Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/65dbb699-d7c2-3093-b156-9f3c886ec22f.roa
File:                     65dbb699-d7c2-3093-b156-9f3c886ec22f.roa (raw, json)
Hash identifier:          MS7BgKlpifBBo9rWao1mwoDzO0rnb/eKVzxnA7thX10=
Subject key identifier:   F8:E6:10:E5:CA:21:FB:BB:22:C4:9F:26:21:8D:18:7F:68:4A:67:2C
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583FF4CAB748BA0A0ADB815F3100
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/65dbb699-d7c2-3093-b156-9f3c886ec22f.roa
Signing time:             Fri 18 Nov 2022 12:00:00 +0000
ROA not before:           Fri 18 Nov 2022 12:00:00 +0000
ROA not after:            Sat 24 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        204.246.160.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f4:ca:b7:48:ba:0a:0a:db:81:5f:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Nov 18 12:00:00 2022 GMT
            Not After : Dec 24 05:00:00 2022 GMT
        Subject: CN=2d2557e1-2f31-4853-b1a7-729c0ddde992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5d:2b:49:22:48:f8:b6:c8:fe:67:c1:20:f7:
                    1b:1d:ac:47:df:01:df:6b:36:cc:c7:33:bd:2a:74:
                    83:b3:dc:f9:54:09:35:b0:16:87:b4:b6:5d:32:94:
                    f6:85:84:0f:d5:90:84:cd:f1:d9:9f:fc:b9:2c:1e:
                    44:73:ba:73:5e:65:64:ba:53:74:9d:56:29:c5:e4:
                    0c:60:de:68:3d:0a:d7:01:a7:73:d0:36:d3:dc:6d:
                    0a:a2:3d:3e:91:25:9a:55:03:3a:7e:03:5b:de:80:
                    48:fe:3f:fc:22:bf:d4:3a:ac:fe:f4:1c:ae:34:65:
                    1b:1f:04:88:c8:92:af:8f:87:54:74:6c:fc:f2:2f:
                    14:65:80:3f:ed:19:24:b9:9d:fb:1c:58:a7:c6:3f:
                    39:f7:01:c5:f4:be:74:f3:cb:e1:1c:b2:07:83:74:
                    1e:8b:b1:8c:fc:cc:e2:b5:d6:ea:af:55:a5:83:4a:
                    ab:50:de:30:d0:5b:c7:e8:64:0f:fc:15:54:5e:61:
                    29:33:9c:27:42:ba:e8:6f:5f:71:7f:04:6e:6a:25:
                    82:04:48:9a:d2:64:fb:58:b6:8f:22:57:2b:7a:9b:
                    7e:c9:35:57:97:dd:e2:d9:a8:f2:93:45:05:0a:d9:
                    f3:b5:8c:fc:04:fd:e7:27:27:64:a0:e5:2d:9d:6b:
                    89:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E6:10:E5:CA:21:FB:BB:22:C4:9F:26:21:8D:18:7F:68:4A:67:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/65dbb699-d7c2-3093-b156-9f3c886ec22f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.246.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:37:26:e4:48:2d:dc:fb:1f:12:ba:aa:5e:41:d9:50:12:85:
         b5:a4:d9:a4:10:18:52:5b:85:97:ea:ea:46:33:38:b9:6f:76:
         7f:35:66:19:85:92:68:00:1b:df:9e:f3:87:cc:ad:41:16:e1:
         09:f4:92:38:56:12:b2:52:89:e9:fa:65:52:6d:c3:fe:30:b0:
         a0:8a:1e:66:6c:78:7f:b3:d2:fc:fc:3d:76:8d:25:b9:0d:6f:
         61:a2:70:8e:ae:f8:52:4d:69:41:1c:93:2c:9e:99:88:41:e5:
         69:7c:ec:22:49:eb:ad:a4:d4:8c:d1:fd:1a:4d:da:ad:19:b2:
         f8:70:c6:11:14:cd:94:b5:ee:e1:11:46:57:98:ce:1d:69:a0:
         b1:2c:c8:c6:16:de:56:85:5f:77:40:c3:94:e1:cf:d4:77:71:
         3f:6f:dd:aa:85:1f:35:1b:70:33:61:36:de:1d:33:b8:b3:ac:
         90:0e:3d:64:e4:14:49:ec:e4:4b:e0:4a:86:75:84:0c:0b:41:
         69:00:28:94:a0:f9:0c:b4:ad:9b:f4:a6:51:6c:c7:e3:b2:ce:
         ce:c1:f2:0c:86:c3:e8:5d:41:39:d3:e0:66:12:ce:6e:4a:06:
         c9:4d:88:5b:28:ef:a2:89:be:79:02:5f:cd:4e:09:d5:e3:0e:
         ef:46:07:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----