Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/02e1d69d-e7f1-3485-a624-db5d732d3704.roa
File:                     02e1d69d-e7f1-3485-a624-db5d732d3704.roa (raw, json)
Hash identifier:          rdnrk9UV91fuPWaE1pbgbpfbvobmUrznGCqf97MOpf0=
Subject key identifier:   DF:5E:B9:B8:91:51:9F:4B:A1:18:5F:F1:CD:89:C6:D8:41:3A:4D:68
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583C6F1EEB39626F643164DB3700
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/02e1d69d-e7f1-3485-a624-db5d732d3704.roa
Signing time:             Fri 31 Dec 2021 05:00:00 +0000
ROA not before:           Fri 31 Dec 2021 05:00:00 +0000
ROA not after:            Fri 04 Feb 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        23.249.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:6f:1e:eb:39:62:6f:64:31:64:db:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Dec 31 05:00:00 2021 GMT
            Not After : Feb  4 05:00:00 2022 GMT
        Subject: CN=f09b2529-5092-47ec-9017-f721f65f33c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:83:21:b5:ea:4c:28:55:72:1b:08:d1:8c:f4:
                    8e:2b:19:ba:c9:75:af:a9:1c:ca:f9:4e:2e:9a:35:
                    59:c4:14:34:73:a9:d9:64:41:cc:a2:bc:05:67:40:
                    c6:e5:1c:d9:5e:bd:96:07:fa:65:be:77:e5:f4:a0:
                    8b:10:40:1e:b1:13:20:01:a0:f8:a2:1b:38:3a:69:
                    2a:da:66:a2:4b:72:16:b9:30:1c:82:b3:7f:9f:e5:
                    27:31:06:0d:48:e4:65:05:5f:12:ba:15:d8:0b:3d:
                    d1:7e:13:08:b3:fa:eb:4e:bd:d5:4d:b2:3c:24:70:
                    5b:ce:a0:13:7c:f8:06:5f:1b:88:10:14:e6:92:55:
                    29:de:e9:87:0a:7e:27:46:c3:9e:f5:fb:14:1b:37:
                    3f:4d:1d:77:72:ee:c8:66:9b:54:ae:5c:68:0f:45:
                    dd:41:2e:de:78:60:9f:3e:f2:15:06:e5:b0:1c:d5:
                    1d:65:6c:52:07:bd:86:be:3a:d4:b5:b6:d1:9f:e7:
                    9b:f0:ba:99:92:31:28:dd:9b:50:87:70:b2:da:19:
                    19:32:ea:02:36:99:f0:38:c9:45:27:bb:f7:9e:06:
                    84:2d:a7:e9:a2:39:95:50:20:fc:50:da:34:ec:49:
                    e7:59:6b:09:93:1b:5d:da:17:10:7a:a4:07:05:ca:
                    33:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5E:B9:B8:91:51:9F:4B:A1:18:5F:F1:CD:89:C6:D8:41:3A:4D:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/02e1d69d-e7f1-3485-a624-db5d732d3704.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:92:89:30:de:7c:14:7c:fd:0a:96:2a:3f:29:f8:94:3a:33:
         ff:77:95:eb:35:cf:fe:c4:5a:79:b8:72:91:41:03:e6:f8:c9:
         07:84:8b:bd:41:0d:22:e5:50:ab:3c:9c:ab:35:5e:e6:de:73:
         bc:13:a2:e4:b1:be:29:c9:43:7e:e4:15:4b:93:82:f2:61:5e:
         71:89:e5:f5:20:5d:b9:37:d9:08:fd:a0:c3:6c:98:a2:a3:27:
         46:e9:8a:c4:dc:c4:8c:02:5b:d5:83:79:e1:f8:d7:ef:56:5d:
         f9:80:24:9f:29:82:74:05:79:e0:46:c6:ed:eb:1e:44:14:f1:
         00:ee:6f:ff:41:65:f5:ab:59:54:83:58:53:db:ba:5b:9b:7e:
         02:5e:22:f8:ba:a4:5f:fb:cd:26:c5:7b:d6:8b:73:25:ad:1b:
         a8:d3:38:a7:c7:f3:48:3d:13:68:9b:b0:e6:47:b3:a2:07:4c:
         8a:39:7f:41:c1:0f:93:01:71:c8:fb:62:ea:19:2e:6a:e8:6a:
         0d:85:c7:4a:3a:7e:1b:8d:1d:c1:cd:7f:af:f1:a9:02:9a:14:
         19:a6:89:56:91:67:02:a5:3a:cb:88:c6:12:30:76:72:ef:a8:
         e6:0e:c4:5f:9e:08:4b:64:0b:28:f3:f9:4f:80:42:51:1c:5f:
         e0:d4:fc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----