Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/08e4afc7-5843-339b-9722-dcdc0f3382dc.roa
File:                     08e4afc7-5843-339b-9722-dcdc0f3382dc.roa (raw, json)
Hash identifier:          5Z2AaCzP97+/3QKmzpoWm8JGOCiW7mUKTOR8adApzYU=
Subject key identifier:   75:09:B9:42:10:02:69:F9:3A:FE:00:61:47:92:6C:56:3E:4B:57:D9
Certificate issuer:       /CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
Certificate serial:       010D0C9F4328583CBD768C14E0747DEC10E21000
Authority key identifier: 6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/08e4afc7-5843-339b-9722-dcdc0f3382dc.roa
Signing time:             Fri 28 Jan 2022 05:00:00 +0000
ROA not before:           Fri 28 Jan 2022 05:00:00 +0000
ROA not after:            Fri 04 Mar 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        50.112.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:bd:76:8c:14:e0:74:7d:ec:10:e2:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
        Validity
            Not Before: Jan 28 05:00:00 2022 GMT
            Not After : Mar  4 05:00:00 2022 GMT
        Subject: CN=84d89d5d-bdfa-42f0-ba61-bf9c2e230bc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:46:f5:c7:c9:73:5b:45:87:a6:cd:d5:b4:01:
                    88:10:13:2c:64:ca:e0:2a:eb:87:99:d3:bc:5d:9c:
                    f9:cc:98:6a:3d:5a:36:f5:21:22:65:3a:b0:0c:a8:
                    db:55:10:35:f0:36:b0:c4:be:5c:07:97:3f:07:49:
                    af:42:f9:42:1f:c0:f9:95:d4:3e:9d:65:5c:c9:bf:
                    25:6c:40:93:d6:cc:4f:c3:40:7a:79:d4:c7:d5:92:
                    6d:a3:4d:bf:2f:d6:30:74:93:75:60:73:da:62:30:
                    04:62:7e:4a:d8:df:53:8f:e6:c3:9c:a3:31:ec:3d:
                    e1:b8:f4:e1:0f:aa:61:e3:40:fc:d0:f8:18:a9:da:
                    e6:ed:40:4b:df:7f:38:42:ec:c1:25:9d:f0:76:13:
                    b0:c0:04:79:0b:a8:f2:0c:9e:35:88:cc:61:37:e7:
                    51:19:75:ac:91:8f:58:1b:71:c0:f6:b7:14:4b:c8:
                    37:ab:c1:f8:9d:f9:57:03:53:e5:33:5f:dd:8c:b5:
                    0d:df:58:28:23:eb:eb:fb:a1:1c:9a:43:56:5e:2a:
                    03:65:77:cf:cb:14:b4:57:43:5a:00:86:6d:dd:5c:
                    0c:9a:40:44:37:f1:13:d1:bb:f1:6e:02:7a:77:5b:
                    f4:2d:8c:a2:ed:b4:bc:ce:70:cf:9b:2f:03:98:c3:
                    ab:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:09:B9:42:10:02:69:F9:3A:FE:00:61:47:92:6C:56:3E:4B:57:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/08e4afc7-5843-339b-9722-dcdc0f3382dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.crl

            X509v3 Authority Key Identifier:
                keyid:6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:94:91:d6:79:c5:4e:db:e3:16:d9:cb:3b:bb:ef:be:aa:01:
         59:ef:e6:cf:1e:7d:e0:86:4d:96:21:81:cd:46:27:94:65:c7:
         6c:63:7f:c3:4c:6d:36:ec:18:ee:e8:a7:c6:96:17:88:fd:67:
         90:26:05:2e:80:1a:30:c5:56:56:4a:8f:2d:1c:0f:cc:3b:31:
         3d:81:e3:2e:93:fb:ff:f1:ab:e9:c5:a7:6a:2c:61:67:30:77:
         c9:5b:98:e3:44:9c:37:30:16:c4:3a:a6:09:7d:ef:7f:a0:e5:
         b3:a6:cc:b5:8b:3c:7a:f7:f7:5c:d5:9e:10:8b:0a:f5:e2:fd:
         56:ac:34:0b:f3:0a:f1:22:27:bc:77:fa:0a:b7:6b:03:63:b9:
         0d:26:09:2b:12:ae:de:ea:b8:d2:eb:77:a5:96:59:73:f3:4a:
         75:9a:ae:bc:a9:b3:5a:3e:f7:ce:fe:b2:9b:16:4f:c0:2a:7e:
         f7:df:a7:24:73:c3:38:25:e0:cb:98:74:00:e8:a5:80:98:d1:
         10:4e:14:11:8d:c9:cd:b5:a2:fb:16:e6:bd:9d:f8:80:47:73:
         40:47:80:7c:36:39:6f:5f:07:da:81:69:a2:76:8b:44:0f:b5:
         94:a0:28:34:f0:7e:51:e0:69:db:69:f9:d3:9d:ef:f5:c3:7f:
         82:bf:f8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----