a-7fb3-3fe8-8c0e-d3a89a1d3e36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.137.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:d2:8b:0a:b9:00:d4:23:4b:fc:13:c0:c1:44:fb:71:27:29:
         ae:6a:54:9e:8f:35:66:3f:98:0b:1b:d3:f6:7b:a2:8b:91:07:
         7f:9a:da:50:53:e6:4d:8e:5c:7e:e4:d4:50:2b:0f:9d:fb:f6:
         29:11:d7:5c:23:87:66:a1:6e:4c:1e:50:4e:f4:d4:8a:f2:a7:
         64:28:85:1e:25:8a:04:29:ec:14:bd:99:d4:54:85:64:12:e5:
         82:82:0b:c9:de:d2:61:d3:f9:bd:17:0c:8e:df:a4:95:b9:a1:
         65:db:14:c0:ed:9c:78:94:c0:16:ef:a8:dc:90:31:92:8e:cc:
         30:37:5b:d7:ad:96:9f:9d:d8:c8:f9:b5:86:a7:bd:31:f8:0b:
         13:24:d3:67:c2:df:3c:21:ab:cc:89:21:19:ef:6f:89:fc:1b:
         19:09:89:17:58:58:62:86:28:bb:63:d6:53:fa:47:cc:16:8e:
         33:ce:da:ad:37:5e:91:f7:ac:0a:d8:20:02:5c:5d:99:7c:02:
         52:fa:32:9b:5e:99:2a:55:be:b9:67:4f:da:b9:7d:b7:87:20:
         06:b3:d8:9e:24:e8:4b:b1:f2:83:f3:77:1a:4a:54:a8:b5:58:
         44:24:35:e3:15:8e:90:62:a8:57:4f:6c:15:1e:ac:48:ea:85:
         70:0d:d8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----