Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/e4457672-c1c3-3b71-90ef-b9c30dde8246.roa
File:                     e4457672-c1c3-3b71-90ef-b9c30dde8246.roa (raw, json)
Hash identifier:          ADQ6hbMDMm2LpIe6Mu643gp48KxO+uxiWEPZ5sGFpeg=
Subject key identifier:   DC:CD:04:8D:AD:9B:2C:E0:5E:92:92:B2:0B:06:51:92:B8:36:40:40
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583CBE2933A9E14028757C8DD040
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/e4457672-c1c3-3b71-90ef-b9c30dde8246.roa
Signing time:             Fri 28 Jan 2022 05:00:00 +0000
ROA not before:           Fri 28 Jan 2022 05:00:00 +0000
ROA not after:            Fri 04 Mar 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        204.246.160.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:be:29:33:a9:e1:40:28:75:7c:8d:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Jan 28 05:00:00 2022 GMT
            Not After : Mar  4 05:00:00 2022 GMT
        Subject: CN=eaf7c41c-68fa-40ff-97f7-bfdd34cfa71d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3f:55:3c:67:5e:a7:65:7c:70:7f:12:e7:09:
                    26:a5:b1:31:aa:d7:c0:7d:56:2c:a0:f6:51:63:7c:
                    20:f8:e0:9d:d7:ac:18:10:7a:3f:c0:b9:3e:da:93:
                    7d:e7:36:6e:10:dc:f7:09:04:3e:d6:1a:e8:00:11:
                    5f:19:23:d5:44:72:aa:24:a0:11:b1:ba:26:dc:d6:
                    60:97:85:6b:ba:72:9f:7d:bf:70:d6:ee:e8:68:06:
                    d4:c3:95:94:4b:d0:b3:f6:6c:37:87:f1:ff:70:57:
                    b4:22:a3:19:65:0a:f1:76:50:bd:e2:ed:a3:ec:0f:
                    97:c8:21:51:d7:0d:95:1f:bc:ee:ad:41:5f:a3:76:
                    f4:b5:fb:f8:b3:e9:b8:2a:35:b1:fe:f5:30:a3:95:
                    02:77:89:a3:04:6a:cc:f4:5a:33:ed:05:cb:6e:58:
                    06:42:37:19:d3:96:68:e2:e0:38:29:22:27:63:08:
                    2c:53:bd:7d:0b:8e:e4:be:25:15:d5:b1:65:d0:37:
                    5b:45:0a:44:49:20:f5:65:35:65:bf:25:ed:10:05:
                    f3:33:3f:58:8a:f7:c2:8e:fd:30:11:a8:dc:e7:10:
                    42:bc:81:72:75:68:2b:08:ea:21:e5:97:f2:0a:51:
                    49:d7:c4:a2:b5:f2:e8:7a:46:9e:23:f5:4f:61:cf:
                    3e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:CD:04:8D:AD:9B:2C:E0:5E:92:92:B2:0B:06:51:92:B8:36:40:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/e4457672-c1c3-3b71-90ef-b9c30dde8246.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.246.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:e6:0e:27:90:8f:e8:1d:a7:a9:ee:f9:ac:7c:8f:21:9e:15:
         ca:b0:bc:21:60:92:a8:1a:c4:81:08:90:b2:af:c4:c1:a0:36:
         fc:c5:52:6a:a7:c1:6c:91:c1:64:49:e4:42:51:de:60:d7:13:
         f7:82:93:81:fa:1f:b5:f2:ac:a3:5b:08:d2:cd:ca:cf:d7:a0:
         c7:eb:d2:16:4b:69:96:79:e4:e4:8e:79:af:de:4f:81:c0:63:
         4a:72:36:87:b7:fa:91:11:97:96:c0:6f:9a:fa:aa:f2:9f:90:
         e1:ca:07:4e:da:c1:be:b8:99:18:2c:f8:b3:ca:73:f9:80:8b:
         8d:2a:9a:d1:e3:60:81:6d:4c:dc:99:75:47:37:45:1c:a2:23:
         d9:04:49:cb:10:40:4d:c4:14:cf:e2:64:85:de:4a:2d:7c:d6:
         66:12:3c:df:58:0b:fa:53:45:51:bb:4b:fb:b2:3e:44:e0:99:
         20:69:86:c8:e9:28:8c:e0:e1:bb:56:1c:0e:86:0f:22:6a:2b:
         f9:80:01:47:43:df:4c:c2:61:f2:4a:7f:04:a2:62:11:94:05:
         a9:f2:9b:33:4e:a7:b1:32:87:14:5a:b4:f8:82:c8:1e:a7:05:
         f8:15:1e:6e:fb:7d:b9:62:dc:18:80:a2:a8:55:e2:9a:87:48:
         40:bf:a0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----