Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/5221c9b2-7f57-3e26-802f-d511b3eaa836.roa
File:                     5221c9b2-7f57-3e26-802f-d511b3eaa836.roa (raw, json)
Hash identifier:          8Ry1xeT/IcD8CxvC4fmAogcgFvile5s01OoZjpkv9rc=
Subject key identifier:   24:50:9D:00:8A:95:7B:37:85:28:5A:ED:7A:F9:E4:51:0A:D4:74:FC
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583CE4C7D2C73DAD8BF1EA85CB80
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/5221c9b2-7f57-3e26-802f-d511b3eaa836.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        76.223.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e4:c7:d2:c7:3d:ad:8b:f1:ea:85:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=13067fb9-f719-476c-bc11-54c9e85775c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fc:85:0e:68:75:f8:aa:1c:fd:81:c9:b8:3d:
                    9b:1d:f3:20:b8:31:5a:de:b3:00:bb:f3:4e:c7:1c:
                    92:48:10:2d:d7:6c:e8:12:96:5b:10:0a:20:35:08:
                    dd:f3:60:b7:7b:ef:d5:47:47:0f:67:1e:0a:bf:17:
                    de:a9:8a:bd:55:29:0e:d7:0c:c5:c8:f3:75:a6:1d:
                    99:ba:43:20:b9:69:59:be:91:5f:07:d0:09:7d:1d:
                    ff:03:7d:47:50:e6:32:b3:7e:cb:c9:46:d9:14:47:
                    e7:0a:80:30:98:08:6b:1e:06:71:92:de:94:0f:a9:
                    03:cd:86:69:f8:01:94:43:ad:43:04:51:39:42:71:
                    9a:6e:de:33:b7:21:3f:03:af:f4:1e:4f:2d:9e:d6:
                    ae:a8:0b:c3:b1:67:28:3e:64:6d:5c:54:52:63:f6:
                    74:55:29:bc:8f:51:66:fe:ab:3e:7e:40:b5:05:72:
                    2d:29:12:a3:5b:b8:e9:6f:4b:26:64:97:f7:4d:93:
                    90:06:38:dd:15:d6:d4:8c:37:c8:07:6f:c7:db:ea:
                    18:28:ea:83:ce:16:1b:ce:5a:f5:9e:29:db:50:9a:
                    e9:f0:5c:fc:d3:bc:9c:e0:30:14:a5:22:fa:01:92:
                    18:f0:af:45:ee:b4:bc:ab:9b:4e:ea:bb:05:20:cc:
                    d2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:50:9D:00:8A:95:7B:37:85:28:5A:ED:7A:F9:E4:51:0A:D4:74:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/5221c9b2-7f57-3e26-802f-d511b3eaa836.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:13:00:cf:a5:42:86:63:2c:b7:f7:f1:75:35:d2:78:b0:e2:
         0b:82:25:41:c9:a8:7a:9c:d7:49:55:c8:38:39:c1:3f:b4:05:
         44:ac:e1:6f:fb:54:ba:3b:ab:c8:ba:8d:dc:3a:6a:4a:de:0f:
         ca:7a:90:94:8d:c1:69:c2:05:f0:b6:90:d4:28:92:95:05:21:
         f1:7c:64:9d:ac:67:11:9e:42:9a:cc:e1:bd:81:76:3e:fb:d9:
         07:ea:9e:4d:95:f2:8f:8f:3d:da:36:3d:b6:46:70:60:ef:8a:
         f0:1d:40:cf:f8:f3:0a:17:fe:dc:05:ea:be:1d:49:02:6c:08:
         0c:31:55:4e:95:bd:69:28:1d:50:0e:f2:95:91:e1:b9:c7:85:
         7d:1b:0b:b7:8e:5b:8e:38:b1:3a:4b:4f:f3:87:f0:a7:c5:12:
         7d:ab:14:5f:24:28:4e:2a:7d:2d:70:82:01:d2:7e:24:63:f5:
         24:52:e5:16:2f:9a:02:f2:87:73:da:56:8c:c9:50:29:81:2b:
         bf:08:59:33:d8:e6:2d:d9:5d:16:8c:c5:1d:88:87:0d:2b:56:
         e6:30:ca:78:a5:a0:c8:b6:25:a0:50:17:03:b2:03:c9:83:75:
         8b:60:cf:0f:72:06:ff:67:a0:fb:f6:95:e2:4e:81:81:b4:9d:
         93:95:31:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----