Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/3b148d31-1992-358c-b0f5-1193fc975a8a.roa
File:                     3b148d31-1992-358c-b0f5-1193fc975a8a.roa (raw, json)
Hash identifier:          KSY6fypmObEouIhL3pbdcAmQvvwI0YiNl4DOGNomyvU=
Subject key identifier:   09:5E:9F:A8:BB:3D:4A:64:96:2F:A6:92:56:2E:14:F0:61:5F:EA:A0
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583E4736864AE945D51C20A2F400
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/3b148d31-1992-358c-b0f5-1193fc975a8a.roa
Signing time:             Fri 17 Jun 2022 12:00:00 +0000
ROA not before:           Fri 17 Jun 2022 12:00:00 +0000
ROA not after:            Sat 23 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        76.223.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:47:36:86:4a:e9:45:d5:1c:20:a2:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Jun 17 12:00:00 2022 GMT
            Not After : Jul 23 04:00:00 2022 GMT
        Subject: CN=92823e99-9e98-43ef-9c76-8adf7e85b068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2b:0d:b3:c9:3e:8c:32:29:af:0c:19:58:e1:
                    38:7c:86:ea:87:10:d3:49:93:59:61:6d:b4:13:47:
                    eb:d1:c4:39:39:25:9b:ae:45:26:85:49:bb:e8:00:
                    04:d4:f9:ae:4f:9e:2e:ba:10:83:8c:9c:a4:0b:60:
                    98:d4:4e:a2:9b:75:80:02:53:14:66:09:0c:a2:8d:
                    81:b5:da:fc:36:05:19:8f:fd:dd:2a:73:b5:7b:fa:
                    42:b5:6c:fa:e9:eb:c8:11:7a:1f:47:48:a1:e6:43:
                    d8:79:d9:0e:f7:87:e8:d6:dc:a4:c6:9c:d5:5f:08:
                    93:4f:2e:86:f7:5c:f7:6d:0f:a1:81:a6:83:83:5a:
                    3a:2e:a0:29:7c:47:2b:ff:6f:c3:01:ec:00:95:3f:
                    d7:4d:06:94:9d:fb:3d:4d:7d:3d:96:d6:42:71:38:
                    41:46:79:ee:f5:7a:d3:ca:35:ad:4c:50:ed:83:68:
                    da:4e:1b:7a:15:73:dd:f8:46:90:6f:12:d3:24:28:
                    8b:33:eb:fe:e4:fe:74:d6:ae:f7:ff:24:b2:01:e2:
                    9a:53:7e:67:bb:56:34:ce:2a:43:e3:01:1c:3d:fe:
                    fe:97:9e:0e:1a:10:7c:75:b4:33:28:5c:58:46:ce:
                    27:dc:82:6b:cb:b8:3c:6f:e8:6d:09:ae:14:f8:4b:
                    b8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5E:9F:A8:BB:3D:4A:64:96:2F:A6:92:56:2E:14:F0:61:5F:EA:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/3b148d31-1992-358c-b0f5-1193fc975a8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:c4:96:27:df:5b:3e:8c:ac:37:38:e9:ec:4a:4f:94:29:01:
         59:ff:bc:0c:f2:41:7c:96:8a:a6:8c:1c:18:39:1c:de:dd:bd:
         40:3a:bf:bf:16:e4:e8:85:88:b6:3d:02:9a:5b:ac:89:a6:90:
         9d:1c:1b:63:6e:48:e7:8b:92:f9:9f:bf:62:ab:b9:57:0b:bd:
         cd:64:ac:47:88:f3:01:77:90:a1:8d:fe:12:f1:17:5d:50:32:
         b9:36:f4:d8:20:43:e0:d5:4a:6e:33:0b:07:06:f1:b5:10:c4:
         8b:30:19:3a:af:4f:4f:82:48:64:57:88:23:b3:e1:01:66:3e:
         31:1d:9c:3c:21:fe:38:17:94:d9:57:b8:7a:b1:33:4d:2f:a7:
         43:4a:95:92:d8:ad:6c:e6:54:81:ab:9d:8e:e3:bc:3c:06:71:
         1a:9f:55:25:02:b2:c0:3f:1c:b2:73:13:3a:06:f4:e6:bd:ef:
         ae:47:4a:5e:d7:db:67:40:4e:6f:55:b2:df:43:a6:33:0a:29:
         62:aa:7d:47:e4:a6:8c:09:cb:5f:f6:d4:1f:6c:4f:7d:f1:f2:
         88:16:16:f1:36:27:4e:5f:b7:18:eb:77:7c:8c:11:cd:44:36:
         9f:b4:d2:28:8e:ee:f1:74:d5:fc:f9:1e:68:e3:89:81:50:dc:
         f7:4c:dd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----