Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/06adabf4-b672-3b13-b4cf-f35e5fe590d7.roa
File:                     06adabf4-b672-3b13-b4cf-f35e5fe590d7.roa (raw, json)
Hash identifier:          5gyCbMJQw310XVWE3b2q7aEAMbarRKVawEWZn+k/jWA=
Subject key identifier:   FD:76:A0:7D:8E:16:A9:9E:35:BB:31:99:A3:E1:BE:22:99:4F:69:12
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583E6F5FBAAE6EBE461D7BCE7980
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/06adabf4-b672-3b13-b4cf-f35e5fe590d7.roa
Signing time:             Fri 01 Jul 2022 12:00:00 +0000
ROA not before:           Fri 01 Jul 2022 12:00:00 +0000
ROA not after:            Sat 06 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        23.249.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6f:5f:ba:ae:6e:be:46:1d:7b:ce:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Jul  1 12:00:00 2022 GMT
            Not After : Aug  6 04:00:00 2022 GMT
        Subject: CN=d63d1d8d-7692-48d4-b322-5e16a2290489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d8:69:90:50:55:99:b1:4f:a1:55:a3:49:16:
                    bd:e1:6e:f6:22:c0:81:01:35:f8:f8:06:55:85:d8:
                    66:35:f1:5a:94:b1:ea:42:b2:90:b6:f3:e6:b1:52:
                    e4:5e:37:6e:7f:ad:80:39:c7:68:95:ad:85:a0:cb:
                    31:f7:95:bc:bf:fe:25:42:26:9e:e4:b8:b4:3c:09:
                    9a:c8:5b:e5:34:97:0e:03:5f:13:e4:74:06:b9:5a:
                    ba:95:1c:14:c7:36:b7:de:b4:50:a7:20:5a:47:b9:
                    44:5f:68:70:e8:36:41:71:c2:55:30:5e:ec:26:2f:
                    83:c5:39:a7:fd:d3:a6:f6:54:13:93:e5:6c:9b:b4:
                    bc:08:18:b1:f0:c7:40:91:96:f8:ff:97:3c:5b:61:
                    9c:ca:3f:c1:57:62:bc:1c:20:80:11:f5:3b:a1:b4:
                    c2:c3:d9:80:92:cc:9c:4a:49:65:97:52:0a:b4:d4:
                    25:8d:56:bd:0a:3a:92:56:be:65:4a:39:f0:7f:47:
                    2e:c7:39:c0:3c:f3:1e:ac:4b:74:b3:76:37:c3:59:
                    e0:51:6a:d9:36:aa:7e:d8:ab:61:e5:8a:19:72:e6:
                    19:c6:2e:d4:1d:1f:e1:79:37:b0:00:48:72:1b:b8:
                    fa:66:bb:b9:1d:97:86:b8:14:a5:bb:05:b0:a8:2c:
                    98:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:76:A0:7D:8E:16:A9:9E:35:BB:31:99:A3:E1:BE:22:99:4F:69:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/06adabf4-b672-3b13-b4cf-f35e5fe590d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:dc:9a:a6:2c:be:30:a6:f7:2f:a8:b8:13:1d:33:0a:10:30:
         ba:f7:f4:c0:1c:71:31:f0:cf:bb:e7:f4:b3:26:b2:b3:d1:16:
         36:77:8f:fe:30:e1:18:46:b8:4c:c8:92:01:91:de:2c:9a:3c:
         67:2f:e4:8d:b6:c6:fc:91:3b:10:c0:27:8b:5a:ac:eb:3b:f2:
         ae:38:d7:53:c7:a5:c1:99:ae:a8:05:ee:07:be:aa:41:d1:d0:
         4b:50:9c:12:92:7f:4a:fb:b6:6c:d0:2e:c7:fb:89:fa:cf:92:
         a5:a3:72:41:7c:fb:e0:cd:f6:8e:ed:9d:aa:4b:b3:13:8a:9c:
         da:11:af:1c:82:9c:a6:dc:ff:fb:77:30:d7:72:7b:1a:9b:94:
         80:f0:87:88:7d:da:22:6d:ec:a7:e7:b4:0d:09:77:65:8f:86:
         ec:be:bf:cd:a6:e5:11:fb:d6:48:c0:6b:29:89:14:15:ac:0f:
         80:46:15:d9:0e:bf:69:33:93:1e:05:37:02:e9:d5:27:26:4d:
         1e:45:c8:15:70:aa:7f:3e:ef:f0:04:dd:9f:e5:53:fd:27:e0:
         61:73:14:28:56:3e:9d:10:2f:49:20:de:5f:e8:20:c4:87:81:
         e4:39:70:9c:38:dc:65:64:c1:8f:ae:7e:00:6e:c5:c0:ee:15:
         ef:d1:fd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----