Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/bac31498-4276-315b-9e31-7b5586fd87f6.roa
File:                     bac31498-4276-315b-9e31-7b5586fd87f6.roa (raw, json)
Hash identifier:          4typoUB5D5souQE2FChFFGrbIBkaMN4rf7QpjlSAUJY=
Subject key identifier:   A2:A8:01:81:C3:BD:D4:86:80:C9:E9:A2:FD:A9:92:DE:55:6F:4F:FC
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583F312310895CACE2AB0FD84700
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/bac31498-4276-315b-9e31-7b5586fd87f6.roa
Signing time:             Fri 09 Sep 2022 12:00:00 +0000
ROA not before:           Fri 09 Sep 2022 12:00:00 +0000
ROA not after:            Sat 15 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        204.246.160.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:31:23:10:89:5c:ac:e2:ab:0f:d8:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Sep  9 12:00:00 2022 GMT
            Not After : Oct 15 04:00:00 2022 GMT
        Subject: CN=2fa82a63-fcd5-47ba-b51e-c06dc6a166cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f1:1f:cb:2f:49:d4:35:05:12:32:b2:18:c7:
                    1a:b0:65:01:6d:0e:35:e0:3b:92:0c:d3:f2:7f:4d:
                    9c:86:f5:81:4a:6d:1c:3e:9d:8f:cd:0e:69:ce:d1:
                    f1:31:f2:df:06:a1:04:9c:ac:7b:92:22:b0:eb:3a:
                    a6:32:6d:07:71:db:c9:3e:e3:23:5f:6a:b2:88:9e:
                    59:8f:72:73:50:42:b4:7e:d5:56:86:fc:e7:d3:df:
                    36:85:ac:7a:18:37:a6:24:54:6c:ed:f2:cc:87:19:
                    49:89:1b:5c:43:3f:7a:67:93:04:f3:89:7a:58:cd:
                    10:f6:c0:66:5c:d9:a5:29:87:fd:3a:df:5e:d2:b8:
                    37:d1:42:62:62:66:09:d2:4f:82:d0:cb:61:9f:70:
                    95:e1:2e:72:8a:50:c4:0c:95:cd:18:8b:c3:ed:65:
                    8f:7f:31:49:53:0e:b4:44:f8:27:99:02:99:b2:a3:
                    2a:23:78:84:bc:85:4b:96:50:2d:eb:b4:10:af:90:
                    ab:e2:e6:f8:80:6c:f1:be:b4:88:5b:6c:ef:e7:16:
                    36:76:03:21:e9:ab:5d:18:52:78:bf:1b:aa:2c:11:
                    6e:16:3c:04:17:4c:e6:f0:d0:ec:28:c0:05:9d:cd:
                    f6:67:26:49:15:49:61:ae:f9:01:53:84:74:4d:3d:
                    d9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A8:01:81:C3:BD:D4:86:80:C9:E9:A2:FD:A9:92:DE:55:6F:4F:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/bac31498-4276-315b-9e31-7b5586fd87f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.246.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:31:ec:5f:bc:fa:c2:59:10:a8:24:7d:26:f0:d5:23:fc:56:
         a9:fc:93:e0:69:47:8b:53:be:03:e7:95:ce:a3:c4:d0:3f:a2:
         a8:9d:a8:57:44:ad:b7:bc:9e:75:19:3d:78:72:c7:f0:d0:32:
         f9:61:c9:b5:55:8e:74:0a:ca:e2:ba:63:d0:e2:17:f0:9a:c7:
         22:ec:6f:9d:05:69:10:ed:de:7d:1b:77:5e:a4:32:4e:9c:61:
         49:90:74:21:b8:f2:d9:d1:d5:76:19:93:a8:b5:31:f4:19:eb:
         2e:7b:00:34:d9:da:dd:ee:eb:44:63:6b:22:b0:a3:35:14:2c:
         b4:ee:12:da:77:53:dc:17:32:9a:cd:80:34:7d:8e:ed:f3:a5:
         36:c0:fe:ef:5d:78:69:e2:df:26:85:74:84:6a:86:89:9d:ac:
         c6:6f:08:60:8b:cd:09:1b:22:d9:b4:c1:9c:4c:9d:b4:78:b6:
         01:4f:57:9e:ea:bc:cb:8b:db:c2:4c:38:c7:8b:d9:54:b2:fb:
         c0:88:f1:50:f5:2a:d6:ff:4a:b4:ab:90:72:e5:5b:ed:81:a3:
         a4:cb:9f:13:62:3b:85:7c:0a:30:ed:a7:f1:32:d0:d8:ee:83:
         97:8f:05:28:7b:3f:83:71:9e:44:e0:02:e3:c3:7a:77:f2:ac:
         e3:e1:e7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----