Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/26fea6d0-60bb-3317-8d3d-dbf02ef77fa3.roa
File:                     26fea6d0-60bb-3317-8d3d-dbf02ef77fa3.roa (raw, json)
Hash identifier:          nfkZWDGlc+dn1XgX1GRHpoZyf4T+inc5v1rloKPDlmw=
Subject key identifier:   45:5A:CC:7E:A8:FF:31:14:FC:F2:D5:5B:6B:D7:0F:91:26:6E:E9:34
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583F58745AD76E8715BA0297FD00
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/26fea6d0-60bb-3317-8d3d-dbf02ef77fa3.roa
Signing time:             Fri 23 Sep 2022 12:00:00 +0000
ROA not before:           Fri 23 Sep 2022 12:00:00 +0000
ROA not after:            Sat 29 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        199.127.232.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:58:74:5a:d7:6e:87:15:ba:02:97:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Sep 23 12:00:00 2022 GMT
            Not After : Oct 29 04:00:00 2022 GMT
        Subject: CN=2de48473-c728-459a-989e-fec8c1b61a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1b:b1:ca:e8:6b:62:68:33:05:57:62:d3:60:
                    c2:38:dd:90:26:17:16:97:ad:51:7c:fa:2e:ef:8f:
                    12:43:ec:f8:07:9b:2a:03:9b:3b:1e:a3:18:18:a1:
                    94:c1:52:d6:0d:08:4f:56:51:f3:2f:b2:1c:e5:36:
                    7c:82:1d:bb:85:58:39:5b:6f:ce:64:87:69:bc:85:
                    71:6b:10:60:58:b4:30:72:c9:27:e1:ba:a9:b2:06:
                    f8:43:72:84:1d:08:14:54:c2:5f:8b:e5:ab:80:98:
                    7e:12:3b:38:37:ac:7e:a0:e3:62:74:0d:05:d3:bb:
                    29:72:7c:7a:26:88:50:c3:2a:69:4f:b8:fe:31:fd:
                    1b:59:76:76:f1:1a:18:6c:46:cf:36:ef:6d:94:9f:
                    6e:b0:a0:b9:31:6c:d6:87:a4:f1:eb:b7:ee:cb:78:
                    68:99:84:d1:12:77:e7:7f:78:da:9d:4a:0d:2c:32:
                    eb:22:08:9f:b1:de:a3:c4:aa:e2:d4:6d:ef:3e:00:
                    2b:f9:17:75:b8:63:94:96:79:d9:53:5a:a3:db:6e:
                    db:b6:31:cf:d3:b8:8d:5a:92:62:f9:46:71:41:84:
                    ff:fa:d8:24:5d:06:2f:93:31:84:2c:06:5c:ff:89:
                    ae:d3:c7:43:62:2f:08:17:94:7e:0e:55:74:f5:88:
                    f5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:5A:CC:7E:A8:FF:31:14:FC:F2:D5:5B:6B:D7:0F:91:26:6E:E9:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/26fea6d0-60bb-3317-8d3d-dbf02ef77fa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.127.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:7b:ac:97:7c:ae:05:fc:4f:e5:6e:b0:2a:42:b0:04:c4:ed:
         8a:91:87:6e:46:61:86:63:12:01:97:e3:88:9b:8d:7a:6f:c2:
         50:cf:88:9a:54:78:f8:9a:cd:e6:03:3c:02:60:ae:ac:0f:91:
         cb:c5:cb:87:c2:6f:f3:61:09:65:dd:fd:d7:1e:bb:16:4d:15:
         b9:6c:93:be:f4:7f:cd:bd:d3:c1:df:16:43:44:69:7c:98:ef:
         7f:35:8c:cf:87:12:9e:4c:46:32:c8:98:4c:c6:a2:a6:ae:e1:
         0c:e8:b5:14:1a:3b:a1:e9:9e:38:21:90:a0:1f:bd:c2:41:80:
         82:64:b4:12:62:17:e7:38:1d:58:86:e1:43:1a:c6:bc:1e:c4:
         72:6e:58:e8:d6:6d:03:05:28:0f:cb:2a:e9:a9:25:b5:a3:ac:
         84:cb:57:3e:a6:c0:b3:85:e1:67:9a:f3:b4:f9:cb:07:38:40:
         37:76:49:dd:93:50:1f:28:a6:f8:57:99:10:d5:aa:c5:35:bd:
         1a:d6:81:59:7d:3c:ea:61:28:23:4a:e9:23:7a:4a:5f:19:f5:
         3a:70:ef:c6:6a:08:6c:15:47:38:f9:e1:38:f5:22:f3:13:01:
         23:d2:18:44:e1:d8:de:6c:b1:61:66:89:1e:5f:58:9f:ed:88:
         3c:dd:b7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----