Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/37ad2998-1e35-354c-9670-d71b6835d1dd.roa
File:                     37ad2998-1e35-354c-9670-d71b6835d1dd.roa (raw, json)
Hash identifier:          GwtLqAgX6WDhVGS7ra+/i252ygr87bYrr0Ge/e26vds=
Subject key identifier:   4B:7E:DC:3F:8C:D5:09:E0:9C:8B:49:FB:D4:CB:05:DD:F4:95:74:C7
Certificate issuer:       /CN=872ab566-07c0-4d6b-ab98-45aed75350ff
Certificate serial:       010D0C9F4328583C96FE2D69C5DEC51A0988C740
Authority key identifier: BD:DE:A2:76:5E:C6:F2:C1:C6:DA:16:E7:B8:20:85:D5:AD:11:67:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/37ad2998-1e35-354c-9670-d71b6835d1dd.roa
Signing time:             Fri 14 Jan 2022 05:00:00 +0000
ROA not before:           Fri 14 Jan 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        184.169.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:96:fe:2d:69:c5:de:c5:1a:09:88:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=872ab566-07c0-4d6b-ab98-45aed75350ff
        Validity
            Not Before: Jan 14 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2022 GMT
        Subject: CN=7a59e632-babc-4911-9d12-6aeb2f44577b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7e:37:fd:17:dc:05:c9:6a:76:cc:e7:fd:79:
                    44:50:d3:1c:58:40:88:a5:0f:21:2b:97:ec:33:7a:
                    19:b6:16:0f:e0:ee:2e:50:b9:f5:2f:f2:0e:76:fe:
                    38:20:77:64:a5:f8:9b:20:ab:25:89:c6:bf:27:c8:
                    b7:2b:d9:23:2f:9b:3d:48:19:ed:79:d0:a9:25:92:
                    8e:56:23:81:bc:4e:bc:e3:d5:e8:e1:be:53:95:24:
                    ba:7a:f3:1a:51:e8:c8:6b:17:18:54:e0:be:4f:71:
                    4e:87:23:40:96:a6:76:48:20:f1:a0:04:c9:9a:c2:
                    3c:e1:e2:2a:0c:de:e5:7f:76:61:96:42:1d:a8:37:
                    c2:e3:27:12:08:23:ae:24:77:56:df:b1:19:cb:18:
                    2c:39:15:f0:56:d0:9f:f9:d6:ea:5d:08:9e:35:2b:
                    11:cf:3a:9f:88:35:90:ee:0f:b4:93:d6:c9:29:66:
                    66:f1:5d:7f:24:e0:e1:48:48:87:4f:00:18:63:5a:
                    fb:d9:93:60:e1:93:ce:b7:83:c8:96:75:e1:6c:51:
                    c3:05:ee:ad:47:8a:b6:9b:a0:76:5d:a0:87:79:a5:
                    0f:83:95:ac:2b:ed:ff:29:8a:53:d8:43:a9:b7:04:
                    0c:bd:9d:6e:c8:cc:67:81:02:19:8d:e9:fe:13:9e:
                    54:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:7E:DC:3F:8C:D5:09:E0:9C:8B:49:FB:D4:CB:05:DD:F4:95:74:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/37ad2998-1e35-354c-9670-d71b6835d1dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/872ab566-07c0-4d6b-ab98-45aed75350ff.crl

            X509v3 Authority Key Identifier:
                keyid:BD:DE:A2:76:5E:C6:F2:C1:C6:DA:16:E7:B8:20:85:D5:AD:11:67:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:ff:98:f6:b0:c7:0b:8f:cd:69:1c:85:6a:de:bf:9d:d8:17:
         f0:9c:3f:06:6b:72:c4:76:73:c9:5b:37:11:ac:bc:ed:d8:e3:
         93:aa:92:e7:dc:9c:ae:05:de:40:95:f2:06:a0:68:c1:34:25:
         bd:fd:ce:c1:c7:b3:1b:fd:40:9b:44:c4:60:ad:30:7b:bf:09:
         e1:6a:70:4c:d0:bb:0c:5b:72:5f:0d:53:98:67:fb:5c:0a:08:
         1d:db:a1:b3:39:0e:43:98:f2:85:d5:03:ce:d3:32:21:53:82:
         2c:b4:01:cc:6d:d3:8b:b6:2c:88:0c:95:2c:b6:ee:d5:df:31:
         8c:ee:1c:2c:02:97:95:7e:0d:fe:17:bf:77:42:50:04:2c:6c:
         07:dd:0d:49:95:95:e4:76:54:08:d9:a3:62:56:6c:fe:b4:49:
         cb:2e:b9:80:9b:a3:8e:91:a8:32:67:c8:07:73:f1:3a:de:e9:
         c5:48:ec:fc:bf:a9:4b:0b:fb:8c:b7:fd:d2:b5:87:d3:93:6f:
         f1:93:8d:da:23:21:66:76:ab:97:43:77:cb:50:02:4f:b9:f3:
         70:cf:4b:57:0d:a2:e4:fe:d8:ca:29:7e:13:60:67:32:65:e0:
         41:15:4d:74:7e:22:9c:61:f7:6e:62:35:bb:ea:2a:71:65:6d:
         4b:46:e9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----