Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/9c0273db-e7e6-35ca-8278-ef3a79434ea9.roa
File:                     9c0273db-e7e6-35ca-8278-ef3a79434ea9.roa (raw, json)
Hash identifier:          QMsAMuqvTMsC8yJjWmejeJDFM9jBIImQkJwU3UDgrEQ=
Subject key identifier:   0C:FE:20:0B:E9:E1:6F:92:54:F4:35:AF:68:ED:38:2F:B6:04:E5:DC
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583D33804AEC916AEF675CBB8BC0
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/9c0273db-e7e6-35ca-8278-ef3a79434ea9.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        204.246.160.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:33:80:4a:ec:91:6a:ef:67:5c:bb:8b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=a824abab-2d96-456d-aac7-5a2aa4fd9c6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8a:6d:40:ec:af:4f:96:da:6a:a7:90:13:81:
                    f3:29:0f:88:87:b2:3a:c9:27:ed:83:9a:0a:6f:92:
                    ab:a1:32:4b:05:a9:b6:b0:b4:a2:14:e0:32:8c:a2:
                    53:e9:0f:69:60:7f:2a:fd:5d:ec:4a:b4:1d:b1:ca:
                    15:db:2f:c9:e0:dd:5a:06:69:49:08:23:b5:f7:fd:
                    d3:7c:e4:94:69:4f:86:4c:9c:53:4f:4d:7d:45:ac:
                    61:ed:f0:d4:b2:3b:62:48:11:05:40:74:ea:50:96:
                    89:b9:b5:97:21:94:77:ff:07:c7:d0:eb:83:51:89:
                    24:e6:f8:2a:14:8c:0a:60:13:fb:6d:40:30:f8:4d:
                    ec:6c:17:ce:05:a7:41:9d:ae:52:3b:f7:b7:33:38:
                    26:88:ab:5d:52:2f:9a:86:75:6d:a5:8a:51:9a:46:
                    a8:87:2f:95:3f:e4:a0:b0:fe:ec:31:0c:ba:41:46:
                    05:38:87:0d:26:8b:9e:f8:c7:ae:0b:b6:f8:bb:13:
                    1e:16:47:41:cd:23:f6:02:44:16:7f:69:07:a4:20:
                    97:40:b4:a6:85:b5:0a:05:73:24:15:fe:10:a5:9b:
                    1e:ea:bd:9d:88:7f:4d:47:a9:91:e3:9a:44:06:70:
                    b8:f6:a0:a8:96:42:f0:e0:8d:34:c6:67:93:52:00:
                    fd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FE:20:0B:E9:E1:6F:92:54:F4:35:AF:68:ED:38:2F:B6:04:E5:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/9c0273db-e7e6-35ca-8278-ef3a79434ea9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.246.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:33:f4:5a:d7:3d:a1:ac:ae:fe:06:39:9e:53:29:0f:9d:c4:
         17:b2:25:ed:4a:ce:51:5e:4f:33:d3:4c:30:a6:41:9a:24:68:
         e6:91:8f:b0:8d:e1:95:38:e4:e5:44:54:64:35:a3:80:71:7f:
         63:26:37:ee:e4:04:b7:6e:8f:02:bf:d6:f7:d5:bd:18:da:85:
         0e:1c:d1:7a:9a:c6:5f:b6:95:26:65:69:32:1c:54:80:fd:d4:
         f1:7f:f7:b6:cb:6b:99:83:9b:5e:6f:54:95:d5:ad:07:6d:7c:
         90:3a:45:44:53:57:15:23:9c:39:69:5a:d9:69:f6:c9:da:df:
         f4:e5:71:67:f5:77:d9:cd:62:5f:e8:1e:89:b6:e4:a3:47:af:
         da:58:28:0f:57:8c:81:dd:0e:b9:12:ca:f7:e1:26:27:80:0f:
         ff:f7:7c:89:0a:9b:58:bd:6e:42:20:3f:be:97:44:3b:04:e5:
         d1:80:1e:52:7e:b7:fe:af:97:2d:6c:b5:72:13:5a:96:78:b7:
         3e:e6:e9:73:1c:44:36:db:6f:5b:d1:0d:e8:b2:2b:22:76:56:
         0f:84:19:04:4b:40:f8:13:df:95:fe:8f:e3:af:c5:cf:84:9f:
         b7:7f:f3:31:fd:44:e6:52:29:8a:b7:97:ee:3d:1a:12:92:b8:
         e9:02:80:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----