Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/3c37603a-ecdd-3d5c-9f4e-ccafeea7490c.roa
File:                     3c37603a-ecdd-3d5c-9f4e-ccafeea7490c.roa (raw, json)
Hash identifier:          jplH6uQaQLC65/1xpyLrEODU0xWmAcQ88f2TxwBLy8Q=
Subject key identifier:   A7:04:6F:87:14:0C:EB:6F:63:A1:90:F3:82:80:8C:01:FE:51:E6:6D
Certificate issuer:       /CN=872ab566-07c0-4d6b-ab98-45aed75350ff
Certificate serial:       010D0C9F4328583F31660D88A5C1F18DE99ED9C0
Authority key identifier: BD:DE:A2:76:5E:C6:F2:C1:C6:DA:16:E7:B8:20:85:D5:AD:11:67:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/3c37603a-ecdd-3d5c-9f4e-ccafeea7490c.roa
Signing time:             Fri 09 Sep 2022 12:00:00 +0000
ROA not before:           Fri 09 Sep 2022 12:00:00 +0000
ROA not after:            Sat 15 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        184.169.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:31:66:0d:88:a5:c1:f1:8d:e9:9e:d9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=872ab566-07c0-4d6b-ab98-45aed75350ff
        Validity
            Not Before: Sep  9 12:00:00 2022 GMT
            Not After : Oct 15 04:00:00 2022 GMT
        Subject: CN=7ab6400e-a99c-4218-b221-3b1ddd631344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:05:02:7f:75:cf:a5:79:f1:ec:28:35:ec:00:
                    e0:41:c9:36:ea:00:c2:01:c2:4e:0e:c3:cd:5b:8f:
                    86:ce:58:b9:5f:34:bd:7f:4b:18:2d:0e:00:39:79:
                    29:d8:9c:08:54:98:35:b9:c1:4b:4a:f5:13:d6:30:
                    c7:dc:7d:30:71:86:9b:1c:ca:75:e5:9f:be:cd:03:
                    6b:26:93:06:ef:ce:7c:e5:1c:10:ea:cc:c3:85:18:
                    00:d4:42:3b:6c:cf:e4:5d:de:20:26:68:57:ac:70:
                    c0:99:39:2c:29:1a:29:98:31:ae:2d:d7:88:ce:77:
                    7e:d0:25:0d:bc:4e:0a:c7:fb:a2:aa:6f:fe:fa:7b:
                    00:b3:67:8a:44:69:e2:c9:96:fb:10:ab:87:d2:31:
                    a1:9e:4f:20:c6:24:83:99:c1:54:89:7e:7b:60:e1:
                    de:9c:74:43:f6:d7:d3:d9:31:a7:b5:10:50:34:dc:
                    ef:b5:cc:4f:a2:84:b3:4e:b5:6c:f4:c0:f1:b4:f7:
                    b3:84:db:27:57:0a:8b:27:9b:3f:51:db:44:c0:40:
                    80:ef:df:cd:ee:0e:45:1b:62:dc:bf:74:42:24:8b:
                    2b:1e:d0:43:3d:e7:cf:58:3e:58:ad:5f:51:a1:66:
                    c6:62:d3:16:c4:5a:bb:27:e9:da:06:77:77:af:19:
                    df:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:04:6F:87:14:0C:EB:6F:63:A1:90:F3:82:80:8C:01:FE:51:E6:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/3c37603a-ecdd-3d5c-9f4e-ccafeea7490c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/872ab566-07c0-4d6b-ab98-45aed75350ff.crl

            X509v3 Authority Key Identifier:
                keyid:BD:DE:A2:76:5E:C6:F2:C1:C6:DA:16:E7:B8:20:85:D5:AD:11:67:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:95:d3:47:9f:15:40:12:63:4d:90:57:28:18:87:79:c6:2b:
         b9:29:32:e2:84:a5:4b:0f:05:b8:86:9a:71:bb:39:8a:13:4a:
         e8:54:69:6f:4e:c1:be:fd:46:a6:d2:68:c9:7a:6d:31:90:6f:
         e5:5e:64:50:b4:54:67:32:54:6a:f0:99:e2:d4:72:d1:59:c2:
         c3:d6:e4:a8:76:08:12:10:6e:a7:da:cc:be:4f:c4:68:d0:a3:
         b9:c6:f1:33:e5:be:6f:82:12:4f:3c:f3:95:08:13:e4:c3:56:
         97:d6:55:27:28:b5:c9:ae:05:3a:2b:a1:58:77:17:4c:92:5c:
         36:77:a1:1c:7e:a0:ff:48:b7:ff:5a:ed:47:05:1a:28:e1:b5:
         16:b7:f0:a4:10:82:51:cb:63:4e:3a:aa:58:f4:e1:38:98:e3:
         3e:5b:a4:c7:7f:5e:9a:d2:8a:e1:b1:a6:e0:39:03:3a:62:7a:
         0b:a7:0e:31:e3:2e:b1:94:1e:c4:64:f8:1e:5e:0c:a5:f5:fb:
         1a:b6:b8:17:87:fb:8e:77:5c:33:3a:7c:06:08:63:b2:6c:73:
         5d:12:15:a8:aa:2f:eb:5f:6d:b6:54:a4:21:be:86:55:6b:07:
         eb:09:e6:12:35:f0:a3:95:8a:34:53:cd:4f:3a:6b:c0:6d:fd:
         ae:b3:ef:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----