Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/1364c778-c69e-307c-a845-fdbc629abbbd.roa
File:                     1364c778-c69e-307c-a845-fdbc629abbbd.roa (raw, json)
Hash identifier:          /G5Tn6HEMeed385/ncmdDoKFu99VhxO9i2iSbHRXLiI=
Subject key identifier:   5D:9B:F8:73:77:0B:EE:CB:6D:35:94:A8:9C:9F:DD:15:7C:69:8F:E3
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583E2019A5A4D058611034EE8880
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/1364c778-c69e-307c-a845-fdbc629abbbd.roa
Signing time:             Fri 03 Jun 2022 12:00:00 +0000
ROA not before:           Fri 03 Jun 2022 12:00:00 +0000
ROA not after:            Sat 09 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        76.223.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:20:19:a5:a4:d0:58:61:10:34:ee:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Jun  3 12:00:00 2022 GMT
            Not After : Jul  9 04:00:00 2022 GMT
        Subject: CN=7bb58458-c2e7-466f-a49c-164969035587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d6:7e:ad:eb:5a:66:03:6d:09:bb:00:37:99:
                    7e:6c:3d:da:95:da:52:4a:b6:83:6f:22:c8:72:b5:
                    a2:a9:a3:d6:8f:58:55:a9:9f:d8:3b:a7:64:f4:7e:
                    40:0f:27:94:80:2f:48:02:a7:c8:25:95:39:ac:74:
                    c5:97:4d:4b:87:3c:75:3b:4f:76:f5:0b:e0:c3:9b:
                    5c:ac:ed:73:59:d2:bc:4b:87:6b:ce:76:3e:4d:41:
                    35:7f:38:ff:d3:e3:41:ef:d8:54:a4:72:0d:b1:09:
                    57:53:64:0a:b0:d8:93:e4:20:3d:1f:92:cb:31:ec:
                    7f:d4:10:7c:c5:ff:c6:e0:14:a2:8b:39:b6:e0:4d:
                    12:16:f1:9b:52:20:51:38:85:df:79:13:31:34:a5:
                    c6:2e:35:95:1f:ad:81:ff:12:24:8d:e6:c1:fe:b5:
                    3a:64:96:26:5b:d8:c0:0a:0f:87:47:29:29:58:95:
                    fe:b8:e0:ed:c9:af:7e:c0:40:d5:40:f3:fe:ee:f0:
                    4e:18:2d:69:6c:18:f3:8a:05:63:8d:97:58:43:34:
                    e9:f9:dd:a3:6d:8f:aa:15:db:a7:d0:4b:2e:c8:7e:
                    4f:4b:54:24:bd:4f:01:fe:49:a4:89:53:81:f7:01:
                    44:54:d4:aa:20:09:47:48:28:b2:66:a9:07:f5:af:
                    50:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:9B:F8:73:77:0B:EE:CB:6D:35:94:A8:9C:9F:DD:15:7C:69:8F:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/1364c778-c69e-307c-a845-fdbc629abbbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:59:97:1b:99:c0:b5:71:0d:da:ca:b3:dd:2d:fc:b1:30:ae:
         35:92:92:ae:f1:85:a8:b2:76:65:ca:41:e4:e2:71:4e:00:d2:
         f5:c2:8c:2f:b7:c0:d2:ce:51:58:d5:0b:f8:5c:a1:0f:01:1e:
         5c:a6:5f:82:3a:c5:58:25:37:12:14:55:ad:85:f7:45:26:22:
         49:0d:fb:39:bc:1e:be:24:e5:03:6d:95:48:db:74:78:9a:29:
         d9:0b:69:84:f0:94:bf:5e:5b:42:6a:18:57:af:3a:ba:38:d8:
         35:f8:c2:fb:9a:f6:8c:6b:89:1e:a1:35:4b:72:75:4d:53:15:
         4b:96:dc:77:a3:ef:6c:92:89:5f:b7:65:44:dc:54:27:ce:a7:
         86:f8:bc:2c:19:d8:9b:df:25:34:fe:7e:a2:f0:b9:d7:b4:ce:
         92:23:3d:45:f5:8d:48:b9:29:4a:f1:46:25:fa:ae:4c:91:a3:
         35:ef:b3:2b:09:1e:55:66:cd:47:11:24:5e:24:66:4f:ca:8f:
         ed:34:d5:4d:28:b8:6e:b2:12:b6:7f:40:20:08:5e:e6:55:b3:
         c6:cf:e6:74:b3:42:47:b4:05:a6:86:a5:c7:18:87:12:d2:24:
         ac:a6:83:b2:d0:d3:46:ad:c3:98:ac:ec:65:0c:b6:0c:03:37:
         95:d5:43:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----