Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/ab37d255-bbc4-38e4-a802-2503ec3363b3.roa
File:                     ab37d255-bbc4-38e4-a802-2503ec3363b3.roa (raw, json)
Hash identifier:          KAFOY2MQDjYsZCmH2Z4KI6xiEnCJS/Zvu+aLm/zcn8Y=
Subject key identifier:   AA:F0:D5:6F:06:8F:F2:1A:C2:F9:99:35:C0:04:C2:F2:DC:63:B9:DD
Certificate issuer:       /CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
Certificate serial:       010D0C9F4328583E1D7B98BED0B4D750DB77CBE8
Authority key identifier: 6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/ab37d255-bbc4-38e4-a802-2503ec3363b3.roa
Signing time:             Thu 02 Jun 2022 12:00:00 +0000
ROA not before:           Thu 02 Jun 2022 12:00:00 +0000
ROA not after:            Fri 08 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        50.112.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1d:7b:98:be:d0:b4:d7:50:db:77:cb:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
        Validity
            Not Before: Jun  2 12:00:00 2022 GMT
            Not After : Jul  8 04:00:00 2022 GMT
        Subject: CN=d23a5c1b-36cf-4346-b9d3-b1f998a44c2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d1:a2:21:75:66:b4:56:2e:b1:b5:9f:75:4c:
                    20:35:16:f2:20:d9:d1:e4:d9:3c:89:10:cb:38:b2:
                    47:73:19:72:06:1b:59:3a:d7:a3:ad:4b:db:76:4d:
                    61:ac:41:bf:45:2a:83:a4:b3:e8:bb:fa:e5:c5:a0:
                    34:4b:be:03:c0:ee:3b:14:99:5f:04:10:d0:7c:0c:
                    e4:3c:10:93:3f:9b:4c:bd:a0:e2:eb:43:2f:18:e9:
                    18:a6:c3:34:97:28:a7:66:59:28:9b:3b:27:7b:35:
                    e6:39:81:e5:d9:80:63:04:65:f0:53:be:b5:ec:e9:
                    e9:91:24:70:a5:23:6a:73:ad:9e:db:7e:39:22:fb:
                    37:4f:fe:a3:29:35:24:10:29:ca:1b:1b:38:0b:27:
                    5c:8d:bc:35:0d:67:43:37:ea:5c:42:da:04:df:53:
                    7e:8c:30:72:b7:a7:12:78:17:7b:2f:67:d7:2b:70:
                    03:87:6a:c9:59:7c:69:e9:86:0d:b1:a6:15:09:ab:
                    e2:ac:23:88:96:ae:1b:06:ec:71:d8:88:c4:bc:79:
                    67:d3:1e:8c:52:e4:9d:94:a1:54:b9:fe:2d:91:f6:
                    3a:57:e0:20:c6:22:7e:bb:26:92:c0:8d:af:51:e8:
                    5a:fb:93:20:27:87:e8:8d:eb:4c:8e:a2:c0:8b:aa:
                    cd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F0:D5:6F:06:8F:F2:1A:C2:F9:99:35:C0:04:C2:F2:DC:63:B9:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/ab37d255-bbc4-38e4-a802-2503ec3363b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.crl

            X509v3 Authority Key Identifier:
                keyid:6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:9b:75:48:c6:f6:08:83:a3:03:17:68:1f:5e:9a:33:fd:e3:
         7c:6a:29:5a:86:25:6c:b3:8f:3c:8d:d3:8c:57:90:4f:d3:bc:
         c5:b3:1b:2e:cd:50:88:e7:9d:c1:5d:a6:8b:fe:e7:24:19:34:
         14:5f:17:ea:7d:cb:a8:fa:97:72:00:0d:d0:22:03:d1:c9:a4:
         2c:1b:43:16:35:a2:b2:69:01:fb:e9:e7:a8:62:d3:0c:56:94:
         4e:48:c4:47:2f:65:cc:73:0a:c0:3e:c9:cf:42:6e:56:8a:c5:
         b6:91:21:d2:3d:13:4c:fc:93:a4:ac:cc:55:04:69:d1:38:09:
         7b:95:e4:a7:12:8b:a7:0d:48:c4:2c:4d:b5:8e:81:80:5c:0a:
         d7:a6:40:5a:bc:c3:d8:f7:f4:8a:3b:36:0a:59:a8:e8:5b:08:
         5d:c0:90:30:45:5d:06:c0:9b:22:e2:05:22:a0:f6:39:f7:0b:
         41:c3:00:95:44:13:74:ef:5c:1a:ea:13:a5:f5:57:c1:dc:f5:
         41:61:42:2d:02:34:c3:09:cf:ed:4e:b1:11:b1:06:e9:97:21:
         5c:60:a6:e2:15:b2:f5:46:d8:df:a5:d3:0f:42:c5:d7:23:f8:
         5b:9f:64:ae:1a:e4:1b:86:4a:58:1e:8a:51:99:82:0c:c9:5d:
         e5:ed:49:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----