Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/089ab30b-f8b9-309f-98a6-6c421cd6fe39.roa
File:                     089ab30b-f8b9-309f-98a6-6c421cd6fe39.roa (raw, json)
Hash identifier:          TA94M1YgZsGnX9wxjgkL/M10CNewBnCLSnvUDAe6ccs=
Subject key identifier:   81:68:F4:1A:4C:EE:AB:B2:5D:C8:57:96:C3:4B:46:C8:DC:5D:64:55
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583DF8FC8925DC8943EC2431C200
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/089ab30b-f8b9-309f-98a6-6c421cd6fe39.roa
Signing time:             Fri 20 May 2022 12:00:00 +0000
ROA not before:           Fri 20 May 2022 12:00:00 +0000
ROA not after:            Sat 25 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        76.223.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f8:fc:89:25:dc:89:43:ec:24:31:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: May 20 12:00:00 2022 GMT
            Not After : Jun 25 04:00:00 2022 GMT
        Subject: CN=bdf4a5ad-ce09-4f1e-ba3c-19dbd5c12c58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:de:37:50:ec:cd:77:00:1d:b6:34:fa:24:c3:
                    61:03:9a:3e:c8:40:8c:41:f0:d0:6e:ca:2e:65:b5:
                    73:4c:ce:3e:c3:a4:d3:e5:75:4f:13:d7:6b:68:ef:
                    73:3e:8c:11:29:0a:c0:68:f1:54:c6:3e:41:89:7e:
                    0f:dc:fd:4f:22:43:78:0c:c7:7d:d1:be:dc:18:46:
                    2e:9c:ec:8b:50:30:60:6b:69:bb:fb:4a:37:90:87:
                    ee:92:bc:d9:43:8c:c5:81:b5:16:d8:48:25:3d:34:
                    86:34:eb:e2:e0:6e:60:3d:85:52:c8:1d:71:9c:4e:
                    7e:74:b8:e5:0c:e4:e9:32:89:d1:d9:75:6d:29:68:
                    39:6e:ee:83:ed:1c:c8:aa:e9:6f:80:26:fd:dc:3d:
                    41:5f:04:c9:4d:ad:f1:59:33:c2:24:fc:a7:22:21:
                    c6:19:64:5f:b2:e8:e3:4d:fb:dd:02:2d:2a:86:51:
                    11:76:14:e1:f8:84:74:ca:56:bc:6b:e7:8f:46:60:
                    68:7d:d3:1c:32:9e:7c:3e:8e:68:5e:fd:f9:0e:f0:
                    8b:84:55:cb:0c:7b:47:ef:5c:42:3f:c3:5a:9f:78:
                    8a:d0:ec:0f:26:f4:b3:c5:5c:44:2e:b6:d9:99:bd:
                    ba:3f:91:0e:cd:97:57:97:60:7b:c2:fb:50:b8:41:
                    52:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:68:F4:1A:4C:EE:AB:B2:5D:C8:57:96:C3:4B:46:C8:DC:5D:64:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/089ab30b-f8b9-309f-98a6-6c421cd6fe39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:7d:77:5f:9f:00:c6:16:0e:11:08:eb:46:5c:31:5e:ee:e1:
         83:d9:2a:75:4f:84:2f:a1:af:35:c1:5c:af:c5:8b:59:5c:61:
         0f:e0:14:ce:e0:fa:45:e6:20:c7:d8:9b:8d:ec:bb:c2:82:d9:
         87:d3:e5:68:f5:e7:2b:35:53:6e:64:5d:13:0f:bb:34:d1:4d:
         26:71:39:db:ee:bb:24:a6:2c:cd:5b:ae:cb:18:b8:10:d5:2f:
         8f:34:4b:77:cd:f9:87:1e:30:4e:a4:1b:46:2c:8a:02:0d:4c:
         08:63:4a:75:ec:da:f3:59:83:10:0c:71:72:db:82:b8:ae:6e:
         3b:c6:24:68:7a:fd:a9:a3:bf:7c:9a:87:af:f9:2f:3a:e7:8f:
         9d:1e:dd:66:cc:d6:c4:a8:fc:28:8a:05:81:ad:d0:3b:82:e1:
         30:fb:4d:a8:2d:32:fd:3d:36:07:ba:1e:26:05:95:68:5b:ba:
         d6:54:79:59:8e:2e:70:d4:6c:90:aa:0d:53:63:8c:c3:55:d7:
         7b:5c:9f:8d:b0:ad:7e:02:88:62:7a:8f:ad:a4:ad:85:b4:43:
         c1:4f:39:72:db:b5:ff:f1:16:a5:c3:90:76:31:59:31:3d:b4:
         b5:80:06:1c:47:e4:94:e9:24:1e:f2:cc:a8:1f:c5:e9:41:b0:
         c5:0c:9e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----