Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/d1165d04-6051-3022-8dd4-ce0e71553c51.roa
File:                     d1165d04-6051-3022-8dd4-ce0e71553c51.roa (raw, json)
Hash identifier:          pGMftwjgO+wwjBXrtnOvTVaOsaQ7mZYfKaXPD78mQZY=
Subject key identifier:   EA:C4:42:9A:B4:A5:B0:E5:AB:AF:93:F9:83:E2:12:A8:AD:12:F5:2A
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583D338FA196C037BDE3CD054F80
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/d1165d04-6051-3022-8dd4-ce0e71553c51.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        216.137.32.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:33:8f:a1:96:c0:37:bd:e3:cd:05:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=edc6860f-e6d1-4d0b-b2b1-3a3a8551967b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:54:db:71:ea:0e:f6:5b:d4:8b:b5:91:ee:6b:
                    3e:00:53:ac:16:00:3e:c4:c3:13:16:5a:28:c5:69:
                    01:fc:8a:54:b5:c4:b0:a9:e1:30:ac:b0:f8:6d:ff:
                    e3:b4:06:6a:df:8d:07:5c:4a:42:c8:e7:d2:fb:23:
                    0c:aa:6a:9f:56:0c:d4:fe:ae:0a:06:bf:78:5b:c8:
                    b5:16:fa:2d:da:0b:ec:02:b8:a0:8b:fb:3a:12:5d:
                    e2:d4:2a:db:91:cb:18:f3:83:2e:5d:0d:b3:b5:da:
                    d8:76:c5:1e:31:8a:81:38:2b:3b:62:d5:fd:e9:93:
                    a4:77:50:95:a2:13:be:4f:2c:0a:6f:f4:54:1b:b7:
                    0a:68:c0:d8:7c:bc:02:b3:00:b8:e3:a3:03:e3:65:
                    c2:7b:87:c0:20:e9:72:42:0a:d0:f7:93:af:44:d4:
                    98:0f:d6:2e:22:c9:d6:9d:5a:f4:f8:99:b9:13:d9:
                    8a:33:8b:b2:b6:fa:86:76:ec:e6:20:25:c9:46:d5:
                    e6:99:38:2f:2a:6b:1e:13:d1:9a:11:e0:bc:0e:60:
                    47:a3:83:92:05:ae:9d:dc:0a:25:6f:be:c3:b1:35:
                    40:1d:48:53:72:9d:5b:46:4f:03:ae:91:ae:68:85:
                    df:05:da:1c:05:a5:19:65:fd:13:ca:0e:d3:8c:02:
                    ea:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C4:42:9A:B4:A5:B0:E5:AB:AF:93:F9:83:E2:12:A8:AD:12:F5:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/d1165d04-6051-3022-8dd4-ce0e71553c51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.137.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:6c:c6:67:9c:23:07:ae:17:f9:16:dd:aa:a9:a8:7a:54:89:
         94:f4:44:4b:13:95:92:41:87:30:8a:95:a9:68:f3:de:7f:ab:
         af:5f:a7:7e:b0:89:13:62:58:7f:74:1c:db:48:af:4e:57:9a:
         cb:84:c9:83:2d:68:34:db:55:cb:6c:1e:53:47:bd:0b:7a:69:
         a7:17:ed:8e:49:29:f8:a4:54:45:45:32:31:21:48:cd:17:f5:
         6d:c5:b9:75:f5:73:b7:4d:7c:29:a7:41:4a:50:55:ca:93:44:
         55:8c:71:cd:8c:87:c0:dd:78:e5:af:70:35:13:a4:e4:f3:a5:
         89:a3:ba:e8:17:1e:69:45:e7:24:81:4e:ed:d8:3c:95:df:4d:
         b0:65:98:3e:5c:93:39:9f:47:d6:21:17:1b:b5:6f:08:79:e5:
         b8:8b:9f:d0:aa:e4:3f:48:f0:99:98:af:65:7a:ff:04:09:ee:
         be:cc:ea:6a:54:c1:31:15:83:a9:e7:70:87:72:c5:94:04:cc:
         f5:d0:ae:49:9b:1e:cf:d3:77:66:af:1b:b8:c2:bf:46:99:9e:
         8e:90:c6:ac:47:89:35:17:a8:74:e9:8e:28:14:65:68:7d:d4:
         de:11:53:bc:94:2e:cf:8b:ed:72:b7:bc:7e:ea:e9:d9:00:fa:
         df:6e:e7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----