Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/9705f8cd-a16d-3578-b775-2ae2aefae5fc.roa
File:                     9705f8cd-a16d-3578-b775-2ae2aefae5fc.roa (raw, json)
Hash identifier:          Tf5cfV9GiwCxaoCkfjGkyECs9n1Ep/CTEQmprO12eVM=
Subject key identifier:   6A:9C:1C:CA:D9:4E:7F:73:58:3A:0B:D7:B7:E1:57:C4:2A:16:F4:14
Certificate issuer:       /CN=872ab566-07c0-4d6b-ab98-45aed75350ff
Certificate serial:       010D0C9F4328583D81AC5D4E72EA980F8B8E4700
Authority key identifier: BD:DE:A2:76:5E:C6:F2:C1:C6:DA:16:E7:B8:20:85:D5:AD:11:67:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/9705f8cd-a16d-3578-b775-2ae2aefae5fc.roa
Signing time:             Fri 08 Apr 2022 04:00:00 +0000
ROA not before:           Fri 08 Apr 2022 04:00:00 +0000
ROA not after:            Fri 13 May 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        184.169.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:81:ac:5d:4e:72:ea:98:0f:8b:8e:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=872ab566-07c0-4d6b-ab98-45aed75350ff
        Validity
            Not Before: Apr  8 04:00:00 2022 GMT
            Not After : May 13 04:00:00 2022 GMT
        Subject: CN=a37ba347-3aab-4b47-b35c-ed064ec06145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:13:d4:c8:f0:b2:e3:f1:65:12:46:90:46:f0:
                    8d:51:4e:d9:d8:b5:9d:57:f9:53:fa:74:30:a8:d4:
                    69:8c:b8:74:8d:20:e4:ac:54:ce:d7:31:55:14:82:
                    db:c4:07:b2:04:39:86:33:7e:8e:e0:a2:73:3d:77:
                    1b:59:c7:28:a6:76:1f:5c:f3:e5:8f:6e:5a:39:02:
                    1e:0e:3f:c6:53:70:d7:57:93:8a:e3:ed:34:18:63:
                    c8:bc:b8:08:02:01:7c:1b:94:32:ce:20:ed:eb:47:
                    89:3a:46:7b:80:0a:d0:3d:d4:be:5c:55:56:e7:4b:
                    d3:5d:8a:0f:ac:e4:08:27:2c:d0:0c:98:d5:67:7a:
                    5b:84:30:f3:24:10:18:5e:7f:3b:f1:d7:21:69:86:
                    e1:b7:f4:cd:08:ab:cb:00:67:57:cd:79:93:8a:7e:
                    80:6d:2f:3e:44:2d:ba:a7:6d:8d:4a:5f:95:23:ef:
                    45:e5:df:0c:c9:91:b8:89:79:cc:b5:66:e0:6f:2f:
                    29:7c:22:87:d1:fb:8c:83:4d:40:3e:20:59:2d:f8:
                    92:87:84:1d:be:38:2d:84:dd:4c:30:13:02:4e:77:
                    dd:d7:01:32:b0:18:a3:01:ee:df:de:59:61:fc:c9:
                    f4:cb:e4:97:f6:55:03:dd:7e:3b:e4:17:45:13:8c:
                    25:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:9C:1C:CA:D9:4E:7F:73:58:3A:0B:D7:B7:E1:57:C4:2A:16:F4:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/9705f8cd-a16d-3578-b775-2ae2aefae5fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/872ab566-07c0-4d6b-ab98-45aed75350ff.crl

            X509v3 Authority Key Identifier:
                keyid:BD:DE:A2:76:5E:C6:F2:C1:C6:DA:16:E7:B8:20:85:D5:AD:11:67:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:ff:d4:6f:fc:5f:42:ef:8f:b7:9d:00:53:da:71:54:0c:01:
         f8:79:57:2a:b7:0d:55:39:01:06:04:96:04:18:0f:c1:8f:12:
         db:db:1e:81:af:f1:89:73:b7:bd:88:c2:28:e0:01:ac:da:d4:
         44:9f:cb:29:d3:97:af:28:90:d5:37:51:24:10:ad:2b:5e:d1:
         08:aa:64:57:6c:84:e1:25:a6:19:8a:81:9c:4b:96:44:4a:45:
         95:be:ca:1a:57:b1:7a:69:32:a8:3a:11:ac:a3:ca:db:1e:53:
         ff:fb:cc:b6:66:20:48:a2:fb:96:3c:f4:5a:a8:71:93:26:0a:
         2c:55:e3:f1:b1:c5:ba:29:66:e0:55:da:ea:90:6f:56:23:59:
         dd:b6:14:2d:b6:28:c4:a3:c1:b0:3f:8b:26:e3:7b:b6:b1:20:
         c4:b7:d6:bc:12:ae:ca:ec:72:c9:8c:e6:86:dd:6b:f3:dc:8c:
         35:3c:c5:4e:36:26:02:fc:0a:cb:e4:54:d8:27:78:98:1f:0f:
         8b:69:15:a5:c3:f7:f4:ad:92:46:ba:c4:db:77:59:cf:d8:24:
         1b:41:2d:3e:f9:47:31:2a:ac:31:ff:d9:75:bc:7a:a7:7c:57:
         0b:90:39:e6:9a:2b:4b:3e:cc:df:06:81:f2:ce:66:27:0b:08:
         5f:c4:6d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----