Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/2c6a7d5e-b81f-3dab-98a8-d1ade4192c6f.roa
File:                     2c6a7d5e-b81f-3dab-98a8-d1ade4192c6f.roa (raw, json)
Hash identifier:          n14MFBW0Z+bjJ72YqdiUCVzWdHA7r/V9K/bPgW7WqMY=
Subject key identifier:   C5:A8:96:FB:B7:E8:09:4D:FD:F7:97:F4:AA:51:10:B1:CA:3D:14:7A
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F432858406BD156CB588D98BBDD650960
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/2c6a7d5e-b81f-3dab-98a8-d1ade4192c6f.roa
Signing time:             Fri 30 Dec 2022 12:00:00 +0000
ROA not before:           Fri 30 Dec 2022 12:00:00 +0000
ROA not after:            Sat 04 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        23.249.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:6b:d1:56:cb:58:8d:98:bb:dd:65:09:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Dec 30 12:00:00 2022 GMT
            Not After : Feb  4 05:00:00 2023 GMT
        Subject: CN=f15564ee-ea12-4852-a0f7-add7438e0366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2f:19:69:e4:ff:78:09:4a:45:c8:26:bc:cb:
                    9c:e7:9c:17:56:33:18:dc:5c:b1:19:a0:6d:59:76:
                    f0:b4:0a:5b:34:d3:c3:40:0d:37:06:84:77:e0:1a:
                    56:6e:87:4f:e7:ce:0d:61:fb:4b:a7:e8:a7:d5:44:
                    c3:93:c1:02:17:e0:35:2d:1d:8e:a0:80:c6:91:68:
                    5c:d1:8f:dd:d7:32:c7:03:c3:ab:71:00:6e:67:e4:
                    08:eb:19:34:ce:71:57:a7:cf:0d:68:96:eb:eb:ad:
                    9f:79:bc:1b:f6:2c:90:06:26:be:03:6e:50:46:89:
                    97:7d:bf:76:d8:d9:0d:6d:74:ea:ad:97:08:b9:7e:
                    91:86:b1:c4:ca:73:ce:f1:02:fc:6e:da:cb:44:ce:
                    18:dd:d8:9b:ab:23:f2:12:af:6b:6e:36:6a:19:ed:
                    29:2e:f3:a6:f0:f9:65:6e:03:5a:1d:9d:db:54:fc:
                    77:21:65:98:9e:14:39:1f:b3:90:fd:94:e3:34:ae:
                    34:8a:50:1d:86:28:f8:30:e5:9f:a9:99:6e:fe:49:
                    5b:71:81:96:3c:38:98:e9:9b:45:d7:47:5c:a7:28:
                    1d:ca:c4:04:86:dd:a4:dc:fe:b0:d7:71:78:3e:bf:
                    81:dd:08:a6:0b:70:a2:7a:56:15:8a:c5:7a:f0:18:
                    52:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A8:96:FB:B7:E8:09:4D:FD:F7:97:F4:AA:51:10:B1:CA:3D:14:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/2c6a7d5e-b81f-3dab-98a8-d1ade4192c6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:ff:63:0a:51:58:d3:88:5d:1b:e5:14:6b:73:39:eb:49:a9:
         54:9d:48:78:df:8c:b7:96:68:60:b9:05:8d:0c:eb:7e:cb:a5:
         61:82:e1:08:ff:55:f1:d1:0d:70:20:0e:c0:39:b3:23:29:35:
         03:0f:62:84:bd:69:92:0e:0f:9d:99:d2:62:94:3b:7a:42:fb:
         45:7f:5a:d1:0b:68:35:91:ea:9d:a0:51:6c:9c:b8:52:b3:3f:
         85:44:94:9b:42:98:27:6f:06:aa:8d:f0:0e:9f:5d:a2:ba:65:
         7f:db:cf:bf:28:cc:b3:b1:de:24:11:99:00:2c:cb:b4:b6:fa:
         40:e2:59:95:65:7c:28:0c:61:b1:4f:4a:1e:03:ee:1f:2a:33:
         61:4d:86:5d:82:79:5a:2b:5b:4c:3c:b2:08:5c:b3:c0:26:36:
         c2:75:76:27:47:98:18:4e:b2:4c:d3:bc:68:7c:34:4f:e6:15:
         48:cf:01:7b:19:ff:97:cc:df:be:66:4e:fd:9a:5e:a5:d8:fc:
         76:a0:2b:a8:d1:c3:15:e6:dd:07:39:9c:d5:9c:0e:69:c2:79:
         05:da:81:e2:cc:11:82:9e:21:85:6d:c3:a5:12:0d:31:13:99:
         b6:c4:c6:60:bb:45:bf:83:b7:a2:a1:88:a2:63:62:db:28:00:
         44:1f:3c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----