Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/f1936697-8503-3bab-a59d-8708037cf7bd.roa
File:                     f1936697-8503-3bab-a59d-8708037cf7bd.roa (raw, json)
Hash identifier:          YIcdCXwOUYvNRrQTrcKFvH1yYAq305vWc1UdGcYDoHc=
Subject key identifier:   A5:BA:AA:F2:CC:59:5A:63:DE:2F:62:AA:64:D9:4E:80:C8:88:51:67
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583DAA00CE1DB269FF8E40C64E80
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/f1936697-8503-3bab-a59d-8708037cf7bd.roa
Signing time:             Fri 22 Apr 2022 12:00:00 +0000
ROA not before:           Fri 22 Apr 2022 12:00:00 +0000
ROA not after:            Sat 28 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        204.246.160.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:aa:00:ce:1d:b2:69:ff:8e:40:c6:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Apr 22 12:00:00 2022 GMT
            Not After : May 28 04:00:00 2022 GMT
        Subject: CN=31c50197-1fc0-41c0-8902-c3c0be3ab17e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b8:f4:69:10:1a:bb:78:1d:ba:21:f7:6a:7f:
                    21:a4:53:ce:10:4c:be:4b:85:11:18:ea:f7:6c:c5:
                    4d:d2:77:70:c6:2a:a2:24:9e:92:50:4a:c7:ee:90:
                    0f:fb:e4:9e:6d:4a:c7:73:31:40:41:1b:43:1e:e0:
                    5b:35:fe:c4:55:1b:19:19:08:41:69:e5:8d:13:da:
                    cb:48:13:e7:f3:e4:8b:fa:b1:e8:97:8f:8b:7b:71:
                    c2:0f:cb:04:88:ba:b9:26:d3:52:5b:79:21:f4:6e:
                    cf:1b:99:11:b3:86:c7:50:35:b4:f1:51:54:51:08:
                    89:ef:12:fd:68:1e:cd:b0:c2:48:dc:96:ee:2c:73:
                    e9:fb:3b:80:c9:81:bf:56:ea:d8:9d:87:d8:90:d3:
                    99:60:2e:88:98:69:8f:c9:35:08:80:4c:4c:76:d6:
                    ce:01:0d:80:7a:57:72:00:24:be:48:28:25:1d:aa:
                    d1:b5:7f:2f:27:a8:d9:a0:02:73:85:c5:2c:7a:20:
                    9d:2a:71:9c:3c:08:ff:c7:ca:d9:18:80:11:f4:45:
                    d2:70:21:0f:a4:dd:3a:02:7b:b3:f0:42:4a:ab:b0:
                    76:2a:73:61:6f:f2:e9:6f:6d:cd:17:a6:72:5f:93:
                    db:1b:24:25:25:79:0c:5c:d7:67:8c:41:87:c0:52:
                    af:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:BA:AA:F2:CC:59:5A:63:DE:2F:62:AA:64:D9:4E:80:C8:88:51:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/f1936697-8503-3bab-a59d-8708037cf7bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.246.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:66:ae:2a:a9:72:3b:bc:ca:ff:6f:64:d1:74:13:bc:71:cf:
         e4:6a:30:17:9d:b8:fd:9f:b2:47:23:da:9a:cf:90:27:52:f4:
         8c:e3:bb:24:e3:78:7e:26:ce:43:27:cd:7a:6a:6e:f6:14:35:
         15:ae:b7:da:9b:5a:6c:10:cc:92:a1:6a:fa:9f:42:95:a0:e1:
         6f:0a:50:a8:86:b2:77:1d:d9:98:6c:b5:a6:1c:bf:b4:63:32:
         be:eb:ca:1e:71:6e:7f:05:4b:86:92:c8:c6:60:cf:a5:82:11:
         9f:e6:3b:ac:9f:51:ad:af:cc:84:77:73:e8:b8:d7:9d:31:90:
         1b:4e:88:e5:fd:df:08:d8:b1:06:7e:08:c2:8b:1d:fc:35:25:
         e5:2f:d6:44:7f:9b:4b:6a:cf:55:6d:eb:53:16:0e:36:23:ca:
         4b:13:de:75:b8:23:fa:89:30:eb:59:fb:4a:a6:77:9a:60:b3:
         ad:26:dd:0f:74:ee:2d:a9:64:1a:1b:69:26:b7:ee:ee:9d:e1:
         c5:e6:b5:29:4a:29:ba:31:66:1f:96:b0:5b:c3:99:fc:82:e6:
         37:fc:7c:39:40:43:f1:0b:ea:d6:8f:16:90:db:93:21:39:22:
         4c:bc:dd:5d:41:4e:4e:e6:c7:88:e6:72:33:f0:d1:ee:c5:6b:
         03:57:6e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----