Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/d7f7954a-afc2-349d-9d71-0491a15b8e0f.roa
File:                     d7f7954a-afc2-349d-9d71-0491a15b8e0f.roa (raw, json)
Hash identifier:          I4ZEWdhd17tVeF3srZ/u3CtgYgvA7YOI4M/PTFJcq0U=
Subject key identifier:   EF:D9:91:44:61:7D:B0:67:E5:FD:31:2A:3E:49:FD:65:E4:6F:19:99
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583F5A93A4C6E696A8EF724C6680
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/d7f7954a-afc2-349d-9d71-0491a15b8e0f.roa
Signing time:             Fri 23 Sep 2022 12:00:00 +0000
ROA not before:           Fri 23 Sep 2022 12:00:00 +0000
ROA not after:            Sat 29 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        72.21.192.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:5a:93:a4:c6:e6:96:a8:ef:72:4c:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Sep 23 12:00:00 2022 GMT
            Not After : Oct 29 04:00:00 2022 GMT
        Subject: CN=0760c703-408c-4cd0-98d2-8a8f4f34abe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:2f:a7:6b:68:8e:ea:28:1a:bf:0f:ec:99:fd:
                    e7:9f:bc:0f:e7:89:56:af:e2:e0:c9:59:27:22:c2:
                    07:75:37:3c:b5:ae:08:75:90:78:4c:2d:cc:9a:fe:
                    3c:d7:00:b3:f3:af:60:9e:9b:03:18:c2:42:cf:ab:
                    b6:17:c0:f4:13:7e:ec:f3:2c:68:24:71:bb:16:e3:
                    b7:27:ea:25:39:f2:1f:68:02:ae:e2:d6:d9:78:f9:
                    86:16:af:48:ff:4e:5e:27:17:6d:18:1f:a2:9e:5f:
                    b9:77:7c:5f:02:7b:95:e7:44:bb:7d:15:85:b4:a5:
                    78:78:bf:07:a2:a7:3a:f8:f0:80:94:23:da:a4:b2:
                    96:53:70:b1:09:9f:21:a4:7d:8f:b5:24:82:bd:c0:
                    72:2a:b3:66:64:bc:be:7c:d3:08:e2:c7:6c:67:26:
                    c1:23:3c:f2:6d:7b:34:9c:33:58:8f:4b:28:ad:1d:
                    68:ae:9f:6e:a7:48:85:65:dc:ae:5a:20:5d:2a:b3:
                    78:0b:7f:7b:86:a0:ba:40:31:ea:68:6d:9c:10:cc:
                    91:72:24:17:05:f9:50:1e:b8:00:14:cc:af:6f:ca:
                    a0:5d:ac:4b:21:84:7e:80:7f:6e:83:65:18:f8:bc:
                    66:45:75:c9:c5:55:7c:da:68:2a:5f:1e:86:ae:68:
                    bd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D9:91:44:61:7D:B0:67:E5:FD:31:2A:3E:49:FD:65:E4:6F:19:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/d7f7954a-afc2-349d-9d71-0491a15b8e0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.21.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:48:a5:03:21:ab:e9:df:c6:4f:33:a1:02:33:20:69:7e:4d:
         73:7a:d8:b3:e5:d8:da:dd:9c:bb:dd:73:2b:43:d6:9e:9b:db:
         33:4d:01:2a:ee:f1:be:56:fc:a3:81:e9:95:90:9a:15:ed:4b:
         49:22:93:ae:db:cb:70:32:b4:05:66:93:c8:8b:a9:62:dc:2d:
         95:9b:53:ad:1f:c5:30:bb:14:46:76:13:72:13:69:46:28:cd:
         ef:20:61:3e:28:6b:36:6c:68:97:61:ff:36:53:88:ca:db:f5:
         60:71:0d:1b:04:b7:4d:82:f4:f0:fc:fc:e2:87:8a:4b:0a:b4:
         0c:3c:ac:58:e7:9b:87:10:9b:78:0c:9a:b4:1a:a6:81:6b:bf:
         97:e4:25:fa:e0:5c:b7:25:fb:00:45:ef:72:54:40:e1:99:99:
         80:7f:23:40:3a:1b:89:17:9d:68:83:fc:05:a0:5b:54:7c:61:
         08:b9:1c:35:0c:b3:e0:4f:24:cf:37:cc:e9:d3:6e:d7:68:b1:
         f3:eb:87:d1:d0:51:5e:73:2a:24:d9:98:33:0a:f9:39:a8:34:
         1f:ed:31:5a:7a:61:46:3d:bd:86:bc:cb:9c:d7:a8:66:e5:35:
         59:b0:49:b7:33:a0:cc:ef:ab:08:79:c3:05:ab:12:23:1c:88:
         bd:1c:80:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----