Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/2fc65e66-16d3-3128-98d4-93b8c38948c7.roa
File:                     2fc65e66-16d3-3128-98d4-93b8c38948c7.roa (raw, json)
Hash identifier:          JnKrpLDbaTWemf+hcLfXHswbpOMXluAJy0FSzIR+BIA=
Subject key identifier:   C0:FA:58:A8:57:61:F5:64:06:C4:8E:EC:D6:55:77:C2:8D:FD:E8:50
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583DD299A9F03E867950492E8040
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/2fc65e66-16d3-3128-98d4-93b8c38948c7.roa
Signing time:             Fri 06 May 2022 12:00:00 +0000
ROA not before:           Fri 06 May 2022 12:00:00 +0000
ROA not after:            Sat 11 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        69.169.224.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d2:99:a9:f0:3e:86:79:50:49:2e:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: May  6 12:00:00 2022 GMT
            Not After : Jun 11 04:00:00 2022 GMT
        Subject: CN=035fcac8-26f7-43cf-8c84-86547532d6b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a9:c8:15:35:f1:a0:68:06:da:bc:9c:1b:5a:
                    16:bd:83:da:8c:e0:43:71:29:1b:91:ab:f9:59:57:
                    e2:ba:3a:3f:e1:f5:77:63:27:b0:61:1b:8b:cd:9a:
                    b2:12:e4:9b:32:68:d2:dd:18:3c:95:e4:fd:52:21:
                    e6:94:f4:8c:2b:aa:d0:cc:0c:f7:01:1c:f3:a6:53:
                    e8:2d:6a:51:fb:99:b0:67:ad:70:dc:d4:57:2c:64:
                    cb:e6:b7:a0:08:bc:42:ef:81:ee:7e:7d:d0:81:59:
                    c4:9c:16:84:aa:76:ce:81:41:0f:d8:37:5f:d6:b4:
                    d4:14:a3:52:60:9e:a0:aa:d0:98:40:c5:f4:65:14:
                    84:fc:4a:e8:e9:b5:6b:67:22:3b:d3:1d:d7:37:8b:
                    3d:b5:a2:56:10:06:58:94:d6:05:e1:22:ee:ff:15:
                    97:cd:ab:3a:d8:d9:5d:e2:f6:96:0d:26:45:74:7b:
                    d0:bc:84:9c:74:62:cd:b1:8c:be:f5:75:00:30:50:
                    64:41:69:61:ff:53:f9:fd:2d:cb:8c:9e:40:5f:9a:
                    c9:23:72:5e:b5:78:a5:dc:40:41:fc:e4:e2:d0:5e:
                    df:c5:f3:7d:e2:32:fd:0b:c5:52:10:0d:60:a1:da:
                    71:00:8f:5d:97:02:be:1b:f9:f2:2c:88:48:c5:f7:
                    fd:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FA:58:A8:57:61:F5:64:06:C4:8E:EC:D6:55:77:C2:8D:FD:E8:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/2fc65e66-16d3-3128-98d4-93b8c38948c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.169.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:f5:76:f4:f1:87:3e:be:dd:86:bd:18:f9:f9:21:be:f2:3e:
         fc:7a:b4:28:e7:b2:61:32:1d:5f:ae:62:1d:63:f7:ba:d0:5d:
         2e:6a:90:72:ed:ef:1d:ea:33:a8:f0:49:84:f1:08:90:49:9b:
         c3:3d:75:1e:08:e6:72:c8:36:1b:16:00:aa:d1:47:2e:ec:00:
         bf:9e:57:4a:60:c6:16:09:5a:0e:f4:8e:0b:74:9c:1f:f8:ed:
         61:b9:91:41:3e:bf:c0:c1:08:1e:7a:a9:08:1e:42:ef:3b:49:
         44:98:9e:73:a1:37:3b:f0:d0:6f:ee:89:dc:c4:45:42:03:88:
         71:b6:eb:24:1b:38:d3:52:21:16:7e:5e:36:4d:da:2b:11:fb:
         e1:b7:ec:43:00:c0:30:f7:a2:f8:7e:28:e0:54:ac:df:25:e8:
         22:65:6e:f9:9f:8f:12:2e:87:25:d6:3a:cd:71:10:4a:28:c5:
         93:b4:5b:77:75:c7:2c:2e:49:ff:62:4a:5b:f4:d3:16:33:b6:
         8b:e4:98:c8:3f:9a:22:e6:06:6f:56:c8:78:4a:6c:63:14:4b:
         20:d8:14:06:d5:85:fd:ab:0e:a2:1c:55:c9:66:b5:ba:c4:bc:
         83:32:f9:c7:f0:07:e2:1e:54:29:7f:f4:8f:d7:3c:21:08:be:
         91:3b:75:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----