Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/ee5b021f-bcd3-3566-85c7-bd87152cc3ec.roa
File:                     ee5b021f-bcd3-3566-85c7-bd87152cc3ec.roa (raw, json)
Hash identifier:          +glL0MJEzGPXjfCq3s9UuB37BDxs8caNIewV9+hlBcg=
Subject key identifier:   1C:8E:F6:A9:AB:CF:8B:5B:AC:99:C9:18:90:35:95:25:83:2C:29:49
Certificate issuer:       /CN=872ab566-07c0-4d6b-ab98-45aed75350ff
Certificate serial:       010D0C9F4328583CE53821CB9C0B1D63D9C71F00
Authority key identifier: BD:DE:A2:76:5E:C6:F2:C1:C6:DA:16:E7:B8:20:85:D5:AD:11:67:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/ee5b021f-bcd3-3566-85c7-bd87152cc3ec.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        184.169.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e5:38:21:cb:9c:0b:1d:63:d9:c7:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=872ab566-07c0-4d6b-ab98-45aed75350ff
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=43c77a82-70e6-4732-be4d-675d1f4be07d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:40:21:af:84:02:a0:4b:63:85:93:42:0c:9d:
                    3d:42:ed:86:e4:09:c3:11:cd:b2:ed:05:b4:36:e3:
                    16:54:eb:a7:fb:a5:97:48:34:b3:80:84:42:86:d9:
                    7b:d1:e7:0a:4c:2c:da:10:e6:fd:d0:e0:62:fc:6e:
                    94:ee:31:d5:36:90:d6:de:f5:85:ec:ad:4a:01:f6:
                    08:eb:92:4e:25:6d:28:cc:22:82:79:28:2e:02:2b:
                    5b:9b:34:83:4d:d7:f9:5e:ae:e4:ad:9c:a8:66:4b:
                    88:0b:c6:eb:81:43:78:9f:fc:fe:07:78:e1:81:b5:
                    f5:66:b4:1c:ba:3c:a1:00:53:19:e9:87:67:67:3d:
                    f0:1e:da:9b:52:7c:f5:0c:84:2a:eb:53:91:77:f3:
                    cc:a7:71:0d:16:84:2a:9d:b4:6f:4f:a0:2d:a3:9e:
                    af:87:a6:d9:8e:93:14:9b:89:e0:cc:f8:f6:b3:81:
                    1f:87:35:60:e0:5d:38:93:6b:e9:2f:86:67:34:3d:
                    3c:01:4f:4c:47:6b:41:a6:a0:b2:0b:4b:10:57:45:
                    a0:3c:2b:52:b0:c7:ca:c4:f7:fd:74:28:6e:76:bf:
                    28:db:12:de:c5:cc:72:f9:87:60:93:c2:a6:39:24:
                    ff:ab:d8:de:be:7d:ce:ff:3d:db:6a:4a:ee:ab:d4:
                    8d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:8E:F6:A9:AB:CF:8B:5B:AC:99:C9:18:90:35:95:25:83:2C:29:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/ee5b021f-bcd3-3566-85c7-bd87152cc3ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/872ab566-07c0-4d6b-ab98-45aed75350ff.crl

            X509v3 Authority Key Identifier:
                keyid:BD:DE:A2:76:5E:C6:F2:C1:C6:DA:16:E7:B8:20:85:D5:AD:11:67:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:64:fa:00:58:40:45:12:1d:3a:e6:6e:63:40:28:0c:3d:55:
         fc:dc:69:d7:53:ad:a1:21:2b:da:a1:43:1b:f0:28:56:c7:92:
         ba:a5:72:ba:9f:9c:50:50:2c:42:4a:0a:de:24:6d:f3:3b:8d:
         fc:bf:e1:e9:79:5d:b0:b0:0d:1b:8e:fc:25:17:ae:4f:5a:3c:
         c4:93:d4:d0:07:89:db:24:c0:33:04:f7:82:f2:e0:31:e8:be:
         93:33:c8:f7:c0:28:2d:45:77:bb:e7:0f:11:e3:36:aa:f9:a3:
         88:4f:fe:a9:61:27:7f:90:e4:d1:b7:f5:e2:c9:d1:4a:7b:86:
         57:7a:20:88:32:12:73:56:c4:6f:03:c6:d6:55:32:b6:a2:5a:
         e4:9c:90:0a:dc:cd:0c:80:e3:55:d1:17:31:f1:5d:e2:e7:30:
         4d:07:bc:ef:71:4e:f9:c4:a1:c4:df:16:d9:a2:5c:0e:17:a5:
         84:2a:9b:ff:f3:c1:ef:5b:2b:65:3b:b9:27:48:14:e9:15:6a:
         d4:a3:91:06:82:b1:29:af:57:5e:43:d2:35:c0:47:30:02:1e:
         85:bf:7d:0e:ae:f4:21:c8:63:e9:ea:95:a5:b0:63:c8:b8:ce:
         2a:c0:24:de:69:48:fa:ef:17:da:2c:d1:3f:bd:78:42:1e:15:
         4c:4e:e7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----