Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/9abda766-3ad9-300f-8099-21637418fb66.roa
File:                     9abda766-3ad9-300f-8099-21637418fb66.roa (raw, json)
Hash identifier:          kqIKJ/8Z1sScpuvcOGzQl2+7VC7wJZ1w7kTY+I3mLCo=
Subject key identifier:   75:5F:A0:2A:98:F8:05:B0:B0:A8:F9:3E:FB:B7:E0:A9:40:17:62:CC
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583FA6BD42ACF549CF4F82914700
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/9abda766-3ad9-300f-8099-21637418fb66.roa
Signing time:             Fri 21 Oct 2022 12:00:00 +0000
ROA not before:           Fri 21 Oct 2022 12:00:00 +0000
ROA not after:            Sat 26 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        205.251.192.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a6:bd:42:ac:f5:49:cf:4f:82:91:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Oct 21 12:00:00 2022 GMT
            Not After : Nov 26 05:00:00 2022 GMT
        Subject: CN=a2ba3079-9f02-41a3-8432-661dcaaf5823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a9:b5:1b:8e:97:e9:3b:07:f1:20:53:05:b2:
                    60:bd:11:4a:df:eb:a1:bd:db:55:4e:ff:f5:2b:fb:
                    2b:d9:32:05:bd:a5:d7:0c:55:32:fe:54:b3:88:7c:
                    d4:17:da:1a:c9:07:f0:e2:9c:0d:85:10:b4:4b:f5:
                    ff:66:65:6e:32:e2:c5:32:f4:be:9e:16:1a:94:2a:
                    65:d8:77:f6:85:71:35:6f:28:01:c6:51:46:89:3c:
                    a3:92:9b:70:2d:90:4a:b5:1f:11:33:4b:b3:a1:26:
                    a6:69:d8:b9:3e:f8:c8:9a:af:78:83:1c:9b:49:16:
                    78:66:7d:69:14:64:a1:c6:8f:6a:ba:c6:95:0d:62:
                    4a:67:23:f5:8d:b4:e0:e8:b9:17:d6:3c:24:28:10:
                    9e:66:b2:e6:90:55:b8:00:0a:8e:76:82:a9:fd:88:
                    c9:6a:9f:4c:f3:1f:65:58:6b:98:f2:dc:12:40:cc:
                    1b:51:78:a7:92:96:65:aa:63:50:a3:32:56:af:7f:
                    a8:d5:65:3d:d7:fd:7c:de:a7:b3:de:1f:31:bc:26:
                    5f:56:73:22:e1:0e:7c:44:bf:8b:05:e9:09:7d:d5:
                    f3:ab:1f:32:96:65:7f:b8:17:29:1a:1b:b4:e1:41:
                    0f:50:3c:65:86:dc:41:49:7c:6c:33:37:92:b2:fb:
                    ec:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:5F:A0:2A:98:F8:05:B0:B0:A8:F9:3E:FB:B7:E0:A9:40:17:62:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/9abda766-3ad9-300f-8099-21637418fb66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:c2:e7:95:e1:11:95:71:e8:d2:8b:ef:34:db:cb:ba:62:f6:
         a7:2a:52:af:4c:9f:25:80:56:6c:9c:1e:bf:3b:a8:d0:1a:d1:
         ad:c5:a5:07:4b:a2:6b:8e:44:78:c0:91:ae:c2:e9:cf:1c:6a:
         2b:5b:e3:55:4b:c9:4f:a2:f9:a1:6f:d3:83:57:9c:4b:16:fc:
         87:5f:c9:3a:9a:96:79:2e:d0:8a:9f:71:9a:2a:fa:57:fe:5c:
         c0:03:65:e5:44:37:4a:82:e0:af:7b:89:d2:4b:2d:33:a8:50:
         33:48:f8:5b:96:30:68:d1:20:db:80:75:33:76:37:bc:aa:4f:
         45:ce:f9:f6:e7:39:25:21:22:52:ca:b7:23:b1:59:de:4d:cd:
         be:c3:04:ec:87:70:86:1a:27:71:bf:0e:9a:30:0d:88:58:71:
         fb:ab:b3:aa:c1:39:7a:e9:4e:6d:b2:d5:35:14:5f:42:1a:9c:
         6d:70:54:95:14:9a:cb:9d:e1:28:94:aa:4e:c2:e5:41:37:d9:
         00:9d:19:02:e2:33:d1:41:24:25:f6:00:33:32:71:00:97:fa:
         3d:43:00:be:2d:f2:d6:ba:82:03:80:4e:a3:26:b2:18:8d:a9:
         bd:2a:9c:2a:13:c4:3a:84:8b:03:23:e1:8e:bf:f2:b1:6a:44:
         9f:37:8a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----