Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/92b85a9d-af1d-3037-8fe2-06af86afb362.roa
File:                     92b85a9d-af1d-3037-8fe2-06af86afb362.roa (raw, json)
Hash identifier:          ufUT5XVpW78GOjaIFIbhv8WuCo6D4LnigRs4/MAtfL8=
Subject key identifier:   7B:6E:1E:E0:2A:5A:4D:35:5D:F4:FE:8F:FE:19:A7:9A:3B:3D:86:C5
Certificate issuer:       /CN=872ab566-07c0-4d6b-ab98-45aed75350ff
Certificate serial:       010D0C9F4328583EE32C0154B208C06A3964538E
Authority key identifier: BD:DE:A2:76:5E:C6:F2:C1:C6:DA:16:E7:B8:20:85:D5:AD:11:67:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/92b85a9d-af1d-3037-8fe2-06af86afb362.roa
Signing time:             Fri 12 Aug 2022 12:00:00 +0000
ROA not before:           Fri 12 Aug 2022 12:00:00 +0000
ROA not after:            Sat 17 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        184.169.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e3:2c:01:54:b2:08:c0:6a:39:64:53:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=872ab566-07c0-4d6b-ab98-45aed75350ff
        Validity
            Not Before: Aug 12 12:00:00 2022 GMT
            Not After : Sep 17 04:00:00 2022 GMT
        Subject: CN=2a0484ef-2a03-447b-96db-38316d651dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:39:43:f5:5a:5e:19:d3:41:1e:f2:42:95:16:
                    07:0f:85:b0:01:10:bf:0f:74:4f:00:23:8c:44:9d:
                    e2:66:8a:bc:48:8b:d5:6b:6f:dc:e8:3f:79:34:ad:
                    64:e2:81:fa:78:3e:db:17:31:0e:46:3b:99:e2:06:
                    6f:15:50:4f:35:4c:df:5d:da:f7:56:58:05:5b:8a:
                    9c:e6:21:a4:f9:ff:8c:d1:d8:e4:29:d8:07:f0:08:
                    a8:37:ee:4e:f4:66:54:49:c6:6f:cc:2a:30:d7:c7:
                    b3:16:09:9f:c5:3d:d6:4b:49:72:fb:f3:de:92:af:
                    f9:e7:41:b5:5b:1e:f1:f9:3a:99:ef:46:b7:8f:1d:
                    f0:5e:42:52:c1:90:42:d8:68:52:7f:fa:9f:56:cc:
                    a9:e4:17:17:59:ef:c9:99:69:17:93:1d:6a:f8:07:
                    fb:ce:22:dd:fb:6d:e0:80:64:fb:ee:8f:1d:86:59:
                    1a:10:a4:9c:fc:0f:6f:4b:d8:8d:b0:28:2a:a4:79:
                    7d:e2:04:dd:f8:17:dd:01:23:e8:c9:43:94:00:68:
                    9b:2b:e7:d3:76:fb:cd:f2:5b:af:27:a0:3b:6a:65:
                    fd:ca:84:0a:8f:f0:bf:97:a8:13:48:37:8b:f5:cc:
                    a6:5a:61:73:13:2a:2d:00:e5:27:45:66:8c:e1:4d:
                    b4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6E:1E:E0:2A:5A:4D:35:5D:F4:FE:8F:FE:19:A7:9A:3B:3D:86:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/92b85a9d-af1d-3037-8fe2-06af86afb362.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/872ab566-07c0-4d6b-ab98-45aed75350ff.crl

            X509v3 Authority Key Identifier:
                keyid:BD:DE:A2:76:5E:C6:F2:C1:C6:DA:16:E7:B8:20:85:D5:AD:11:67:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:5b:19:3c:ce:d5:8c:3b:d6:a4:3e:9a:89:6a:10:f3:23:f0:
         55:69:d5:2e:91:9a:8a:3e:84:7d:1d:b1:2f:a3:44:ce:32:1f:
         b5:a2:bf:b7:be:cb:d2:00:3b:d6:97:c3:e8:b2:46:76:62:20:
         61:7a:f4:bc:96:ed:24:6a:c5:5f:19:a2:c9:af:45:4c:76:e9:
         e2:31:36:ba:57:99:aa:bc:28:74:40:8e:38:de:dd:1c:bd:c1:
         62:ea:63:e3:2d:60:0b:c1:c8:fd:69:75:da:e1:6d:02:46:35:
         d9:33:08:3d:a1:cb:7c:a9:79:37:f9:bb:66:76:a4:f6:5e:cd:
         b2:5e:c9:1b:7c:60:b8:73:01:05:6a:64:e1:71:89:2e:42:15:
         ca:65:17:cb:21:70:e7:9a:2b:50:7e:33:53:da:8d:0d:9d:77:
         8b:9a:8e:a8:02:90:0e:fe:32:18:97:ce:0b:d9:6b:c4:db:49:
         de:7d:8c:e4:bc:d1:22:7b:92:72:2c:3d:dc:bf:72:71:33:d8:
         d9:44:f3:16:36:8c:b1:8c:1a:51:5f:08:4f:39:42:fc:40:63:
         1a:05:6a:83:84:30:86:4e:62:6f:8a:f8:21:26:1b:75:7a:35:
         7b:b3:39:7c:bf:b1:01:76:f0:66:44:96:7c:2c:04:34:e7:ae:
         20:55:17:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----