Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/45f8d369-1915-3d41-85b9-c93392a90ab7.roa
File:                     45f8d369-1915-3d41-85b9-c93392a90ab7.roa (raw, json)
Hash identifier:          RuPCcJpxN2RHCYQvaDlPOH1w2Y30E3DQYTJbUC4Wx1s=
Subject key identifier:   FF:EA:8C:5B:9F:4D:57:86:C6:46:A9:B9:ED:29:42:8D:39:38:5D:56
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583F7CEBBDED1860F85556F775C0
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/45f8d369-1915-3d41-85b9-c93392a90ab7.roa
Signing time:             Thu 06 Oct 2022 12:00:00 +0000
ROA not before:           Thu 06 Oct 2022 12:00:00 +0000
ROA not after:            Fri 11 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        199.255.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:7c:eb:bd:ed:18:60:f8:55:56:f7:75:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Oct  6 12:00:00 2022 GMT
            Not After : Nov 11 05:00:00 2022 GMT
        Subject: CN=593425c2-d418-4a64-8a1a-fcacb02e3b0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6d:9e:8d:5e:6c:c8:cb:84:19:b9:10:3e:2c:
                    0b:5f:5f:1c:4a:ff:05:1e:9c:b7:5b:ba:b1:66:cf:
                    89:5f:18:69:ca:7c:e2:1a:7f:58:8e:38:02:39:be:
                    0d:e7:e5:cf:25:8f:87:42:fc:fd:9d:2c:66:02:0f:
                    fc:19:4a:16:f0:75:5f:1b:e8:ea:bb:fa:59:a9:95:
                    4d:05:9c:47:91:66:b4:29:21:34:be:de:65:9e:4d:
                    f6:5f:4c:8b:e2:57:a8:03:ac:63:4d:a5:67:7a:70:
                    8e:e6:a2:86:74:b8:79:0a:23:0f:31:80:8f:66:83:
                    b7:46:bf:3d:3e:39:36:47:90:4f:9d:fe:29:b6:cc:
                    9b:ab:1d:83:6e:ae:e6:d5:ee:1a:73:61:a0:b6:d7:
                    0f:36:c4:44:7f:73:b6:3e:de:65:a1:e5:28:35:c8:
                    ee:21:f3:9a:98:e6:e2:6a:d3:61:df:99:98:a5:f4:
                    67:9e:77:73:8f:6a:e9:f9:ec:fb:02:bd:bf:76:b7:
                    a6:80:29:44:b5:60:6d:b0:91:7c:02:60:f1:ee:06:
                    da:71:67:e3:d2:c1:26:b9:ef:34:04:ac:12:5b:68:
                    d0:c0:c3:68:d8:ef:d9:77:b2:0c:51:f4:7d:00:11:
                    44:35:8b:2a:fd:7b:26:28:25:de:e4:f1:75:d9:e7:
                    74:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:EA:8C:5B:9F:4D:57:86:C6:46:A9:B9:ED:29:42:8D:39:38:5D:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/45f8d369-1915-3d41-85b9-c93392a90ab7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:95:56:3c:e3:e8:0f:4a:69:94:3a:32:b0:b4:cb:fa:c1:27:
         5b:c1:30:f6:08:b9:f2:d9:d4:9c:0c:6f:ca:e3:9f:f0:87:be:
         17:00:2e:ba:19:43:2b:27:4c:45:04:85:6f:f1:71:e9:bf:56:
         e0:a7:c6:b6:d7:e5:ba:3c:a3:ed:82:a4:63:8a:3f:69:d4:bf:
         48:2a:23:19:e6:c4:77:e2:2a:6f:dc:f1:9c:c8:86:a6:80:91:
         3c:39:4e:98:ec:62:11:6c:07:09:2d:ab:f4:52:db:41:78:42:
         63:e1:45:8e:39:8a:0e:05:2d:11:93:d6:fd:60:10:13:19:b9:
         c0:59:16:c1:fa:5a:e8:3c:0e:b0:80:91:73:8b:5e:39:08:81:
         83:6a:19:16:71:ce:80:ec:d1:a0:59:2e:c7:c7:0f:af:7d:7f:
         10:dd:ff:1c:e6:2b:62:30:80:be:40:26:11:4d:ed:a5:f7:4b:
         1b:66:b7:4e:f9:dd:d6:56:17:71:f7:5c:f4:e7:47:ec:9e:17:
         78:47:e5:da:98:c5:bf:58:be:1b:73:93:d5:13:b3:10:bf:63:
         32:3e:26:4f:13:bb:b8:e8:c4:d4:50:34:36:20:ee:5f:3b:1d:
         66:df:4d:14:22:ce:b1:4e:36:e1:5c:20:33:4a:b0:8d:83:0e:
         7e:1c:ac:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----