Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/5578aa83-a930-338e-85fd-bda2ae8cf69a.roa
File:                     5578aa83-a930-338e-85fd-bda2ae8cf69a.roa (raw, json)
Hash identifier:          ozJaNH4dQHUoFX0Mw2B6k+eg+l8i6sh+GD1qIEISkYU=
Subject key identifier:   0A:4D:39:44:FE:2F:5E:E6:C8:A6:31:C1:58:74:A0:19:54:5F:BE:FA
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583DAB324BCDD477BAB3F5D18100
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/5578aa83-a930-338e-85fd-bda2ae8cf69a.roa
Signing time:             Fri 22 Apr 2022 12:00:00 +0000
ROA not before:           Fri 22 Apr 2022 12:00:00 +0000
ROA not after:            Sat 28 May 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        72.21.192.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ab:32:4b:cd:d4:77:ba:b3:f5:d1:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Apr 22 12:00:00 2022 GMT
            Not After : May 28 04:00:00 2022 GMT
        Subject: CN=8acd383a-02f5-4369-a75a-bde78e23c0ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c8:32:30:35:cc:f8:55:a1:49:31:f0:03:c8:
                    5e:ac:bb:04:1c:0f:1e:17:a3:42:15:f2:b9:e4:80:
                    b5:86:88:59:44:67:d0:7d:90:93:34:50:bd:17:58:
                    86:bd:99:e5:c9:00:b0:44:47:f9:b2:5b:47:b5:e3:
                    fb:2a:14:de:53:d6:d3:ef:d5:c0:ba:f5:34:48:b7:
                    4b:60:26:4b:69:67:41:e7:f7:b8:af:ed:64:51:18:
                    e3:be:91:21:4c:7c:3f:6a:c7:b7:bc:aa:10:32:c9:
                    a4:d1:1a:5d:95:bf:0a:75:0d:0b:49:2b:d1:8a:49:
                    f6:ac:46:7f:ff:b4:68:a6:1f:a2:f2:c1:2c:e4:24:
                    34:5d:91:6f:2a:fa:d6:f8:cc:c8:bb:40:6d:c3:29:
                    c2:4a:07:a2:e0:db:9a:37:17:59:36:c8:4a:45:ba:
                    36:30:d3:7f:42:3b:6c:00:96:36:4b:a1:8a:e6:3b:
                    73:f8:9f:5d:2a:fc:36:f7:5b:92:a4:f6:26:fc:87:
                    56:80:19:9b:e2:5a:5b:6f:40:44:2a:40:49:7f:9c:
                    ce:26:c7:ff:31:47:48:84:7a:61:e8:dd:5c:ac:bd:
                    a0:f4:87:62:c4:02:41:46:d4:ed:b1:8f:4b:3d:39:
                    81:ca:48:9b:ae:08:d9:da:c4:07:8f:4a:bf:b1:5e:
                    96:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:4D:39:44:FE:2F:5E:E6:C8:A6:31:C1:58:74:A0:19:54:5F:BE:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/5578aa83-a930-338e-85fd-bda2ae8cf69a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.21.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:85:65:86:23:fe:88:f8:0e:a5:63:48:fd:8a:22:97:67:a8:
         e6:08:6c:84:15:1a:5a:9d:a3:3b:00:68:35:83:9d:b5:90:37:
         a4:9c:7b:e8:8f:f2:e2:fd:ca:5d:8f:43:59:35:c9:2a:8d:d8:
         a8:2f:d4:7f:c0:d0:4f:d5:93:07:a2:2e:8a:27:cf:61:80:a3:
         13:78:73:95:92:37:01:b7:ac:65:f0:ca:e7:f7:34:10:2e:a9:
         3f:25:10:af:88:d4:89:0b:39:70:c4:ef:81:a3:cf:ff:48:bd:
         5b:d9:39:98:43:47:11:5a:6e:23:8e:05:d7:3a:71:9d:89:71:
         e9:70:14:3d:35:45:c5:cf:a0:d7:d9:65:c3:5e:d4:8a:cf:fc:
         23:b6:8f:60:82:86:35:2d:b7:41:a7:d2:6d:ea:8e:42:37:34:
         87:d5:6b:09:f9:48:6d:80:de:e4:43:c4:58:35:07:8b:f7:23:
         12:11:b1:be:fa:b3:a1:1d:e4:10:c6:f9:86:2a:25:96:24:2f:
         47:58:3e:2e:c8:57:6c:2d:29:54:32:8f:93:ef:f2:c6:4c:46:
         df:5a:9e:6c:e1:07:27:63:db:d4:af:1c:73:68:b8:18:27:13:
         77:4f:06:61:2b:f9:12:40:b6:ba:f8:64:26:9c:28:f6:17:15:
         47:59:7e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----