Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/a00faa3e-e812-372a-8102-23539ec1e5c8.roa
File:                     a00faa3e-e812-372a-8102-23539ec1e5c8.roa (raw, json)
Hash identifier:          J+jCu697fZUr9GNRGJLrPX/Fq+MHtpIYEUrAe2NBqhE=
Subject key identifier:   8E:21:D9:0F:8A:DB:E4:0F:A1:4B:9F:5F:B4:79:10:0C:CC:1A:11:49
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583F30FDCAFAB328144035A54780
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/a00faa3e-e812-372a-8102-23539ec1e5c8.roa
Signing time:             Fri 09 Sep 2022 12:00:00 +0000
ROA not before:           Fri 09 Sep 2022 12:00:00 +0000
ROA not after:            Sat 15 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        207.171.160.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:30:fd:ca:fa:b3:28:14:40:35:a5:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Sep  9 12:00:00 2022 GMT
            Not After : Oct 15 04:00:00 2022 GMT
        Subject: CN=c4b57b28-2976-4a2e-a5d5-c736a9e617c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bf:63:a1:5d:fd:55:c5:e0:9f:d4:f1:06:35:
                    05:8c:46:80:d0:1c:dc:e9:0a:62:40:15:ea:7b:78:
                    6d:ec:c7:3a:ab:98:d2:c9:a9:8a:fa:b0:25:97:d6:
                    4d:a3:ed:a3:36:21:2a:e8:6a:78:ab:79:28:08:e8:
                    ca:31:b0:53:0a:1d:4f:47:e7:13:b5:a6:ff:ec:d1:
                    dd:10:b0:55:7c:e3:58:ca:85:1b:14:db:10:1f:6e:
                    4d:0b:f5:13:98:6d:d0:ac:a0:b6:3c:80:7d:3a:59:
                    2a:30:71:0c:f6:85:eb:14:77:bd:b0:81:5e:21:70:
                    66:c8:38:ff:31:46:b6:16:4d:9d:2a:74:c4:2a:b0:
                    32:d7:e4:68:11:72:d1:18:44:48:fc:75:05:08:05:
                    e1:eb:df:98:26:eb:5e:5c:e5:c8:f8:85:3b:b1:dd:
                    77:62:d2:14:cb:0e:d4:54:a8:00:39:be:89:b7:b0:
                    a7:db:a9:dc:bd:19:a1:b8:d8:d0:61:b8:cf:61:5b:
                    63:89:84:c5:35:f7:3d:d9:ea:5a:6e:66:58:30:fd:
                    1c:31:bb:5f:c0:85:3b:98:4a:68:b6:ad:f8:85:35:
                    89:f7:f9:61:53:5f:c2:73:37:fd:9e:d4:e1:48:79:
                    99:45:2b:7a:75:25:06:44:29:0e:d0:8e:98:dc:de:
                    e6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:21:D9:0F:8A:DB:E4:0F:A1:4B:9F:5F:B4:79:10:0C:CC:1A:11:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/a00faa3e-e812-372a-8102-23539ec1e5c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.171.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:15:bd:53:72:25:ed:59:08:c1:6d:cd:22:5b:0b:b4:bd:31:
         c0:42:9a:9e:de:ed:a6:16:14:2e:7d:f1:8a:b4:f7:73:30:ec:
         44:2c:ee:9c:3d:30:f1:b4:30:c7:f0:11:99:ba:f9:16:f7:94:
         b1:6a:ea:1a:83:d7:9d:7b:b0:2b:30:ff:1e:c9:c3:71:bf:89:
         c9:c2:45:0c:4b:c4:ae:13:ec:4f:11:c7:d3:a7:97:08:a9:ad:
         57:47:dc:2d:80:fc:fe:35:87:18:28:58:4c:b6:00:a1:6e:57:
         30:2f:ee:f4:bb:77:a7:de:77:e7:0e:2f:9c:12:c9:2e:d6:91:
         e0:17:3e:89:bb:7e:64:e0:26:02:a5:c6:98:13:0d:89:ae:3d:
         33:29:cd:4f:cc:3f:d3:55:19:9e:b8:b5:92:5a:d1:42:23:a6:
         ba:af:b2:df:d3:7b:ae:44:1d:41:ed:a3:85:db:49:2a:54:b5:
         ef:af:56:23:9b:13:1c:79:a8:1e:5d:ed:1a:21:1b:07:87:16:
         65:a6:4d:56:83:9a:4e:7d:e0:58:66:b2:38:16:2f:a8:05:33:
         d7:17:5a:70:3c:46:55:e6:0a:93:89:f4:d9:a2:44:5a:7c:32:
         98:f7:2c:38:bc:e3:c4:71:b3:d7:43:54:84:32:95:22:f7:3a:
         58:8a:ef:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----