Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/c732e496-7bd4-3e8d-8161-ed70e6a5000d.roa
File:                     c732e496-7bd4-3e8d-8161-ed70e6a5000d.roa (raw, json)
Hash identifier:          UY8ri7KeWM9zZ/WRdEVXz1/SP+Nc4gZ6ImSSnEFaaC4=
Subject key identifier:   A2:5F:B4:C1:AF:15:21:FB:84:DA:AA:AE:6B:7D:6F:47:CE:90:FA:F5
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583CE555726D40C57D602C405380
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/c732e496-7bd4-3e8d-8161-ed70e6a5000d.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        216.137.32.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e5:55:72:6d:40:c5:7d:60:2c:40:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=bed51b9a-d460-43ee-bbfa-78c0adeb9d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4d:4d:22:45:6b:75:e4:ed:e3:71:a5:b0:28:
                    74:a7:fd:bb:35:60:00:16:60:bf:5a:f9:f2:6d:2d:
                    7c:e3:dc:1d:be:b4:11:d7:b9:b3:d7:94:61:96:19:
                    ab:e7:b5:cc:2a:ab:10:18:21:4a:d4:ee:09:fb:96:
                    52:98:2f:c7:93:08:4c:ef:28:29:66:2c:06:c1:bd:
                    85:18:f1:5f:f7:3b:31:8d:fb:94:55:fd:f2:69:e6:
                    e4:a7:ff:ac:b5:34:89:84:69:17:94:85:68:3c:59:
                    47:a6:26:73:01:48:c7:e8:cd:cf:7c:d6:92:6c:70:
                    8d:cb:65:50:9e:da:9e:35:e4:58:c5:46:63:41:18:
                    88:b5:03:be:82:e4:07:15:12:99:4f:00:db:fb:ea:
                    8c:39:c2:cf:b9:f9:f6:2b:38:0b:f6:d5:74:1e:81:
                    36:78:e9:59:2d:79:62:f4:96:cd:3d:5f:31:9b:b2:
                    28:7d:18:85:05:c1:68:0e:2d:7e:dc:0f:ab:dc:71:
                    6a:66:b7:72:3c:40:1a:5e:6c:fb:4a:91:24:93:9a:
                    85:56:da:aa:34:ee:e1:04:96:a5:11:e3:98:24:5a:
                    6f:35:10:f8:9d:3d:10:7d:7a:b4:e7:dc:fa:25:98:
                    41:26:dd:c6:cf:1c:c5:e3:37:9e:05:2b:5a:3b:28:
                    f1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:5F:B4:C1:AF:15:21:FB:84:DA:AA:AE:6B:7D:6F:47:CE:90:FA:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/c732e496-7bd4-3e8d-8161-ed70e6a5000d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.137.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:1c:af:36:0d:55:f6:90:3a:66:12:54:d3:d1:42:ab:58:4e:
         04:4a:e0:48:51:0f:31:09:95:5b:e6:01:88:85:28:7e:5d:f9:
         be:f7:7a:8e:5c:0e:cb:07:55:d8:73:0c:e5:3f:bd:3a:90:9b:
         5a:08:6c:ed:e7:b3:fc:fa:4c:df:c8:e7:70:80:33:99:85:95:
         e9:a1:09:d4:6a:1d:56:11:45:d7:a5:b7:9c:d5:d6:f9:c9:14:
         34:29:5e:13:8b:d6:ff:32:c8:8a:a0:94:7a:7e:96:4a:62:b2:
         77:27:06:76:9a:38:d2:e5:38:e3:e2:b5:ea:25:85:0d:26:dc:
         b5:cd:08:c6:8b:10:a8:65:cb:a2:5d:6c:83:f4:8e:cd:33:7f:
         f7:b3:f9:df:25:7e:01:0a:65:3d:f9:f6:7f:61:db:20:19:4c:
         a8:77:97:49:7d:0a:10:f1:1f:19:cb:c4:1f:1d:41:2a:7a:88:
         8c:5d:ee:8a:da:a6:9e:b1:08:c4:b0:03:4d:2c:88:01:7b:52:
         ed:f7:f7:1e:72:23:f0:94:ff:6e:61:37:f9:f1:3e:98:ec:ae:
         9c:df:88:0f:2c:8c:c9:03:32:70:95:4d:51:93:1a:cb:bc:30:
         e4:c5:75:99:f3:01:3c:55:24:2b:9e:fd:f8:57:99:9a:6a:55:
         c0:5b:ca:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----