Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/a5d85af7-0cf1-3f87-bd30-d33cd679efb7.roa
File:                     a5d85af7-0cf1-3f87-bd30-d33cd679efb7.roa (raw, json)
Hash identifier:          w275caZdAoR54DC4GNJnyGOQn5bqgHDl62zB99kN9Eo=
Subject key identifier:   33:F2:52:00:3A:47:80:90:FD:E5:51:61:CC:88:07:D0:49:1B:79:28
Certificate issuer:       /CN=872ab566-07c0-4d6b-ab98-45aed75350ff
Certificate serial:       010D0C9F4328583DF87DD6C4884E7C9868E95D40
Authority key identifier: BD:DE:A2:76:5E:C6:F2:C1:C6:DA:16:E7:B8:20:85:D5:AD:11:67:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/a5d85af7-0cf1-3f87-bd30-d33cd679efb7.roa
Signing time:             Fri 20 May 2022 12:00:00 +0000
ROA not before:           Fri 20 May 2022 12:00:00 +0000
ROA not after:            Sat 25 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        184.169.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f8:7d:d6:c4:88:4e:7c:98:68:e9:5d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=872ab566-07c0-4d6b-ab98-45aed75350ff
        Validity
            Not Before: May 20 12:00:00 2022 GMT
            Not After : Jun 25 04:00:00 2022 GMT
        Subject: CN=34837efa-d965-4fc9-81b2-38fc8ac36b63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:dd:1d:5c:19:ba:1c:3c:f1:39:8e:9f:21:59:
                    69:cf:ac:8e:41:8a:10:3f:41:e9:e6:a3:75:b2:0d:
                    d1:a0:5a:f0:dc:e1:17:8f:a0:a1:84:96:bf:cd:68:
                    2b:a6:c6:12:fb:b0:9f:af:18:fd:ab:e8:87:b2:67:
                    a7:78:8b:ac:0c:d7:21:a0:f6:93:5a:f2:8c:62:aa:
                    37:85:ec:48:93:cb:ef:50:68:92:c7:57:1d:71:c9:
                    1f:50:e5:e2:31:e0:bb:04:b1:54:7a:09:fe:9c:6d:
                    22:88:cf:e1:0c:a9:2f:69:46:51:23:38:9d:ea:87:
                    c5:ce:d1:86:e7:eb:6f:a7:35:ef:da:73:81:da:77:
                    b8:d3:e6:32:30:69:0e:c4:bb:de:41:f8:af:f0:4f:
                    05:33:a9:a6:c7:9c:fe:49:2f:42:ab:b7:35:52:57:
                    94:c8:b2:5b:4c:82:ed:bb:96:43:85:ec:81:dd:98:
                    c0:fd:41:fa:d9:4c:d1:d7:a8:e9:22:89:ab:f2:c3:
                    bd:cb:ec:d1:fd:e0:3b:57:2f:8b:a2:9c:43:8c:83:
                    1f:99:68:db:ec:4d:68:5b:a3:fa:0d:d2:13:62:83:
                    12:7c:8e:f1:d1:63:1f:e9:35:44:88:af:ed:f8:68:
                    15:c8:f1:8d:a4:e5:f2:68:a9:a6:7a:d3:16:99:90:
                    ea:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F2:52:00:3A:47:80:90:FD:E5:51:61:CC:88:07:D0:49:1B:79:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/a5d85af7-0cf1-3f87-bd30-d33cd679efb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/872ab566-07c0-4d6b-ab98-45aed75350ff.crl

            X509v3 Authority Key Identifier:
                keyid:BD:DE:A2:76:5E:C6:F2:C1:C6:DA:16:E7:B8:20:85:D5:AD:11:67:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:6e:ac:4c:72:80:5d:50:ea:67:cc:2f:72:7a:1f:4e:9d:0e:
         ee:e4:58:40:cd:1a:ff:fd:b3:8d:9b:3d:54:d1:ed:0b:cf:6f:
         fb:a8:9b:1a:e7:15:3e:41:14:a4:49:27:ef:f7:f9:23:6e:8b:
         bc:42:e1:0f:de:6d:e5:2b:e5:3b:96:d8:19:d9:c6:3c:95:20:
         4d:41:c6:f7:2b:bd:6e:14:f7:0f:b4:b2:96:2a:45:37:cf:e2:
         00:95:9f:35:18:ea:e1:5e:01:c8:42:e6:5e:eb:05:9a:75:a5:
         ea:63:6e:b7:16:01:8a:c7:56:12:ab:79:c1:25:98:81:ff:8f:
         ef:c7:1a:d8:88:13:43:52:f4:2f:2b:38:df:3e:c8:56:e6:f5:
         22:fd:6a:82:9c:66:75:4a:39:3a:58:26:a8:be:7e:a7:b3:d3:
         a5:bd:1c:5d:c8:bb:4d:d1:39:2b:9e:b3:54:eb:fd:fe:78:f2:
         c7:18:8a:42:27:73:fd:9b:16:30:c7:ed:31:4d:e2:f3:cb:91:
         9c:d5:8c:19:43:97:f5:ed:d3:f6:ba:e7:75:a6:3b:e1:e9:54:
         e3:1c:0e:7a:55:4a:3e:2e:72:ad:2f:1e:85:e8:d0:19:fb:3a:
         d4:6d:8e:ac:10:17:0a:68:af:f4:17:09:c4:e2:ea:82:cd:29:
         ef:1c:46:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----