Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/a45e26a7-d737-3a0d-a49a-5621e4380ad1.roa
File:                     a45e26a7-d737-3a0d-a49a-5621e4380ad1.roa (raw, json)
Hash identifier:          KAzHsFbDFAgjFP2CJMwqBxGEZJH93Wj8y4RP9rcQa7U=
Subject key identifier:   C6:A7:6B:B1:DC:E1:BD:16:4A:DD:F5:E4:38:30:75:A3:15:5F:7F:C8
Certificate issuer:       /CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
Certificate serial:       010D0C9F4328583E92D2B4C541180286BF990200
Authority key identifier: 6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/a45e26a7-d737-3a0d-a49a-5621e4380ad1.roa
Signing time:             Thu 14 Jul 2022 12:00:00 +0000
ROA not before:           Thu 14 Jul 2022 12:00:00 +0000
ROA not after:            Fri 19 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        50.112.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:92:d2:b4:c5:41:18:02:86:bf:99:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
        Validity
            Not Before: Jul 14 12:00:00 2022 GMT
            Not After : Aug 19 04:00:00 2022 GMT
        Subject: CN=bcb045d1-7ad1-479a-bae9-b136af849386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e6:f4:01:41:66:94:ad:92:ba:90:ab:f6:e1:
                    0c:c1:c5:61:26:2d:49:d2:de:d2:6d:57:91:c5:01:
                    01:c5:9d:84:3c:b5:39:20:c9:c1:41:97:a3:09:b9:
                    cd:fd:c2:bd:28:4b:64:c1:62:f1:27:64:c2:1d:e5:
                    d3:b4:ce:47:0f:4c:75:84:0c:8b:a7:86:28:90:3b:
                    a1:77:59:0f:ed:da:69:18:78:2b:12:cc:72:87:0a:
                    54:bd:33:76:23:79:eb:57:c3:ef:27:66:8c:ca:7d:
                    0b:55:1e:c0:09:aa:67:ee:86:a0:a0:a1:95:a5:15:
                    48:2d:5f:46:fb:c7:fc:92:46:57:a8:77:78:1f:d2:
                    5c:f5:6b:6e:a9:b4:f8:68:57:e5:ac:c5:63:93:25:
                    b7:29:2d:4d:d1:53:c4:b3:04:55:df:91:f2:05:4c:
                    ce:39:d5:15:32:44:5c:21:f8:1d:89:c7:70:bb:49:
                    1e:15:98:47:9a:06:c5:45:9b:75:6a:dd:7b:16:bb:
                    a0:ec:46:94:ab:a1:20:8e:e0:5f:40:5a:4a:9e:92:
                    90:b3:9d:d6:91:a9:65:a7:d9:0a:fa:ef:42:78:55:
                    0c:20:f9:9b:37:65:b5:0a:7c:67:2a:d9:3c:c1:32:
                    8f:db:45:5e:14:f7:b4:88:34:31:98:f1:80:d7:67:
                    04:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A7:6B:B1:DC:E1:BD:16:4A:DD:F5:E4:38:30:75:A3:15:5F:7F:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/a45e26a7-d737-3a0d-a49a-5621e4380ad1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.crl

            X509v3 Authority Key Identifier:
                keyid:6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:48:b4:c5:21:6d:16:f0:c8:71:70:3b:6d:fd:a8:f3:bf:a7:
         cb:df:21:40:2e:e7:ef:71:df:ca:e1:3a:eb:c0:fc:6d:e7:e0:
         2c:0d:8c:f2:66:a2:52:df:2c:0f:41:52:07:16:6f:cd:47:cc:
         52:ae:6f:b5:7e:a5:fb:bb:08:3f:58:f6:3b:b8:29:ab:cb:99:
         80:80:97:78:41:6c:e5:9e:3f:ca:32:64:27:b4:84:fd:4b:bb:
         4f:f2:d0:01:19:8b:3e:9f:2a:1c:dc:1c:82:e8:3d:29:c6:ea:
         42:72:56:fb:4d:ab:43:28:ed:4b:ed:0e:5c:58:c8:19:6a:95:
         7c:e0:8e:88:6c:84:74:d3:89:fe:73:ab:f8:97:ec:c1:17:4b:
         57:0c:91:2e:ce:8a:5c:95:9b:39:9f:19:99:bb:4c:4f:49:84:
         51:3d:c0:3d:29:3f:80:3d:41:30:2b:b0:7f:c3:41:03:29:52:
         28:f3:a6:44:0b:37:89:6a:49:e3:37:b1:72:1e:fa:4c:eb:8e:
         fa:20:88:67:df:71:51:7e:11:19:d0:55:f0:58:87:78:97:d7:
         7b:c5:5a:1b:30:9b:62:c0:af:1e:32:d5:9d:30:24:40:ae:80:
         2e:01:f8:04:7b:68:19:0a:5a:cc:5b:6c:45:ae:80:ea:ea:e6:
         02:8a:3d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----