Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/1115320b-c1e1-39b4-83c6-0973f7530a70.roa
File:                     1115320b-c1e1-39b4-83c6-0973f7530a70.roa (raw, json)
Hash identifier:          cyQW9iaGzl3eTPPXj1u5VhqVqWe56KmYxdz95+RcAWs=
Subject key identifier:   68:DE:1B:0B:02:3B:D4:87:92:46:E0:F1:85:3E:31:58:BC:11:AD:3C
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328584044BBBE371596197EF5709400
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/1115320b-c1e1-39b4-83c6-0973f7530a70.roa
Signing time:             Fri 16 Dec 2022 12:00:00 +0000
ROA not before:           Fri 16 Dec 2022 12:00:00 +0000
ROA not after:            Sat 21 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        23.249.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:44:bb:be:37:15:96:19:7e:f5:70:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Dec 16 12:00:00 2022 GMT
            Not After : Jan 21 05:00:00 2023 GMT
        Subject: CN=a2901a7c-c0a4-486e-a3ac-0991706cc8d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f6:83:73:70:48:e2:8d:59:95:26:4d:8b:16:
                    e2:a6:4a:96:85:42:2c:28:7d:08:87:b0:38:a0:be:
                    c8:55:3f:b7:e1:ac:ff:71:d4:52:35:9e:85:ea:60:
                    4b:81:eb:bc:d6:56:19:9c:6a:ca:df:6f:74:67:45:
                    63:e3:9b:a0:0a:45:60:7e:e5:43:b0:f7:71:55:78:
                    d2:fe:d1:c5:92:ca:fc:43:fb:00:df:cd:d8:0f:bc:
                    03:93:75:37:a2:db:e6:7e:c1:ae:5b:b5:ca:2c:1a:
                    2f:74:9b:fa:98:52:a3:c3:dd:54:b1:f1:6b:9f:5e:
                    85:a7:71:29:66:98:37:c0:18:e5:a1:d0:7f:24:87:
                    dc:80:de:7e:72:1a:27:54:63:4b:4f:36:8d:d6:96:
                    9d:3d:a5:38:16:40:3e:5f:3f:af:d8:85:08:93:b3:
                    2d:b1:cf:7e:89:7f:ee:be:9c:9e:e5:b7:6e:84:68:
                    6b:4b:fb:66:f8:f9:66:7d:00:0d:bd:81:cc:85:e6:
                    00:ed:b6:61:dd:7f:31:6f:12:83:bb:b6:c7:09:64:
                    65:4e:23:27:be:d9:30:62:fc:0a:4b:2e:b6:0a:d5:
                    ca:06:83:c2:4d:30:a3:f5:b1:d3:d4:c9:63:7d:ff:
                    ee:b2:53:31:63:f6:dd:7a:69:19:ab:36:75:8e:37:
                    c9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:DE:1B:0B:02:3B:D4:87:92:46:E0:F1:85:3E:31:58:BC:11:AD:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/1115320b-c1e1-39b4-83c6-0973f7530a70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:8e:15:41:49:40:4c:19:8c:50:49:40:a0:5d:ed:2a:85:d4:
         d2:14:57:a9:e9:6b:02:71:07:17:15:45:eb:39:e9:3f:dd:8e:
         49:3d:9b:80:d6:a6:45:11:01:65:77:f4:53:f2:c0:31:d2:4c:
         21:02:ce:33:c5:a3:9c:f8:41:c1:a3:1b:43:b0:bb:2a:7a:23:
         23:6c:4d:10:27:ee:9e:e2:11:5b:55:94:b6:29:36:bb:e1:f0:
         28:9c:cd:f6:c0:5b:b2:ed:26:79:ae:b4:08:70:3c:ee:9c:db:
         de:d0:4c:da:c8:10:a4:5f:d6:7e:66:42:7a:7d:71:71:b4:fe:
         ac:96:1a:85:0d:b9:0e:6b:34:54:74:0b:29:c3:41:37:03:d5:
         6d:cd:a2:ca:c5:ce:2e:66:68:7d:21:fa:8b:59:7f:29:2f:f0:
         ba:29:45:ce:7b:cb:c9:25:53:67:eb:6f:d5:9c:01:a8:c1:ff:
         a4:75:29:52:9d:79:dc:38:a0:57:79:49:61:74:6f:7c:f6:09:
         a3:c5:fe:f2:bf:3f:46:56:70:cb:3d:f8:71:ab:da:26:e1:1d:
         df:3f:a5:6d:9b:37:2b:52:44:d3:f2:03:13:82:91:d3:3d:c9:
         58:39:5a:22:a8:53:36:c9:97:e5:de:96:a8:a1:92:98:6a:f2:
         49:2a:8d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----