Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/76533de3-d394-37a5-8053-2350dc8b67d4.roa
File:                     76533de3-d394-37a5-8053-2350dc8b67d4.roa (raw, json)
Hash identifier:          iPiDgGKoYxiOSZjPoZGUToGolbEN9MHEjdOriay3mtE=
Subject key identifier:   E1:73:D1:0C:1F:38:FD:7F:DA:83:3B:61:21:5D:EF:E4:D0:0C:B8:E9
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583DAA00DE73726211E6E4A165E0
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/76533de3-d394-37a5-8053-2350dc8b67d4.roa
Signing time:             Fri 22 Apr 2022 12:00:00 +0000
ROA not before:           Fri 22 Apr 2022 12:00:00 +0000
ROA not after:            Sat 28 May 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        204.246.160.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:aa:00:de:73:72:62:11:e6:e4:a1:65:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Apr 22 12:00:00 2022 GMT
            Not After : May 28 04:00:00 2022 GMT
        Subject: CN=d7155d2e-88a8-48cc-830b-a16ae906fdd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:55:82:95:fb:a4:d2:2c:fe:db:ff:4b:a1:43:
                    a9:ba:47:4a:b2:52:fc:b6:3d:b9:7f:e4:38:1f:0a:
                    0f:ed:b1:95:ff:9c:23:b0:b6:86:c3:ab:1c:ff:8e:
                    19:3c:6d:c2:cc:53:b8:36:e2:0f:56:f3:bb:9e:44:
                    5c:1e:65:a8:d5:fe:c2:02:c3:56:08:5c:a4:45:78:
                    a6:80:a7:43:d4:7c:d8:e9:30:b3:d1:54:6d:35:78:
                    0b:c2:ab:27:a8:14:6b:d6:c3:98:47:8f:60:5f:62:
                    ae:9f:3a:91:63:7e:95:29:ca:71:c2:11:82:85:0c:
                    6f:9f:b8:18:54:e3:51:98:31:49:6f:c5:bf:4b:96:
                    47:89:85:6e:bd:e5:e1:6b:5a:bd:a9:3f:b3:c1:5f:
                    bc:a9:98:dc:9e:5a:fa:41:08:0c:3a:44:78:64:8c:
                    31:fc:95:65:50:b1:d4:91:f3:ad:87:21:50:d1:69:
                    29:e3:7c:ea:33:81:92:44:96:ef:bf:5b:3e:72:ee:
                    7c:39:b6:07:9b:44:9a:a5:42:9e:91:81:d6:60:cd:
                    7c:07:0f:d4:72:23:2c:2e:32:c8:52:39:06:a2:48:
                    b2:db:24:63:87:aa:87:e4:62:40:b6:d4:9a:29:c0:
                    8e:25:d7:57:df:41:a6:7c:d3:29:7f:7a:6e:e7:0b:
                    9e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:73:D1:0C:1F:38:FD:7F:DA:83:3B:61:21:5D:EF:E4:D0:0C:B8:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/76533de3-d394-37a5-8053-2350dc8b67d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.246.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:b3:00:b0:e6:01:22:7f:13:03:6d:8d:6a:e1:1b:83:ea:5f:
         70:c7:87:1f:08:78:cd:e0:5f:ca:07:67:cf:86:f3:57:dd:a8:
         8a:a4:17:96:be:30:16:4f:12:4b:82:27:86:72:02:a6:2f:40:
         b8:3d:41:b3:bb:fe:b3:35:dc:17:5b:c3:8b:4b:18:d1:4f:ed:
         0e:c3:19:93:3f:8d:91:e0:f4:39:76:62:3e:27:8e:75:b9:68:
         37:d8:d7:d5:c4:33:62:78:fa:e6:c5:5b:0d:09:08:e0:28:30:
         fc:45:01:39:46:44:0f:41:7a:7f:55:53:3a:b1:e5:49:cf:f0:
         02:a1:16:ad:a1:2a:82:97:45:f7:66:9a:9f:95:6c:b0:d1:2e:
         50:52:15:ff:b2:cf:18:a8:e0:c7:36:df:a2:1d:68:f2:46:5c:
         54:ca:d3:46:f8:16:86:8f:04:f4:23:aa:2f:61:73:ef:94:a9:
         a9:2b:e3:ff:3f:6e:3c:46:2d:02:39:3a:b0:78:24:d3:a2:e7:
         35:6b:97:e8:b9:f8:72:22:de:e4:dd:e1:c0:75:72:0b:da:50:
         14:c9:46:46:4b:11:72:c1:7f:2a:29:4d:8c:b3:bc:80:d7:7d:
         e7:62:89:18:ce:a6:00:04:b0:de:d2:79:ff:b9:0e:0e:cd:b9:
         a3:35:e8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----