Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6976b8bc-b1c5-46fa-87d7-734c029ac999/84e9e54c-e5c3-3073-abdf-733e2ebd3307.roa
File:                     84e9e54c-e5c3-3073-abdf-733e2ebd3307.roa (raw, json)
Hash identifier:          xFFJ0YRpA7tBeI0ZSZr7CxHSSM9+p2d9PLW/xEaHDQM=
Subject key identifier:   9A:1A:DE:C7:8A:9F:8B:32:9D:2E:C1:DE:05:C4:3D:F5:05:FD:FD:10
Certificate issuer:       /CN=6976b8bc-b1c5-46fa-87d7-734c029ac999
Certificate serial:       010D0C9F4328584297044C523F18C3AE8D8ACDA0
Authority key identifier: 28:CF:40:FE:D4:F3:60:82:6E:DA:FF:D4:18:28:5D:B4:F0:9C:3A:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6976b8bc-b1c5-46fa-87d7-734c029ac999.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6976b8bc-b1c5-46fa-87d7-734c029ac999/84e9e54c-e5c3-3073-abdf-733e2ebd3307.roa
Signing time:             Tue 18 Jul 2023 17:40:59 +0000
ROA not before:           Tue 18 Jul 2023 17:40:59 +0000
ROA not after:            Mon 16 Oct 2023 17:40:59 +0000
asID:                     109
IP address blocks:        173.39.128.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:97:04:4c:52:3f:18:c3:ae:8d:8a:cd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6976b8bc-b1c5-46fa-87d7-734c029ac999
        Validity
            Not Before: Jul 18 17:40:59 2023 GMT
            Not After : Oct 16 17:40:59 2023 GMT
        Subject: CN=d8204356-bba9-4851-a9cb-018e46a6cd86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:58:7e:2d:11:12:af:b5:1f:b6:43:73:b5:c0:
                    d4:51:7b:bb:37:b2:76:77:3c:a8:60:0e:a8:99:0f:
                    84:e5:07:bb:9e:29:53:d0:61:9d:8d:2b:18:3e:ac:
                    d0:6a:72:e4:40:b1:44:20:22:df:f4:76:67:46:98:
                    2b:1b:0f:3a:cc:c5:17:f5:c7:e6:d3:8c:cc:17:af:
                    f5:c0:3f:5e:df:5a:c1:98:73:c6:9f:04:86:5c:ba:
                    5e:d4:1f:d5:f1:16:20:11:28:46:a9:56:6f:c2:92:
                    3d:82:da:a8:d9:5f:a1:76:6a:ca:d8:6e:0c:12:58:
                    f6:8f:1e:3b:35:01:91:50:f6:51:75:7c:40:aa:9d:
                    e8:e0:07:bf:af:6e:44:8a:54:e1:b7:a4:8f:e5:22:
                    ec:f1:5d:ce:15:39:f9:0e:fd:c1:e0:87:78:71:fa:
                    1c:73:30:46:4a:fe:0e:4f:97:55:46:d8:e2:ff:b5:
                    a6:8e:67:7f:a0:a3:04:7d:13:74:0b:ed:d0:2b:c0:
                    52:b0:2a:8d:8d:78:22:65:bf:b4:13:0a:07:1a:d1:
                    eb:1e:c5:cf:8b:f7:46:79:05:92:24:da:9f:66:85:
                    7a:47:5e:42:5f:f9:db:5d:24:b2:44:b2:92:fb:ff:
                    07:72:cd:00:f1:6a:28:9d:56:6c:14:e8:22:6b:27:
                    38:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:1A:DE:C7:8A:9F:8B:32:9D:2E:C1:DE:05:C4:3D:F5:05:FD:FD:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6976b8bc-b1c5-46fa-87d7-734c029ac999/84e9e54c-e5c3-3073-abdf-733e2ebd3307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6976b8bc-b1c5-46fa-87d7-734c029ac999/6976b8bc-b1c5-46fa-87d7-734c029ac999.crl

            X509v3 Authority Key Identifier:
                keyid:28:CF:40:FE:D4:F3:60:82:6E:DA:FF:D4:18:28:5D:B4:F0:9C:3A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6976b8bc-b1c5-46fa-87d7-734c029ac999.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.39.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:63:e8:45:b4:a2:59:69:e8:6a:61:63:fc:78:3f:4c:03:c2:
         37:3f:84:3c:1d:07:9d:14:56:eb:51:58:ba:8e:1a:cc:e1:2b:
         dd:41:14:7c:fb:fd:fb:9b:da:d6:cf:ca:f9:3c:42:a2:b0:b4:
         09:2f:68:e5:68:bb:d8:fe:9b:0c:dc:b6:fc:be:b4:93:04:0f:
         1a:66:63:ac:d4:75:40:ee:05:85:cd:08:cf:73:55:c3:1d:f6:
         15:8f:c2:dc:41:75:c6:a9:98:0c:1b:e8:63:00:dd:60:95:9c:
         84:bd:00:c3:2c:57:b3:d9:22:85:33:dd:23:8b:75:0e:69:eb:
         5f:e8:75:69:a5:2a:de:f0:9b:e0:3c:fb:d3:e3:1d:99:e0:29:
         21:04:42:4c:2d:79:00:8f:d7:3f:ee:ee:1b:69:f1:17:58:1d:
         dd:c6:de:1f:7f:8a:96:00:fd:15:40:89:1e:bb:97:00:1c:8e:
         47:6e:86:d3:69:fd:16:c0:d8:70:de:0a:28:fe:03:e7:91:6a:
         63:72:b9:ac:66:23:e3:f6:2a:4b:d3:37:c8:52:37:b2:6b:66:
         ed:4f:87:4c:9c:87:73:3e:34:52:40:06:bd:53:82:31:1b:c0:
         f4:f4:57:6a:24:14:f1:12:dc:86:a3:fb:3f:90:3c:8d:51:44:
         0e:1e:14:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----