Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/9056d96e-271e-3f01-92c2-c1e3ef796b6c.roa
File:                     9056d96e-271e-3f01-92c2-c1e3ef796b6c.roa (raw, json)
Hash identifier:          /WoX/pJlxA1UO4kVG04zmiS6aFJeGifPnA4fQTuGy3U=
Subject key identifier:   B0:78:0B:00:56:C2:5F:7D:DF:83:9A:5A:BB:9B:E1:41:16:A6:CB:FF
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583DA95D610BA3CB29D5F7C6DE00
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/9056d96e-271e-3f01-92c2-c1e3ef796b6c.roa
Signing time:             Thu 21 Apr 2022 12:00:00 +0000
ROA not before:           Thu 21 Apr 2022 12:00:00 +0000
ROA not after:            Fri 27 May 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        216.137.32.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a9:5d:61:0b:a3:cb:29:d5:f7:c6:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Apr 21 12:00:00 2022 GMT
            Not After : May 27 04:00:00 2022 GMT
        Subject: CN=df1eb413-95a0-4296-8bb6-41bf54ae3512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:07:69:6c:ff:ab:9f:a9:8d:4d:45:3b:a2:92:
                    32:ad:9e:4e:ae:3e:24:46:ac:20:a7:8a:32:c4:ce:
                    96:32:81:5a:ec:3b:35:bb:82:47:b4:60:bd:56:03:
                    2f:5d:30:05:83:4b:03:aa:c7:60:19:f6:c8:9a:c2:
                    67:1e:16:e6:5c:4a:f2:77:50:d9:d3:ae:0b:03:4d:
                    80:d4:01:5c:3e:66:66:70:51:cb:07:16:03:d9:17:
                    15:25:9e:8e:24:ba:a7:85:04:20:a9:4a:a6:4c:23:
                    dc:79:93:bf:a8:d0:d3:bb:da:35:e4:01:89:8a:70:
                    c7:4c:cc:85:f9:1d:35:d2:28:a0:dd:9b:3f:8c:af:
                    51:1c:2d:1b:47:4c:80:f6:5b:46:cd:6a:41:c2:96:
                    95:bd:8c:de:5e:74:20:7e:2c:bb:d1:52:fb:ed:2a:
                    3d:a2:9e:dd:99:b5:b4:f3:de:ea:df:9f:8e:85:89:
                    28:6c:2a:a0:06:da:c8:fd:0d:79:9b:33:69:62:07:
                    e8:d3:16:f2:0d:82:ad:f9:12:df:81:9a:ff:2d:5e:
                    f6:21:f1:c8:b3:07:4a:26:19:df:e9:97:5f:3c:83:
                    f2:b0:ec:25:86:ab:6f:73:5d:d9:b9:ec:67:5a:a9:
                    66:80:21:9a:06:43:69:95:3e:0f:f5:7e:63:66:6f:
                    db:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:78:0B:00:56:C2:5F:7D:DF:83:9A:5A:BB:9B:E1:41:16:A6:CB:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/9056d96e-271e-3f01-92c2-c1e3ef796b6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.137.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:ab:13:89:6f:a1:9b:7a:dd:b6:92:b0:e4:a9:d8:5a:00:79:
         b8:57:1e:cd:cd:0f:04:ce:af:ce:ed:88:c9:71:e0:6e:25:92:
         b2:dc:9e:27:b2:ed:d1:6f:80:64:b7:75:82:27:09:93:e4:0c:
         9b:11:ee:d1:b3:34:aa:73:8b:fa:49:e0:b9:63:de:54:7a:77:
         d5:f3:33:0f:2b:6a:67:64:f9:4b:62:fa:05:3c:a5:15:36:09:
         df:bf:c3:93:87:e9:fb:57:32:66:9f:a0:52:9e:8d:7b:11:2a:
         90:aa:29:5c:ff:3d:5f:3c:96:b9:c0:c5:50:ec:39:f5:c0:e7:
         91:ab:54:93:aa:f8:f6:ac:0a:0e:39:df:8c:21:72:94:03:b6:
         39:bf:81:52:45:91:05:76:c6:84:66:f0:0b:21:aa:5e:43:56:
         82:49:dc:25:c0:86:42:44:32:0e:9d:3a:16:aa:80:9f:2c:86:
         72:04:1e:59:9f:c6:5e:80:0d:2b:a6:1c:78:3f:67:d4:06:a8:
         52:4a:47:4f:f5:ef:7a:e6:98:26:5b:f7:56:9b:fa:7c:19:a9:
         30:5a:2f:b4:ec:04:22:2b:fc:ad:88:18:4f:0e:d8:17:9d:6b:
         cb:f7:ed:6b:c7:32:a2:ad:e0:8c:b0:5d:a5:5e:bd:a1:5d:0a:
         6c:18:22:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----