Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/f1462da5-47c9-3030-a79c-7e9f5caa7047.roa
File:                     f1462da5-47c9-3030-a79c-7e9f5caa7047.roa (raw, json)
Hash identifier:          fTgc+KhsuM+bXW9b5zutCUb5AB4VsypSYhLcwfWlLnw=
Subject key identifier:   86:55:03:36:44:C9:3C:F8:FA:22:DA:F3:57:10:DF:93:18:F6:CE:8F
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583FA69F682EE2C6B9024ECD3D00
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/f1462da5-47c9-3030-a79c-7e9f5caa7047.roa
Signing time:             Fri 21 Oct 2022 12:00:00 +0000
ROA not before:           Fri 21 Oct 2022 12:00:00 +0000
ROA not after:            Sat 26 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        204.246.160.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a6:9f:68:2e:e2:c6:b9:02:4e:cd:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Oct 21 12:00:00 2022 GMT
            Not After : Nov 26 05:00:00 2022 GMT
        Subject: CN=9683fd82-46da-4cac-bfff-d792d816ed60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:76:1e:0a:33:4a:b2:37:91:f7:88:6e:e5:a8:
                    b3:d1:3b:c1:07:1e:55:4e:39:c0:02:0f:0d:cf:89:
                    af:f5:06:24:9d:aa:94:e6:7c:95:07:81:90:6f:e5:
                    3c:a1:fe:8e:d9:28:25:99:8e:7d:84:3f:dd:94:c1:
                    09:c5:4b:38:00:9a:31:88:48:b5:fa:00:32:5e:78:
                    b9:09:a9:75:ae:71:6f:8c:9d:28:4d:64:12:79:12:
                    b3:d4:02:73:f5:74:29:ee:ac:91:fb:81:3f:cc:ef:
                    e4:0b:b0:27:ec:2b:93:12:9c:b7:b2:e3:db:f5:1d:
                    8f:51:99:f7:b5:0d:6b:97:9c:0d:42:5d:66:cd:72:
                    61:31:6c:c7:10:e3:af:e2:a8:f8:12:9d:89:23:c2:
                    80:03:83:c9:80:eb:8d:c9:57:ed:11:46:89:de:10:
                    0a:5f:3a:6f:6f:9a:46:b7:cd:1a:21:d6:5b:d6:58:
                    dd:45:15:7d:f8:1c:a8:54:33:28:e0:79:0a:10:27:
                    6c:98:9d:5d:ca:65:62:95:93:2f:4d:71:66:53:24:
                    1a:e7:6c:ac:3c:37:2a:8c:aa:d3:fd:5d:b3:fd:ca:
                    ac:76:ab:c6:a3:f8:48:85:b5:5a:02:fc:ea:41:b6:
                    3c:1b:fd:92:d5:17:f1:06:e8:ba:fa:92:06:6c:29:
                    40:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:55:03:36:44:C9:3C:F8:FA:22:DA:F3:57:10:DF:93:18:F6:CE:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/f1462da5-47c9-3030-a79c-7e9f5caa7047.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.246.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:20:d5:fa:7f:80:04:02:61:3a:ee:eb:61:da:2c:52:41:8c:
         17:47:01:7a:15:72:da:66:03:87:02:67:9a:52:0a:e1:83:68:
         34:a7:08:06:53:2d:61:37:ae:fd:a0:b4:07:bb:84:d9:42:fa:
         6c:8d:8c:fa:b4:b3:52:e2:22:44:01:97:e1:09:d0:8a:0c:8e:
         8d:76:7e:e5:bf:a1:75:0c:94:21:3e:4d:02:e2:b8:fe:59:40:
         52:40:13:e1:fa:39:da:6d:ed:c4:69:b5:d4:b9:30:00:9d:d1:
         fe:50:7e:80:d5:59:41:b2:5e:8d:94:ab:06:10:b9:91:45:bb:
         3d:0d:03:06:61:c0:4c:90:75:53:05:da:e4:58:2f:4c:c6:1c:
         00:8a:1d:a7:68:d5:44:95:98:b5:61:0e:02:dc:7c:b4:4e:41:
         3c:91:a0:2b:45:cf:ce:81:62:e6:10:65:c8:6f:1a:12:7d:31:
         dc:0d:1a:60:70:6d:cb:2f:ef:95:3c:5b:97:80:86:6b:19:1e:
         e6:0d:c4:df:a0:a8:5a:65:02:73:3a:05:06:b8:35:fb:a4:1a:
         1a:63:68:87:12:49:2b:82:dc:f0:5e:01:d8:7f:4d:22:f6:c0:
         9e:d9:94:00:41:09:05:cd:df:64:5b:c6:02:ef:0f:fa:87:52:
         70:e4:0a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----