Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/961d35e8-fe5f-3b81-a7f7-009060c957b1.roa
File:                     961d35e8-fe5f-3b81-a7f7-009060c957b1.roa (raw, json)
Hash identifier:          2ou3hxjA4su0gbn+YCwfbQSS2T6506CdINmmZwiper4=
Subject key identifier:   D5:24:9A:6B:59:26:63:0F:CE:C2:2D:7C:A4:69:81:39:1B:4C:EE:1F
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F432858401E1D78249A7652FBFDC77080
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/961d35e8-fe5f-3b81-a7f7-009060c957b1.roa
Signing time:             Sat 03 Dec 2022 12:00:00 +0000
ROA not before:           Sat 03 Dec 2022 12:00:00 +0000
ROA not after:            Sun 08 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        72.21.192.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:1e:1d:78:24:9a:76:52:fb:fd:c7:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Dec  3 12:00:00 2022 GMT
            Not After : Jan  8 05:00:00 2023 GMT
        Subject: CN=b8a3fff2-d555-46e4-9c45-7430b4726fa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:30:eb:86:6f:7a:b3:4c:53:a2:0a:6f:75:c9:
                    f7:9f:52:b1:c4:d0:57:21:d4:1b:fe:f9:ca:88:46:
                    d9:7a:55:38:83:38:99:6d:9a:23:f0:06:a1:62:9f:
                    9e:59:10:27:91:9e:6d:df:65:4f:0f:44:49:f8:00:
                    6d:e1:79:36:19:3f:16:17:51:88:c1:b0:a3:56:02:
                    e6:82:86:15:70:21:56:5c:2a:00:e3:d1:b7:54:17:
                    56:e6:37:d1:93:84:d1:0e:9b:b0:55:30:7d:4e:db:
                    be:cb:19:b9:72:a5:6e:60:80:da:68:6d:c4:3c:a1:
                    c5:b3:d7:a5:5d:45:d5:69:96:a6:8b:52:5e:aa:25:
                    5d:44:63:bd:8a:2a:fa:05:13:27:3c:ea:d1:39:e8:
                    c0:83:51:18:25:ae:1e:98:99:2e:03:e1:b9:7c:9b:
                    3c:50:1a:ce:6a:60:ae:ff:3d:17:fd:67:7d:3e:81:
                    07:4b:b9:0b:e1:db:47:1a:40:c9:3a:2a:93:88:46:
                    fe:7a:fa:37:84:d5:99:bc:ed:51:38:c1:fb:4a:25:
                    b4:78:e0:b3:3f:63:0e:2c:a2:15:f2:fe:24:b2:12:
                    e4:1f:f5:7f:1a:fe:76:05:69:67:42:5f:d2:9c:a2:
                    7d:64:03:40:8b:cb:78:37:89:6f:03:15:0d:f9:1f:
                    da:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:24:9A:6B:59:26:63:0F:CE:C2:2D:7C:A4:69:81:39:1B:4C:EE:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/961d35e8-fe5f-3b81-a7f7-009060c957b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.21.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:8a:e3:dd:1c:a0:11:b9:51:64:12:f7:8c:1c:82:75:34:a4:
         87:98:8a:5e:4a:f1:ad:cd:72:6c:a4:e2:1a:6f:ac:c6:09:cf:
         2a:b1:29:d1:e8:cc:2b:ed:fb:39:69:c4:87:ec:d4:d0:75:f8:
         ef:22:da:cb:ee:e3:8a:06:bb:e0:77:5d:a0:cc:7a:ac:bb:d8:
         03:33:6f:13:aa:33:12:ff:da:e4:ad:7f:d7:6c:33:12:ad:5e:
         49:1e:c4:f5:15:21:c8:3e:98:91:cc:1a:bc:fe:ec:f9:b1:fc:
         75:af:ce:6b:83:ea:60:b9:27:05:ad:6c:fe:3b:7f:de:ba:37:
         54:97:7a:25:b6:02:c1:34:97:1e:cc:d5:14:89:85:7e:3a:1c:
         18:1b:a7:30:d1:07:1a:81:82:68:63:19:68:cb:8b:22:f9:65:
         ae:fd:ee:f0:f4:71:34:d1:94:ba:90:27:f9:20:13:d4:aa:88:
         a5:3c:40:0b:83:6b:de:55:65:05:c0:33:42:27:3b:76:6d:c4:
         13:e2:71:8a:99:79:99:10:71:25:5f:51:d5:d0:8e:e0:ab:ab:
         b7:60:40:e0:f0:3e:ea:82:c5:41:11:1f:f1:77:e6:d8:0c:ca:
         9c:84:fd:f9:ed:92:bd:cd:fd:fd:ad:a9:18:6f:a2:d6:66:ba:
         f9:a2:b4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----