Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/a2f7e74f-f954-366f-a3a9-a60da8847753.roa
File:                     a2f7e74f-f954-366f-a3a9-a60da8847753.roa (raw, json)
Hash identifier:          H4hVho6YwhMDTxqIP5/B5CZMXOUs99QPjFHglwP83yQ=
Subject key identifier:   EA:75:00:34:C7:8C:AA:DB:1F:F1:1E:90:FF:C7:10:61:71:AA:A1:9C
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583C9704B0571218AD593A656B80
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/a2f7e74f-f954-366f-a3a9-a60da8847753.roa
Signing time:             Fri 14 Jan 2022 05:00:00 +0000
ROA not before:           Fri 14 Jan 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        205.251.192.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:97:04:b0:57:12:18:ad:59:3a:65:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Jan 14 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2022 GMT
        Subject: CN=f02778ea-22cd-4569-95d6-983459c14b74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:13:71:d0:e7:7f:63:57:79:e4:da:19:ce:82:
                    2f:29:89:0b:2b:fd:81:3c:f8:d0:08:8a:0f:6e:e2:
                    35:fb:8f:90:56:e7:0f:a4:f7:2e:48:9d:84:86:ec:
                    67:21:47:25:fe:05:27:6c:54:e5:58:35:b2:ce:46:
                    6b:36:99:79:5f:4c:eb:e5:9d:91:33:cf:5d:54:be:
                    05:ca:72:e7:97:56:70:66:eb:99:56:91:47:ea:0b:
                    03:46:eb:0b:27:d3:96:28:b8:9f:88:c5:09:90:29:
                    b7:6f:4d:22:70:f6:8e:d9:44:3b:60:2e:c7:4f:46:
                    9c:82:f0:36:5d:f0:31:83:b5:2f:5d:16:83:5a:2b:
                    ef:81:68:35:4d:f2:95:43:7a:2e:bf:3f:c6:53:37:
                    3e:0b:49:64:93:bc:a4:c9:13:ea:32:01:1d:a1:37:
                    ea:72:ac:33:41:47:ae:cd:6c:68:9c:c4:85:0a:28:
                    ef:0a:df:23:bf:56:57:f9:dc:fa:29:78:92:79:73:
                    ad:94:3e:61:d2:ba:5f:92:f4:44:84:ea:02:0b:1b:
                    c4:73:39:3c:48:f8:12:93:50:c6:31:fd:0e:3e:8a:
                    aa:3d:1f:1a:70:26:fe:02:a2:72:53:14:18:a5:a5:
                    95:5c:c0:2c:d1:31:d6:fb:05:b5:09:80:35:8a:22:
                    20:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:75:00:34:C7:8C:AA:DB:1F:F1:1E:90:FF:C7:10:61:71:AA:A1:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/a2f7e74f-f954-366f-a3a9-a60da8847753.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:29:eb:45:ce:97:f5:fc:f4:a9:3b:cc:3b:ba:8c:9c:55:61:
         5a:4e:b4:ec:8a:29:3e:ec:1f:75:d6:9a:60:50:ef:3e:c9:bd:
         82:1d:ce:88:9f:ae:b3:19:a6:35:31:45:96:4e:43:d2:af:e2:
         1e:96:2b:40:28:13:bd:0f:43:90:91:92:3a:6a:ba:8d:95:59:
         0b:0e:27:e6:57:ab:ad:0c:ef:b7:0b:e1:89:5d:30:aa:8b:e5:
         f3:75:1d:5f:e1:cc:83:e6:d5:9e:46:9b:df:db:35:5d:3e:de:
         26:56:74:3d:fb:e9:8b:37:78:61:da:91:da:2a:23:2e:13:f7:
         3e:e1:5d:f6:3a:e3:dd:f5:1f:62:b3:c1:1e:09:17:b8:cd:00:
         26:27:7f:98:29:35:84:32:e8:4d:28:c6:06:29:f8:52:ea:cd:
         ad:02:98:e9:d3:74:cf:b6:a5:bf:7c:b0:88:00:c0:9f:53:7c:
         ac:a2:d6:04:9e:9b:ae:7a:5e:33:87:25:d7:13:f1:e0:42:2a:
         f8:d7:76:0d:f8:20:88:63:88:8c:ff:e6:70:68:85:b1:61:50:
         3a:fe:7d:3c:64:f8:4a:54:a1:40:ff:fc:e7:4e:98:7b:b8:ce:
         f2:80:b9:39:e1:0b:7e:21:c4:07:82:e1:3f:12:97:78:a2:bb:
         c0:e0:a6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----