Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/9b806ef0-02b7-3a62-94fa-3ebea67db946.roa
File:                     9b806ef0-02b7-3a62-94fa-3ebea67db946.roa (raw, json)
Hash identifier:          k2KbHA+KrQ2QcladxlCw1/MOnHOjR0BcUx5ISP+bbmM=
Subject key identifier:   08:0F:05:47:C3:50:94:86:7F:12:18:BD:37:A7:61:3D:0C:F7:F9:DF
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583E6D65520C67D102C9E5EBA600
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/9b806ef0-02b7-3a62-94fa-3ebea67db946.roa
Signing time:             Fri 01 Jul 2022 12:00:00 +0000
ROA not before:           Fri 01 Jul 2022 12:00:00 +0000
ROA not after:            Sat 06 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        205.251.192.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6d:65:52:0c:67:d1:02:c9:e5:eb:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Jul  1 12:00:00 2022 GMT
            Not After : Aug  6 04:00:00 2022 GMT
        Subject: CN=07aefb0d-51ea-4d07-8f60-54a3cdee9798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:03:ca:c8:d4:39:4b:46:3e:d3:25:4a:a5:c0:
                    44:7e:00:0b:66:b2:3a:79:e7:04:3e:8e:dd:dd:4e:
                    b5:18:5c:9d:ac:61:74:c0:d1:5a:01:3f:91:4f:a6:
                    fa:4c:eb:4c:fe:f4:af:a8:9b:a2:4b:c2:77:49:fe:
                    e8:b2:18:2e:28:b5:a8:b0:35:80:6b:4a:33:ab:e0:
                    ff:84:85:d7:df:e2:cf:b1:a6:5b:38:55:59:5c:c0:
                    1a:e1:2f:47:c1:d5:0f:3a:da:e6:58:a2:70:00:a8:
                    a7:77:7d:6f:6c:b5:b4:ee:be:14:f7:6d:ae:a7:e0:
                    e6:a0:db:c5:e7:6a:fb:8d:5d:96:5e:44:fb:ed:d0:
                    89:6a:80:9a:73:17:df:07:45:6c:ac:b4:2f:5a:83:
                    19:6c:6b:11:94:f8:ca:8a:c8:fb:1a:61:e5:f5:b5:
                    90:60:18:8c:21:23:a5:f0:10:94:37:d8:15:db:70:
                    87:d7:4e:9d:62:d9:76:50:0b:21:a8:2d:48:f5:7f:
                    4a:22:31:e1:81:08:f3:03:ed:f7:71:c0:14:4f:d0:
                    ad:5e:e9:6b:38:bf:c6:45:ad:ee:fa:76:27:53:54:
                    38:3e:9d:40:e7:40:bf:aa:70:19:e7:2f:0b:25:6e:
                    a3:c0:91:52:0c:76:55:58:d6:f2:11:12:40:dd:87:
                    32:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0F:05:47:C3:50:94:86:7F:12:18:BD:37:A7:61:3D:0C:F7:F9:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/9b806ef0-02b7-3a62-94fa-3ebea67db946.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:37:87:48:73:24:f9:1f:0d:da:89:05:aa:3c:9d:97:c1:cc:
         45:77:ab:4e:88:08:63:a8:f4:fd:f8:f4:b7:92:11:d2:2b:f8:
         17:86:1c:4e:10:ed:a7:1f:d4:a7:04:49:fd:51:cd:d4:da:ed:
         60:09:11:f5:ec:a7:29:5f:12:77:ae:c1:a6:a3:58:01:b1:66:
         9c:e2:f0:0c:ff:08:dc:0d:e6:2c:86:d1:f1:3d:3e:99:31:53:
         6b:24:33:f2:04:4d:90:2d:a7:4d:63:26:42:68:bf:11:a4:3c:
         72:45:77:f7:4d:1e:a9:e6:f8:3a:1a:09:08:cc:ec:32:e3:07:
         bc:6f:ef:bf:00:82:d2:61:69:28:4c:c8:3e:e9:47:07:e5:c5:
         0b:31:7a:74:f6:fd:de:0b:f6:79:bf:a6:05:34:e7:f3:da:25:
         bf:9e:61:bb:71:6c:a1:33:2a:7a:1a:51:9c:4e:e2:fa:42:46:
         81:88:ff:8c:e4:65:ae:1d:4d:b3:9e:66:4b:7e:e6:21:62:3d:
         75:4a:97:20:34:f8:32:bf:7d:c7:79:f5:65:27:c5:a4:ae:16:
         de:30:43:a6:c8:01:eb:38:da:85:db:1d:50:2f:06:0e:0a:12:
         6e:31:f7:c6:f9:38:58:1a:a5:d6:38:e1:ed:3c:8b:b7:7d:05:
         ca:f5:b2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----