Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/3c2c26a6-2262-3ed7-a589-49c9e5b41ba1.roa
File:                     3c2c26a6-2262-3ed7-a589-49c9e5b41ba1.roa (raw, json)
Hash identifier:          8KJ8q+/+FxsLWVxuCeZo3HFFRfhcYbDysnFCmD4Ud5U=
Subject key identifier:   EC:F8:D8:5A:94:1A:76:E1:90:8D:BD:E4:D8:87:F0:27:46:CB:73:76
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583D5A95DE1E43711F11ABB51A40
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/3c2c26a6-2262-3ed7-a589-49c9e5b41ba1.roa
Signing time:             Fri 25 Mar 2022 04:00:00 +0000
ROA not before:           Fri 25 Mar 2022 04:00:00 +0000
ROA not after:            Fri 29 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        199.127.232.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:5a:95:de:1e:43:71:1f:11:ab:b5:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Mar 25 04:00:00 2022 GMT
            Not After : Apr 29 04:00:00 2022 GMT
        Subject: CN=a23cfdcc-ff68-4c49-a01e-1d8592cce05b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:95:a3:1b:54:11:7f:0a:e8:a3:0d:0d:d1:cc:
                    27:14:d0:a7:77:04:e4:9e:85:75:25:57:af:5f:cd:
                    81:98:89:29:41:bc:3f:f0:be:cf:8e:e8:48:f4:68:
                    32:d4:18:af:2a:2c:ee:7c:da:99:c7:22:27:5b:18:
                    dc:18:12:52:b5:74:80:88:17:32:1b:a3:85:0a:1d:
                    7d:78:ea:ca:64:40:08:90:33:a3:1c:2c:98:e9:b7:
                    22:79:f8:89:9f:60:99:28:63:6f:d9:d0:86:0b:d3:
                    c0:ac:1e:7e:bc:05:0d:d3:3c:34:c2:4d:93:ab:f9:
                    0d:e5:1d:82:e1:d5:44:44:b1:3b:8b:4f:df:0d:cf:
                    3a:a0:66:a0:f6:75:89:25:e4:40:11:87:50:1b:3d:
                    f2:2a:ca:65:0f:f3:65:e5:45:8f:9a:d9:4e:5d:22:
                    80:9c:08:82:63:24:32:1d:54:d1:f7:72:2d:44:36:
                    b1:c4:28:c8:11:c4:ce:7e:1f:d8:c6:08:71:28:a9:
                    96:06:ad:8b:70:ef:d0:fb:dc:9b:09:26:f4:a8:80:
                    ad:39:7d:dc:10:84:e1:0d:cf:aa:4d:13:d6:a3:23:
                    13:a3:a2:17:12:8c:4f:3c:53:48:46:12:81:09:b3:
                    4a:7e:29:6e:c4:91:7c:3f:b6:83:35:b0:10:42:e8:
                    03:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F8:D8:5A:94:1A:76:E1:90:8D:BD:E4:D8:87:F0:27:46:CB:73:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/3c2c26a6-2262-3ed7-a589-49c9e5b41ba1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.127.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:06:09:a0:6b:70:a2:e2:7e:84:8b:e5:bd:8e:ee:5e:07:c8:
         5c:39:68:6f:f6:45:5d:79:54:e2:3a:17:ed:d5:70:12:2d:5b:
         c6:89:e7:30:10:e6:07:4d:99:0d:4a:5a:da:f7:c2:07:54:4c:
         d1:ea:84:6d:04:12:31:7d:60:f1:86:11:74:9b:3f:22:00:3c:
         af:70:b6:ce:84:25:e2:6a:9e:45:26:20:27:f2:70:3c:9b:67:
         fe:91:ff:68:55:60:3b:9a:e9:3e:50:9b:2c:a5:f9:06:9f:58:
         35:59:2f:af:db:6b:7e:a5:3c:e9:9a:4f:3f:de:59:d7:d2:84:
         87:50:9c:ff:3b:24:5f:75:8a:20:c0:b9:3a:5d:b1:80:2d:13:
         ac:e0:a5:10:6f:26:7b:fa:95:70:30:e0:21:dc:78:f8:18:ca:
         af:34:3a:ef:23:7e:70:f1:be:3d:8f:39:24:12:b5:c9:e6:fb:
         10:d2:61:8d:61:f5:1f:d5:ef:bc:80:5e:76:50:10:c9:56:97:
         02:3e:2b:42:b9:1c:97:f1:1c:3e:02:88:1c:3d:a0:26:ad:93:
         b7:46:9c:df:d2:5c:fd:c0:70:73:aa:3f:44:0a:44:32:59:2b:
         78:e4:db:ed:64:5a:1c:eb:53:5f:de:e1:8d:59:77:eb:41:73:
         f3:b2:77:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----