Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/5868e1b5-9171-3817-9d3e-723f1a0ff185.roa
File:                     5868e1b5-9171-3817-9d3e-723f1a0ff185.roa (raw, json)
Hash identifier:          9Hx92zphQmpbJOpr05MA/UAZ1kDaIWUVWlnu4dgiebM=
Subject key identifier:   BD:DC:12:6B:46:23:B0:37:C3:F3:6B:76:AC:D5:26:B0:69:C2:D7:90
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583DF7971C662263E53371DE3EC0
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/5868e1b5-9171-3817-9d3e-723f1a0ff185.roa
Signing time:             Thu 19 May 2022 12:00:00 +0000
ROA not before:           Thu 19 May 2022 12:00:00 +0000
ROA not after:            Fri 24 Jun 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        216.137.32.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f7:97:1c:66:22:63:e5:33:71:de:3e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: May 19 12:00:00 2022 GMT
            Not After : Jun 24 04:00:00 2022 GMT
        Subject: CN=8cc27a47-cb15-4918-94fe-8bc6b227ce23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cd:58:b7:0b:cf:80:11:16:d2:d6:60:20:c5:
                    9c:97:18:56:5c:8f:24:de:2a:91:2a:b3:de:15:b4:
                    42:cd:ee:14:f8:54:15:ed:5f:9b:db:25:7f:15:8a:
                    78:54:cd:a6:d8:66:c4:61:ac:64:e9:54:1f:62:25:
                    9c:a7:08:54:18:f9:08:5e:4b:94:1e:b9:50:72:9c:
                    bc:7b:31:23:94:62:12:b6:ff:24:38:16:d9:d4:15:
                    1d:1a:1c:c8:85:75:71:a1:ac:83:6b:a5:19:26:1c:
                    0d:34:37:27:83:f9:63:3b:56:7a:bb:1c:54:cd:f2:
                    0c:c1:58:37:d5:e0:fb:0c:4d:11:52:d9:e1:a2:b2:
                    5d:f0:2d:38:41:ae:3b:16:fe:2c:d2:1d:b4:17:fc:
                    12:45:80:4d:e1:26:71:6b:0e:1b:3a:5a:68:5b:bb:
                    41:ad:8b:89:78:7c:e8:dd:21:76:4a:19:14:a1:f4:
                    aa:01:b0:66:49:25:2b:12:5f:d7:dc:93:85:6b:19:
                    23:2f:36:18:46:33:98:af:a9:15:5e:02:4b:b3:68:
                    5f:17:84:00:b9:79:a5:90:b8:07:c9:b6:11:ff:69:
                    ed:25:6d:2f:ee:d4:cb:6e:a2:f8:3f:6a:9a:13:ac:
                    0f:a3:ea:a3:da:c5:7d:62:70:d4:e0:d0:55:ec:eb:
                    1f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:DC:12:6B:46:23:B0:37:C3:F3:6B:76:AC:D5:26:B0:69:C2:D7:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/5868e1b5-9171-3817-9d3e-723f1a0ff185.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.137.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:c8:4b:0d:a7:2e:c7:44:e2:44:65:b4:b1:9e:f4:3f:1f:ea:
         04:c0:08:f7:86:3a:ae:84:7a:ec:5f:1d:0d:3e:af:ad:b9:a3:
         d1:7b:53:bb:54:a0:49:ba:77:45:0c:5d:68:99:0a:17:01:67:
         b6:1b:ef:d5:80:f7:c4:8e:89:49:06:c3:bd:de:65:a2:39:b8:
         79:bb:dd:59:0c:ea:a7:fd:0d:8d:43:e8:46:fc:b5:7b:85:ac:
         b2:22:43:3d:84:9b:f7:55:bf:e4:62:06:39:ab:d0:a6:5a:9c:
         44:64:a8:f3:f7:75:5b:83:05:f0:41:27:b2:b7:12:e2:0c:7f:
         ed:18:2f:f1:55:e8:e5:b9:d6:b4:99:35:82:c9:ce:7c:ea:16:
         e4:09:1f:45:9e:70:fa:1a:53:7f:00:35:9f:46:96:1c:39:2e:
         72:34:02:cd:0e:a7:37:9e:12:54:e3:49:14:42:da:66:b5:53:
         cf:72:2b:fc:88:d4:93:d5:c6:29:a6:61:4c:0a:89:9d:c5:af:
         3e:25:12:6f:13:f8:87:70:4e:b6:1c:6f:58:87:86:4a:70:95:
         cd:42:32:d7:bd:e0:40:82:bb:42:49:a7:5f:11:1a:58:70:a6:
         28:cc:16:c3:4c:4c:91:82:48:14:c8:0c:d2:e9:f5:35:7f:0a:
         9b:8b:14:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----