Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/ee17fc50-d3af-3f62-877a-585b0edd20e7.roa
File:                     ee17fc50-d3af-3f62-877a-585b0edd20e7.roa (raw, json)
Hash identifier:          Cnb/dvwH2noqZicZAC68OptsziBYNGLabI6+p5zbXbE=
Subject key identifier:   49:F6:FA:F3:4C:19:FF:08:FB:36:7F:11:CD:26:D5:12:5B:B6:D0:30
Certificate issuer:       /CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
Certificate serial:       010D0C9F4328583FA4879F4A75A0B88547D7DD20
Authority key identifier: 6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/ee17fc50-d3af-3f62-877a-585b0edd20e7.roa
Signing time:             Thu 20 Oct 2022 12:00:00 +0000
ROA not before:           Thu 20 Oct 2022 12:00:00 +0000
ROA not after:            Fri 25 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        50.112.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a4:87:9f:4a:75:a0:b8:85:47:d7:dd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
        Validity
            Not Before: Oct 20 12:00:00 2022 GMT
            Not After : Nov 25 05:00:00 2022 GMT
        Subject: CN=d52cb799-8e49-447c-bc70-654be95673ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:db:d3:f0:96:ac:2c:42:e9:50:74:52:22:40:
                    b0:74:2e:8a:d9:98:2c:0c:1f:6b:73:93:30:5c:c1:
                    94:d8:68:06:07:b3:ec:42:ab:13:86:e9:2e:bb:df:
                    a2:ec:a7:ef:29:fb:c1:32:5e:f5:54:94:eb:b5:4e:
                    93:0e:a5:99:03:9b:e9:25:05:48:53:d4:f9:36:e9:
                    2c:71:2e:ab:0f:c5:59:0a:39:e0:72:87:96:f9:82:
                    af:65:68:ce:98:62:52:a2:f7:a0:2f:96:a9:05:ac:
                    ed:5c:3a:82:d1:f8:e6:6e:17:c4:0e:32:64:8d:53:
                    b1:d7:6e:14:27:a2:2b:51:0b:87:53:96:20:21:64:
                    9c:3d:45:ac:40:45:24:00:01:58:a8:b6:89:80:3d:
                    dc:5a:db:05:76:1a:51:c2:7b:14:cb:09:a9:02:f0:
                    5f:d0:fe:73:45:14:fd:25:1e:fa:fa:6a:1a:39:53:
                    24:56:03:ca:7f:77:7a:b9:09:03:6c:a9:38:7a:f3:
                    f6:b6:d7:cc:98:97:a8:10:b3:68:f1:55:a4:82:0c:
                    87:b0:3b:59:4a:70:a2:c7:2c:f2:5a:82:16:e8:89:
                    97:1c:59:92:34:eb:0a:19:a3:d7:ac:81:5b:d0:19:
                    38:23:3e:8a:9f:82:77:d3:d0:5e:36:b7:47:59:07:
                    ab:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F6:FA:F3:4C:19:FF:08:FB:36:7F:11:CD:26:D5:12:5B:B6:D0:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/ee17fc50-d3af-3f62-877a-585b0edd20e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.crl

            X509v3 Authority Key Identifier:
                keyid:6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:4f:69:0c:99:39:ab:c5:97:68:b9:c0:81:57:37:dd:8b:23:
         4c:07:60:00:08:62:1a:e1:52:df:82:7d:f9:14:d4:33:f8:40:
         b8:be:5e:1f:c0:bc:90:b4:a7:a5:7f:47:08:dc:eb:04:49:ac:
         ba:b7:bb:c4:73:4e:10:8d:f3:95:7b:e8:fd:9c:0d:fb:6a:c1:
         75:31:ea:ff:ec:89:1e:53:2f:84:d9:9e:27:33:86:b3:e0:73:
         bf:b3:37:60:4b:31:af:44:98:b1:26:08:43:b9:b4:ac:49:62:
         c3:ef:fa:94:5b:4a:a0:3b:34:23:75:72:e0:6d:5f:cf:3b:0f:
         51:a9:41:6c:47:19:92:87:00:a1:4d:c8:b7:76:d2:0e:9c:82:
         12:e2:9f:29:e8:42:19:04:be:1e:c7:2d:55:79:58:8b:0e:9a:
         54:2d:ca:83:c2:e2:05:2c:2b:2e:0e:14:ab:0b:52:03:5e:d0:
         1e:6c:48:a4:37:a6:31:51:2b:10:b1:85:0b:92:3d:b8:c0:5f:
         2f:65:00:cd:c7:57:87:d4:92:19:3d:d2:16:ec:91:f1:80:b9:
         86:75:54:83:5f:07:bf:38:fd:f0:c3:c4:65:2d:78:f4:d8:c8:
         c7:eb:85:68:a3:78:63:9b:02:c3:17:a6:80:40:c4:cd:da:ed:
         c4:2f:5b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----