Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/315cb414-66f1-32b8-a75b-ca119ac1f4f4.roa
File:                     315cb414-66f1-32b8-a75b-ca119ac1f4f4.roa (raw, json)
Hash identifier:          IjBzl8PWgW7dEvft4FH+uodKVIXDSJeViplfoHwoVtk=
Subject key identifier:   93:7B:85:82:D4:FB:94:45:38:CF:6D:4C:7B:3C:71:89:F1:9A:B5:FC
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F432858409216B6D0A880868A95A8099C
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/315cb414-66f1-32b8-a75b-ca119ac1f4f4.roa
Signing time:             Fri 13 Jan 2023 12:00:00 +0000
ROA not before:           Fri 13 Jan 2023 12:00:00 +0000
ROA not after:            Sat 18 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        76.223.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:92:16:b6:d0:a8:80:86:8a:95:a8:09:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Jan 13 12:00:00 2023 GMT
            Not After : Feb 18 05:00:00 2023 GMT
        Subject: CN=00357e0a-3136-4422-9b32-244028b76db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:81:92:1e:21:1b:92:79:a3:98:c5:b6:60:a7:
                    bd:c5:cb:63:b0:ad:82:15:37:df:bb:53:e8:09:08:
                    f2:c7:70:8e:29:bb:3b:2b:f9:6a:20:cf:18:f0:c8:
                    7a:27:f6:a4:24:83:e8:b6:69:bb:98:a5:cb:68:6f:
                    87:70:99:c0:6b:b4:77:48:87:96:a4:0b:df:f0:ee:
                    97:86:a6:9f:21:df:54:99:57:17:50:92:96:a1:8b:
                    1f:29:d9:77:57:19:77:b1:cf:1b:ff:29:24:ce:48:
                    71:ef:d6:86:ef:2c:fe:d3:18:ad:7f:db:3c:88:f7:
                    9c:dd:3e:75:b8:45:01:1b:32:a0:c9:fd:9d:60:c3:
                    35:13:79:8e:46:3b:2b:28:d0:51:2c:ed:8d:43:aa:
                    e5:8a:47:d3:00:d7:db:ee:31:3d:6e:29:77:d9:1b:
                    23:e9:ee:32:b8:64:fc:95:30:89:19:d8:0e:27:ce:
                    4f:c8:68:5d:eb:79:bb:54:c3:76:6a:2c:56:0b:77:
                    0d:2e:01:c6:dc:c4:69:fe:dd:8a:9f:65:b9:08:55:
                    d7:49:d9:35:56:07:aa:8d:a2:32:70:0d:ef:9c:fe:
                    91:f6:62:ba:ed:40:51:1b:a4:a5:fd:a0:a6:51:e9:
                    32:18:7c:60:b5:d9:87:90:61:95:0e:64:a0:fb:ee:
                    5b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:7B:85:82:D4:FB:94:45:38:CF:6D:4C:7B:3C:71:89:F1:9A:B5:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/315cb414-66f1-32b8-a75b-ca119ac1f4f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:8e:c0:68:07:d7:0b:32:94:3a:02:03:5a:90:94:9d:2b:ca:
         bb:d3:c5:a9:11:08:09:46:a4:aa:35:14:9d:b0:64:75:3c:77:
         13:16:f9:60:d3:f2:48:a1:77:86:2e:83:6e:f4:9b:29:ef:e2:
         5d:04:d3:37:6e:db:37:e6:fc:b6:ce:ff:1d:72:7d:76:0f:75:
         18:08:cf:5a:fa:f0:d7:73:fd:84:c6:2b:af:7b:16:e4:48:f1:
         df:f2:39:e1:66:8a:e1:a6:e0:af:7e:47:6f:0c:17:2f:22:32:
         38:62:8d:23:4d:59:3d:2a:0a:75:e0:3b:be:43:fe:66:a8:09:
         a5:de:73:ed:8f:2b:67:d6:38:bc:b9:78:19:79:8b:8b:c8:1a:
         c1:7e:ae:60:0f:69:3b:1f:2e:83:2f:43:07:9f:c7:24:09:90:
         c4:fc:21:15:35:b7:04:3e:a0:98:f9:fc:79:b8:ab:05:7b:4e:
         82:41:64:5f:3d:97:8d:3f:c4:b3:39:a6:5b:fc:76:ee:6a:89:
         00:67:77:a6:1f:9b:1c:32:f8:80:1e:00:bb:db:07:70:38:ba:
         b6:1c:2d:76:d9:4e:c9:1d:65:9c:46:a5:78:d0:7d:bd:f9:8b:
         1f:b0:55:d4:3f:1f:84:b2:a4:98:f3:a5:fe:b1:43:30:ac:c5:
         6c:3e:0e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----