Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/6e840d22-876d-39b7-8e1c-5d8c398d51b0.roa
File:                     6e840d22-876d-39b7-8e1c-5d8c398d51b0.roa (raw, json)
Hash identifier:          HZv2ggQgiFh1/359TuqZLzwgLtg97N9rzuAE84XmpLs=
Subject key identifier:   44:73:FC:F9:D3:78:80:E1:63:83:D5:9F:84:F9:D7:0A:E4:E4:2F:15
Certificate issuer:       /CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
Certificate serial:       010D0C9F4328583D32CD7067D8B085B91EC8FAC0
Authority key identifier: 6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/6e840d22-876d-39b7-8e1c-5d8c398d51b0.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        50.112.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:32:cd:70:67:d8:b0:85:b9:1e:c8:fa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=e04ef018-c734-4027-9f4c-947d54525a6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:20:05:a4:ab:ed:9e:a5:dd:25:88:50:e3:e2:
                    62:7f:fb:a3:38:37:0d:82:c2:e2:2f:d9:de:a3:6f:
                    95:42:c0:5e:b0:78:27:76:31:92:f0:c6:df:f9:8b:
                    66:02:0b:18:ab:2a:46:aa:5e:a0:f0:43:9f:16:fa:
                    5e:55:c1:34:02:1e:cb:32:64:22:82:e7:ac:4c:74:
                    3f:e0:73:07:09:74:da:e4:84:53:eb:55:f3:71:ad:
                    21:07:e4:d5:75:2e:c1:58:fc:65:87:3e:dc:4d:c5:
                    be:c3:4e:4d:f8:26:5a:b7:b7:58:4f:7f:3c:bb:9a:
                    bf:a3:87:bb:a9:63:44:e0:80:7e:d3:c5:83:13:6e:
                    48:b0:5f:44:f2:0d:b2:f1:e2:a2:56:00:69:a8:ad:
                    af:c1:d3:a7:e3:0a:4f:8b:00:8b:8b:41:dc:18:06:
                    ed:91:a2:a9:92:b2:bf:6c:15:c4:d3:55:59:ae:e1:
                    80:57:e2:2c:f8:48:da:af:3f:a6:ce:1c:98:81:fe:
                    93:fc:52:1b:6a:ca:79:c0:0d:1c:89:b1:f9:f0:69:
                    39:ca:17:86:dc:d6:cb:88:d0:6c:8f:65:74:7f:29:
                    49:a9:8e:53:b6:ab:9a:0b:b2:a4:ec:b4:d6:d3:d8:
                    0a:c4:27:28:a5:91:f7:80:bb:6f:a3:55:ce:1b:34:
                    b4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:73:FC:F9:D3:78:80:E1:63:83:D5:9F:84:F9:D7:0A:E4:E4:2F:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/6e840d22-876d-39b7-8e1c-5d8c398d51b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.crl

            X509v3 Authority Key Identifier:
                keyid:6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:4e:c8:ab:59:b2:d8:27:7b:16:57:76:6d:0c:f8:94:72:47:
         c8:6c:d1:86:db:a6:ec:28:b8:d3:62:3c:71:8c:d0:27:5d:56:
         ec:8f:dd:7a:cb:8f:1f:b4:7b:b3:74:a0:7f:af:7b:c7:54:20:
         d5:b5:37:04:55:5d:b2:c3:44:2f:cb:97:22:49:f8:34:85:b1:
         5d:c4:f5:8a:01:23:50:e5:0a:d7:8d:a7:51:49:68:20:ff:14:
         8f:fb:0a:bc:9c:bd:e9:13:55:af:0f:4e:21:65:8a:a8:94:ef:
         99:31:04:28:2b:ad:3f:f5:0a:64:65:f1:94:4e:51:95:01:a9:
         2d:58:c8:7e:d5:f4:88:6b:47:52:e3:76:02:40:54:9d:6c:e6:
         33:3e:27:15:81:fc:ac:d9:6d:30:bf:bf:e2:33:44:f1:c5:a7:
         33:03:ad:3f:d5:57:5d:27:97:79:f0:a3:c8:dd:1b:21:09:8a:
         04:13:ba:5b:d1:a8:6d:a5:24:b9:a7:2a:2c:cf:60:da:82:1f:
         b9:8a:e2:79:f2:63:c5:36:a9:88:aa:31:f1:e0:d6:e5:61:29:
         2e:43:16:c1:ec:d8:82:12:d9:7f:e9:03:ea:f6:3a:f3:93:f4:
         b0:40:e6:c5:3b:61:b4:e5:ee:cc:c8:54:7d:63:09:4b:9e:16:
         75:2d:3b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----