Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/caaab13d-fd50-36af-a973-b221864d009e.roa
File:                     caaab13d-fd50-36af-a973-b221864d009e.roa (raw, json)
Hash identifier:          RE2ADQ6zpmnK1VsqMp9LWGbyEfOhgInJlBz8rUuJxlA=
Subject key identifier:   EE:73:40:C1:C9:4E:37:E1:BC:22:61:75:94:A0:73:44:D4:7B:78:D0
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583F570F1251745FF17483176980
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/caaab13d-fd50-36af-a973-b221864d009e.roa
Signing time:             Thu 22 Sep 2022 12:00:00 +0000
ROA not before:           Thu 22 Sep 2022 12:00:00 +0000
ROA not after:            Fri 28 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        216.137.32.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:57:0f:12:51:74:5f:f1:74:83:17:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Sep 22 12:00:00 2022 GMT
            Not After : Oct 28 04:00:00 2022 GMT
        Subject: CN=3a2e768c-1f2f-44c1-b01f-ddad69886f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f6:59:84:6a:d1:df:e3:91:b3:1b:c4:93:5d:
                    fd:27:5a:93:9a:86:b1:96:7a:09:2e:1c:5e:6f:b5:
                    63:29:af:79:b6:26:ac:d0:a9:54:fe:0d:3e:f0:4f:
                    fb:b4:08:e7:59:1d:53:eb:90:70:72:16:8c:09:3d:
                    ed:35:96:1c:d7:ad:d9:cf:52:ec:91:c9:66:1c:a4:
                    aa:d0:2e:71:21:e3:c7:82:e4:7d:7f:80:bd:ec:dd:
                    b9:53:ed:6e:f3:e0:a6:44:54:41:c3:72:8f:af:63:
                    0f:c6:f0:7c:63:3e:99:89:ac:97:fa:2c:25:50:c0:
                    dd:67:24:0f:6d:ae:65:dc:e8:59:fe:3f:f8:aa:18:
                    40:1f:60:d8:84:43:80:04:ec:04:8b:b1:97:cf:16:
                    8f:50:13:5f:3c:27:05:05:f7:e4:c0:7f:9e:45:9a:
                    e5:2f:8d:3a:0b:7c:45:e2:2e:4b:0e:b4:26:cc:80:
                    1d:cf:02:8e:f7:76:23:87:78:54:9d:95:fd:15:e2:
                    17:cb:82:5f:de:5d:13:01:bf:31:ee:66:59:60:b7:
                    6f:96:5a:04:9d:4d:59:ab:b1:e8:f1:5b:98:d0:aa:
                    d3:a9:e0:eb:8a:80:0b:22:7d:56:39:a8:c7:de:c8:
                    42:3f:71:09:2e:9e:6b:5f:75:2b:66:89:f9:30:cc:
                    77:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:73:40:C1:C9:4E:37:E1:BC:22:61:75:94:A0:73:44:D4:7B:78:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/caaab13d-fd50-36af-a973-b221864d009e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.137.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:00:3c:7c:b8:0c:79:1a:2d:cc:12:6d:c5:a4:2c:c7:33:65:
         45:a9:97:1d:5a:db:cf:b7:81:fc:d1:2e:79:9a:22:84:8a:96:
         c8:80:db:1d:37:9c:64:3c:14:11:90:3b:5e:c5:a7:56:2f:2c:
         54:9c:10:4f:ce:90:3e:51:80:19:c2:54:ad:da:d8:65:de:67:
         31:e0:25:b8:73:89:36:20:ee:85:16:bd:ee:4a:b2:d0:79:bd:
         1c:7d:fe:91:61:47:5e:53:2b:b0:a2:f6:ad:1a:22:e0:c1:84:
         60:03:9c:4e:18:33:ef:12:66:f0:3c:e4:0a:2e:8e:7e:06:5e:
         04:2f:db:07:53:36:90:63:d0:3c:cb:f8:42:ef:61:81:08:fb:
         16:63:da:b0:03:75:e5:00:c3:12:20:07:d9:1e:8f:09:f7:13:
         5e:b6:fc:b1:d2:a1:95:96:6b:9e:7e:51:73:31:00:9b:ad:fc:
         43:83:3a:25:f4:53:46:55:a5:b4:0f:93:78:e5:fc:5d:50:ef:
         c4:74:96:2e:51:4c:4d:6a:15:79:14:aa:fa:6d:f2:78:01:c0:
         85:13:bc:89:0d:ca:47:c4:ce:7e:77:8f:78:76:3d:c1:f4:63:
         10:ff:97:41:aa:d9:e4:f6:43:f6:3d:a3:8c:15:b1:63:c2:a9:
         8d:c8:98:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----