Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/48c5e942-3a2c-342a-ad76-db24ca9c66d2.roa
File:                     48c5e942-3a2c-342a-ad76-db24ca9c66d2.roa (raw, json)
Hash identifier:          1QvcPoVWya4wDZQ2jsDMEsg7+gEJ/8T/D+5+yHewCJc=
Subject key identifier:   49:C2:CE:C8:1F:86:08:F2:84:0E:08:3A:62:3E:2E:7C:EC:2D:FC:04
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583DF9B6A82134703E08AE8110C0
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/48c5e942-3a2c-342a-ad76-db24ca9c66d2.roa
Signing time:             Fri 20 May 2022 12:00:00 +0000
ROA not before:           Fri 20 May 2022 12:00:00 +0000
ROA not after:            Sat 25 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        69.169.224.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f9:b6:a8:21:34:70:3e:08:ae:81:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: May 20 12:00:00 2022 GMT
            Not After : Jun 25 04:00:00 2022 GMT
        Subject: CN=85c817c3-7684-46d0-9d78-394db1e3b94b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:20:88:b7:5f:5f:b8:de:f5:c1:81:23:21:e7:
                    49:6a:a6:16:dc:b8:bb:a7:c9:fb:0c:e3:b4:e4:6e:
                    d6:48:3f:ff:67:8b:4c:e6:76:e2:f0:0c:8e:d7:b0:
                    21:87:8e:27:21:73:b6:26:84:82:40:7c:b1:4a:19:
                    cf:b3:ba:68:05:03:fe:97:b0:05:05:08:d3:fe:21:
                    ed:53:63:77:45:88:5d:85:1b:ff:a8:29:e3:f8:f3:
                    2e:f6:d4:80:6e:4f:dc:cd:2c:2f:ad:4c:37:8e:ff:
                    b8:1c:e9:e8:c7:58:90:6b:20:16:25:f1:84:f3:c4:
                    bc:5d:23:d4:aa:c3:78:5a:e9:0e:6a:c4:ae:a1:41:
                    da:0d:f3:94:ee:e9:7c:2c:09:75:72:b8:35:a9:44:
                    cd:64:6f:fe:48:dc:39:e3:0e:9b:5b:4d:f6:1f:a5:
                    6c:90:25:27:fe:96:ad:c2:44:c4:e5:9e:63:3f:6b:
                    fa:04:2e:9e:3a:7e:a3:98:8e:a0:5e:1a:cd:fd:ea:
                    13:ca:8f:59:8b:f0:dd:5b:a2:d5:88:13:11:8f:bd:
                    10:79:30:3d:c5:73:40:72:3d:32:01:5c:d5:52:09:
                    37:89:64:d2:b2:fb:a6:3f:2f:e5:6e:fd:e0:c2:66:
                    eb:38:e5:fb:11:f6:41:29:ac:80:11:68:01:9a:5b:
                    17:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C2:CE:C8:1F:86:08:F2:84:0E:08:3A:62:3E:2E:7C:EC:2D:FC:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/48c5e942-3a2c-342a-ad76-db24ca9c66d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.169.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:29:79:47:8d:21:20:a4:11:bc:53:4f:bb:83:59:c3:4c:63:
         0a:ce:c1:12:c0:1a:11:0b:9d:cc:30:d3:f8:c0:b2:5f:a8:a7:
         c2:5a:1a:68:27:44:34:8f:9c:70:16:bc:41:0a:4c:4b:50:8c:
         0a:95:5d:5f:79:5b:6e:92:c9:1f:5c:8a:d7:7f:ef:f2:a4:00:
         cd:e0:e5:5c:28:c8:ba:c6:8e:ad:8f:2d:e9:05:c1:51:65:d7:
         e3:09:86:67:04:2c:f4:a8:9f:b8:2a:b7:0a:e3:27:2e:fe:85:
         1e:fc:63:2c:62:fc:fd:f6:b1:a1:8b:19:df:6c:c3:99:b9:92:
         08:d5:12:4f:d0:ff:ad:07:5c:3a:aa:ec:55:cc:6a:21:8d:0e:
         23:a7:71:6b:ea:b9:8c:be:94:d0:83:02:46:58:4a:d6:86:39:
         a1:f6:eb:65:ed:21:59:9d:d0:f5:5f:3b:b6:fd:df:cb:c1:65:
         d9:b4:61:db:9b:d4:b0:ea:58:4e:5c:22:3c:0b:6f:ca:94:ee:
         41:81:04:ee:f1:76:82:42:0b:6b:88:df:dc:bd:77:34:b2:f0:
         eb:0b:b4:df:00:d9:d9:d4:59:f1:77:8e:cc:1a:ac:0c:c2:b7:
         05:28:66:b5:11:5a:b6:44:44:42:01:2e:36:56:6f:e3:f8:82:
         a9:80:3b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----