Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/dd2373f7-22a3-35df-80fa-4e4e10bba62e.roa
File:                     dd2373f7-22a3-35df-80fa-4e4e10bba62e.roa (raw, json)
Hash identifier:          es8VEDMoaZOWySwXRAAi+H5np2dXmNxJYj+QysgGyUM=
Subject key identifier:   DC:4F:84:CA:7B:06:99:46:27:93:4E:BE:0D:F5:CA:69:69:09:7B:26
Certificate issuer:       /CN=872ab566-07c0-4d6b-ab98-45aed75350ff
Certificate serial:       010D0C9F4328583D5A8F41B073DC5A3162C3E6C0
Authority key identifier: BD:DE:A2:76:5E:C6:F2:C1:C6:DA:16:E7:B8:20:85:D5:AD:11:67:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/dd2373f7-22a3-35df-80fa-4e4e10bba62e.roa
Signing time:             Fri 25 Mar 2022 04:00:00 +0000
ROA not before:           Fri 25 Mar 2022 04:00:00 +0000
ROA not after:            Fri 29 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        184.169.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:5a:8f:41:b0:73:dc:5a:31:62:c3:e6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=872ab566-07c0-4d6b-ab98-45aed75350ff
        Validity
            Not Before: Mar 25 04:00:00 2022 GMT
            Not After : Apr 29 04:00:00 2022 GMT
        Subject: CN=d874109a-d7d1-4d4c-88e5-c59e79697d65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3b:4a:e3:e2:5d:2e:f8:68:d3:a4:4d:c5:3d:
                    be:81:c3:6a:e2:83:7e:a2:e5:1e:62:9b:e0:fd:d8:
                    9e:9b:50:c3:77:25:d1:02:34:8f:32:c5:ac:54:28:
                    96:5f:2c:fc:ec:07:a2:f1:32:40:ad:77:af:42:ba:
                    8b:72:99:62:6d:06:3b:b8:44:1f:a5:40:77:58:a7:
                    28:c1:c8:dc:ca:0a:c1:19:57:8e:45:fe:b8:8c:1e:
                    ed:cc:06:14:22:16:78:84:6e:45:3f:9c:6c:99:36:
                    81:c8:38:f0:c9:cb:c5:73:4e:04:c7:4f:0e:71:f8:
                    e3:0b:ef:83:24:5f:46:18:d8:34:fa:3d:92:57:67:
                    97:60:53:d8:a5:1f:dc:7c:cb:a8:76:0c:8f:f6:04:
                    54:f2:04:10:b0:f0:9c:fc:e0:8b:92:ac:29:6d:5a:
                    d0:9c:8b:ca:24:5f:2b:ee:39:a6:e7:22:45:cc:cc:
                    b1:e8:f0:f0:da:d9:41:54:22:45:17:84:20:3c:aa:
                    4e:2e:d6:80:10:3e:a5:83:f7:6c:db:05:71:9f:1e:
                    b1:d7:69:40:6f:58:99:2c:58:99:18:8d:56:a9:4c:
                    b6:90:68:09:6a:f9:f7:9b:56:f7:27:d6:6e:57:36:
                    81:6f:f2:c5:4d:ef:54:49:8b:00:9c:73:c8:95:87:
                    62:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:4F:84:CA:7B:06:99:46:27:93:4E:BE:0D:F5:CA:69:69:09:7B:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/dd2373f7-22a3-35df-80fa-4e4e10bba62e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/872ab566-07c0-4d6b-ab98-45aed75350ff.crl

            X509v3 Authority Key Identifier:
                keyid:BD:DE:A2:76:5E:C6:F2:C1:C6:DA:16:E7:B8:20:85:D5:AD:11:67:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:3d:0f:a2:cc:1c:a1:6d:74:02:9f:60:02:8f:9c:99:b4:f5:
         05:2d:d6:c8:46:2f:8d:f1:a4:b1:27:da:e8:65:36:b2:4d:91:
         4e:f9:1f:17:99:1b:4f:75:bf:4a:04:df:af:e6:1e:c4:aa:68:
         32:f5:95:2f:92:6d:e6:a3:5f:68:70:0c:27:c8:19:55:57:63:
         bd:36:17:9d:36:b5:09:6a:20:b8:1e:a9:e9:c9:d1:9a:6c:c8:
         e4:a2:f7:ea:41:57:da:4e:c5:b8:f6:cb:5e:d7:91:b5:de:13:
         e0:56:3d:d7:dd:e0:73:2a:8a:22:a9:bd:85:da:42:d7:79:cb:
         95:01:3a:68:34:a2:ab:11:6d:9f:47:48:e3:d6:65:16:24:f9:
         3c:75:95:ba:05:d5:99:9a:c1:fc:33:a6:51:76:e0:14:a4:88:
         22:1a:f2:65:ab:f8:37:ea:24:af:19:79:e1:bd:f8:c7:4c:f0:
         07:c3:26:83:fa:4f:1f:2e:d5:bb:60:e8:c5:24:fa:20:a6:19:
         0e:f0:6a:60:e7:ef:57:3a:4d:a0:8a:5a:e6:d4:ec:31:d1:6d:
         04:52:71:a8:b5:a1:2c:09:11:18:e1:64:3d:56:b9:a8:a9:cd:
         10:01:f8:cd:17:e8:bb:ec:53:ac:b8:be:05:b5:18:6e:41:f6:
         c0:1e:2b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----