Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/309daeba-f0a9-3e7d-b459-61763b7ca49f.roa
File:                     309daeba-f0a9-3e7d-b459-61763b7ca49f.roa (raw, json)
Hash identifier:          kq0IkD44mMo962NvQkc5JbigXqi8255w/ry+jxmxY00=
Subject key identifier:   A1:C4:A9:A9:65:6A:3A:32:84:E2:DB:78:5F:FF:23:F4:04:F4:17:D2
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583E473693034F49AF4013454400
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/309daeba-f0a9-3e7d-b459-61763b7ca49f.roa
Signing time:             Fri 17 Jun 2022 12:00:00 +0000
ROA not before:           Fri 17 Jun 2022 12:00:00 +0000
ROA not after:            Sat 23 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        76.223.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:47:36:93:03:4f:49:af:40:13:45:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Jun 17 12:00:00 2022 GMT
            Not After : Jul 23 04:00:00 2022 GMT
        Subject: CN=79507b8e-88c7-4fc7-b702-1fef451be32a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c3:21:37:8d:1f:d5:42:49:5a:eb:52:ce:2d:
                    5e:d9:c3:98:23:16:ca:48:8d:f7:06:d2:5b:73:e5:
                    16:8c:c1:ca:7e:62:de:12:e9:16:1d:49:34:2f:8f:
                    88:03:d1:49:93:d3:9c:d7:67:ac:6c:28:78:e2:ed:
                    c4:c5:79:d6:29:fa:f3:c6:03:90:0e:bf:de:03:b5:
                    77:2b:13:c9:26:fd:13:37:5b:61:94:b6:00:a8:06:
                    5b:b9:a6:60:c2:74:94:7d:6a:a7:bd:e0:e8:59:58:
                    72:50:9d:5c:64:a3:c1:a0:52:bb:0f:d9:b7:44:33:
                    ac:1e:a8:2f:59:5a:92:2a:e2:f2:a4:62:34:36:bb:
                    8c:2c:f8:7c:b4:94:6f:37:21:c7:a4:09:02:4e:41:
                    59:ef:43:6f:67:e6:87:a6:cc:22:20:e9:9b:16:61:
                    e8:87:f7:e9:c4:10:e5:2f:9c:da:84:e3:81:d7:cc:
                    12:4e:3c:ab:77:cf:71:32:c3:45:0d:bc:12:49:3f:
                    69:cc:1c:2f:3e:bd:6c:64:0f:e8:d1:56:22:5e:19:
                    c9:1b:62:a7:72:a8:e8:0f:b5:52:23:81:36:da:4f:
                    fb:d1:b9:9e:f3:6c:74:97:37:fe:21:03:7a:67:e6:
                    93:f5:42:04:0c:ce:ca:d5:f3:0f:12:55:e7:d2:9f:
                    05:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C4:A9:A9:65:6A:3A:32:84:E2:DB:78:5F:FF:23:F4:04:F4:17:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/309daeba-f0a9-3e7d-b459-61763b7ca49f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:c7:75:f9:87:e6:30:73:fa:59:be:a9:cb:0f:9c:9f:ec:af:
         96:a0:76:61:fc:d6:22:19:31:33:e5:b5:69:c7:c7:9a:16:a7:
         a7:0a:82:03:db:45:14:25:65:d8:fe:ad:ab:e7:8f:e2:35:a4:
         c7:20:5c:ad:16:15:76:28:86:4a:2c:83:8f:b1:88:85:43:65:
         27:0b:9d:b1:38:55:c9:7d:ae:6e:ed:76:e2:5d:17:d8:e5:c6:
         38:48:04:5e:24:74:5d:59:30:d7:51:31:f7:cc:d0:f3:ae:12:
         1e:db:94:45:ab:53:66:fd:75:e6:52:4f:d4:40:ab:6f:35:ca:
         6d:9f:c2:74:00:8b:04:43:6b:06:13:04:ea:0b:0b:91:f7:45:
         23:7f:2f:ba:25:d2:41:ce:45:a4:a4:53:1c:cd:f3:2c:ff:d7:
         1b:3e:28:83:c2:eb:3f:5c:1c:cf:63:fd:81:2a:1a:e4:c4:4c:
         5a:f4:ac:c5:d7:82:ee:24:3c:78:6a:15:b4:43:a9:de:79:89:
         e4:27:71:90:82:dc:a6:e2:08:f6:6a:1c:18:0d:66:7f:dd:20:
         3f:f1:c6:5e:f6:5f:0c:c8:ea:e4:9d:b1:fe:d8:2c:8a:b7:d7:
         b9:6a:e9:75:da:da:fd:a3:73:4e:87:7f:77:a9:56:96:8e:dc:
         41:9c:29:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----