Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/877831e3-147f-3ae2-b5ac-cf633ba3e639.roa
File:                     877831e3-147f-3ae2-b5ac-cf633ba3e639.roa (raw, json)
Hash identifier:          F892U27QI5r7tW38GAncDPe32dViAhzLlMyAugUJO/k=
Subject key identifier:   83:27:1E:8C:E6:36:CB:17:35:8E:AF:0A:40:53:C0:21:2B:B0:55:C1
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583DD24F2EA4760F4A113D689EC0
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/877831e3-147f-3ae2-b5ac-cf633ba3e639.roa
Signing time:             Fri 06 May 2022 12:00:00 +0000
ROA not before:           Fri 06 May 2022 12:00:00 +0000
ROA not after:            Sat 11 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        72.21.192.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d2:4f:2e:a4:76:0f:4a:11:3d:68:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: May  6 12:00:00 2022 GMT
            Not After : Jun 11 04:00:00 2022 GMT
        Subject: CN=90d4f69f-5aed-4c51-a523-314afffd4e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:fd:fd:b8:d6:20:cf:b5:88:1c:ee:8e:1e:09:
                    a7:de:f9:d0:db:75:aa:dd:62:3a:75:d9:7a:e0:44:
                    09:f0:c0:48:4e:2f:23:c9:3c:ce:ac:8b:d0:c8:a7:
                    4e:3c:38:72:fd:40:f9:c9:d2:e8:22:5d:b5:89:df:
                    a2:c6:86:f5:78:69:43:54:68:6c:fe:ec:29:89:af:
                    c8:22:60:1b:62:c5:14:3b:e9:5d:c2:5e:1f:03:d4:
                    26:69:06:26:34:68:9d:c4:dd:a3:c4:f5:9a:13:a5:
                    f1:97:7f:92:f5:6e:33:30:28:a5:5a:85:c6:a6:2a:
                    61:04:e6:09:5c:ce:76:35:fc:d0:ed:c8:bd:d9:d2:
                    db:8c:ac:47:9d:5c:e2:72:a3:39:7d:b9:0c:00:1b:
                    2d:dc:77:bc:fe:25:c6:4b:cf:d9:f1:15:1e:32:79:
                    0f:da:f1:d9:7f:2f:5d:47:8d:84:c4:85:13:63:1d:
                    13:50:cf:21:d2:c8:1c:a2:d5:83:45:5d:aa:22:e4:
                    a7:1a:7f:35:16:f2:25:c8:92:b7:91:a3:ec:99:6a:
                    99:40:d6:ce:36:f9:26:88:a9:d6:49:ea:a5:bf:8a:
                    41:72:0c:33:2f:69:a8:62:8b:67:64:da:40:c1:7a:
                    4b:0b:db:13:55:0f:f7:45:cf:6b:c2:4b:b9:6c:c4:
                    a9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:27:1E:8C:E6:36:CB:17:35:8E:AF:0A:40:53:C0:21:2B:B0:55:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/877831e3-147f-3ae2-b5ac-cf633ba3e639.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.21.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:7e:bc:38:08:56:37:8b:f1:d7:cc:56:f1:e5:c8:f4:cc:85:
         17:1e:53:aa:5e:62:03:4b:67:32:06:0c:56:6a:8f:6e:02:19:
         93:33:9e:c0:60:67:ef:21:66:c0:d2:85:a7:08:d9:b2:e0:a5:
         91:6a:48:bb:85:53:df:63:74:a4:da:f4:b8:63:5c:3c:94:4f:
         55:a2:0b:35:41:60:94:ba:73:1e:b3:48:e6:db:66:68:35:ca:
         09:d1:99:06:49:6c:54:f1:fe:61:ad:3c:95:fc:8e:f0:92:3d:
         13:63:07:4d:92:05:8f:bd:e7:6b:96:bf:68:c6:da:94:c7:83:
         0d:77:e7:b1:6b:2c:4c:40:0d:c2:c0:33:aa:cd:08:58:ab:54:
         4b:b3:ab:e7:4a:7a:5c:70:27:5e:43:3e:a3:18:59:0c:a3:2b:
         82:5d:b2:dd:c6:65:43:e8:08:31:ff:f9:67:9d:6d:0a:e9:17:
         b0:6b:ad:71:5d:35:73:85:0c:6c:28:0d:0e:db:61:ef:f8:7f:
         40:e4:5d:2a:f9:42:1d:c7:64:1f:69:f7:58:f1:05:9f:bf:86:
         54:0a:32:da:9f:c2:14:0f:71:8c:70:2a:a8:ce:c8:a8:5c:6a:
         77:6f:00:60:83:a2:07:98:18:bd:db:99:fa:11:45:12:06:21:
         c6:72:76:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----