Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/26e6031b-3442-30e2-bf3b-3b404aa47f9e.roa
File:                     26e6031b-3442-30e2-bf3b-3b404aa47f9e.roa (raw, json)
Hash identifier:          ReWVRAwKeiXDN9e9zToJVza0+4DbKUXoyrQ0uGJU61g=
Subject key identifier:   76:02:AC:5F:DF:67:A2:D4:2B:3E:EC:66:0B:68:8D:00:14:98:88:03
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328584092E6EAC1DF64AF539B591000
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/26e6031b-3442-30e2-bf3b-3b404aa47f9e.roa
Signing time:             Fri 13 Jan 2023 12:00:00 +0000
ROA not before:           Fri 13 Jan 2023 12:00:00 +0000
ROA not after:            Sat 18 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        23.249.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:92:e6:ea:c1:df:64:af:53:9b:59:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Jan 13 12:00:00 2023 GMT
            Not After : Feb 18 05:00:00 2023 GMT
        Subject: CN=0b61468f-ed3f-43f7-b523-407e4973221e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:82:a1:68:27:5e:a4:b9:d6:0a:de:1c:62:f8:
                    0e:24:35:36:7e:10:5f:40:cf:05:c6:dc:34:ae:a5:
                    c2:9a:02:2b:31:51:c4:3f:d7:a4:6f:55:a5:9c:79:
                    e3:8b:99:a1:88:d7:7e:c3:c0:b7:5b:e9:9d:07:77:
                    9c:bb:89:89:1d:28:d5:81:cd:5c:31:f4:3a:ec:23:
                    ea:00:9e:26:69:ce:12:61:65:13:18:de:02:44:e2:
                    e8:17:37:e4:c8:e6:db:42:f1:79:b2:ef:a7:6c:56:
                    fe:2a:b3:2b:03:97:2e:72:75:26:08:a0:67:a7:ef:
                    39:b5:81:db:ab:7e:a6:2e:fb:d3:3d:0e:83:54:48:
                    f5:ae:20:e3:aa:ae:18:5e:52:30:51:e3:24:7b:42:
                    6c:e4:2f:f1:08:e5:28:59:34:05:60:06:3b:6f:e7:
                    3b:f7:fb:fa:c1:60:65:cb:b5:62:0b:c2:62:ce:6a:
                    d5:cf:f9:5a:d8:23:96:7f:93:cc:f8:64:4d:5d:63:
                    e3:d5:6f:83:e2:16:b3:bc:a8:bd:0d:43:de:c3:c0:
                    a1:c1:d8:74:20:85:2f:ca:5a:62:33:e8:13:72:e0:
                    b8:1d:51:27:26:68:cd:aa:e5:8e:0a:77:b7:8b:54:
                    23:89:83:2e:7b:e9:07:49:1a:25:7b:35:91:b9:6c:
                    fb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:02:AC:5F:DF:67:A2:D4:2B:3E:EC:66:0B:68:8D:00:14:98:88:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/26e6031b-3442-30e2-bf3b-3b404aa47f9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:da:0c:ca:f7:f9:48:b0:40:c1:9d:38:9b:fa:48:7e:89:02:
         b3:3c:85:4f:40:e5:b8:1c:f4:98:bc:7d:8e:78:a9:1c:74:9a:
         ce:1b:e6:71:3d:96:8c:66:8d:3c:9e:35:46:17:94:b7:e3:40:
         97:7a:6e:1d:74:7c:c6:c4:dd:1f:dd:f7:42:62:ce:e0:b6:31:
         88:6b:3b:3f:0e:c7:46:94:f8:f9:c9:d9:05:fa:da:6a:6f:4a:
         5a:fc:b1:08:1c:20:fb:32:5c:bf:c1:a8:27:17:d0:76:c5:24:
         cd:86:d3:9e:b9:c6:9b:ca:77:df:f5:3f:89:39:f8:3d:86:0a:
         c0:03:e2:c1:ae:3c:58:f0:a2:78:45:8c:8a:c2:4c:e6:54:37:
         5c:93:67:46:4e:0d:46:f6:bb:24:02:76:42:4e:24:e2:94:cc:
         f4:89:9f:7b:d3:9d:0e:cf:3a:a8:80:60:0f:b6:80:0e:d6:35:
         81:3f:4c:a0:f8:83:5b:30:e6:3d:14:e3:ff:62:1c:a6:f4:2a:
         a4:0c:0e:ea:9e:a7:98:cb:79:57:b8:d0:38:88:f3:3f:db:c4:
         c4:51:03:59:93:80:cf:26:ee:73:7a:be:98:43:a1:a7:f0:16:
         c0:98:2e:c6:47:bf:ea:5d:14:8e:38:70:9f:da:71:7c:51:c5:
         27:7f:d0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----