Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/5375c18e-c337-37c9-adc1-5a3502d59e27.roa
File:                     5375c18e-c337-37c9-adc1-5a3502d59e27.roa (raw, json)
Hash identifier:          e6X8gZImA2NsyeRQZlFK4qWGXbJIHzC9YHAOvuOyAN4=
Subject key identifier:   1B:AB:6C:FB:CF:B8:C7:CE:77:C8:0E:4A:E5:54:74:3E:C1:02:7D:B5
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583DAAC29E2FD541EAB029686340
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/5375c18e-c337-37c9-adc1-5a3502d59e27.roa
Signing time:             Fri 22 Apr 2022 12:00:00 +0000
ROA not before:           Fri 22 Apr 2022 12:00:00 +0000
ROA not after:            Sat 28 May 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        76.223.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:aa:c2:9e:2f:d5:41:ea:b0:29:68:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Apr 22 12:00:00 2022 GMT
            Not After : May 28 04:00:00 2022 GMT
        Subject: CN=c3d0f894-0a7e-4d37-976d-eb85a49615be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:40:58:56:60:9d:3c:68:dc:7d:49:50:ff:ae:
                    16:b6:47:28:2b:ae:ef:bd:c0:17:d1:be:5f:76:89:
                    ba:e1:7e:30:3c:75:92:e1:32:8c:d8:b3:52:03:b3:
                    52:be:af:3d:33:91:a2:d8:5e:27:92:0e:f5:f3:83:
                    27:ca:7d:85:47:5a:43:33:97:9a:cc:b3:fa:4d:4b:
                    b7:71:e1:5a:9e:ff:2c:53:b9:c9:cf:11:03:d6:08:
                    b7:dd:14:43:37:7e:70:5d:f2:56:f4:bb:f6:b1:da:
                    9d:c6:cc:07:96:13:03:8a:f5:45:ec:c1:62:02:df:
                    3f:b5:04:bc:32:01:29:5d:fe:3f:5b:73:45:f2:d7:
                    df:59:67:9b:e7:b7:e6:ee:65:de:2d:5f:e7:73:8d:
                    92:44:4b:72:a8:a4:16:f8:ca:1a:33:29:35:d8:2d:
                    bd:8e:9f:02:be:f1:e1:ac:f8:77:17:b2:28:12:43:
                    3e:9f:6c:20:d9:9c:e2:7d:c6:3e:8d:a5:42:d7:a8:
                    f3:9f:d3:df:12:ac:c8:67:29:f9:19:42:a5:c7:77:
                    ed:d1:85:83:4e:58:a6:0e:8a:64:0f:65:9b:67:dd:
                    5a:d4:93:0d:3b:a0:ac:c8:41:7f:c1:2c:ad:ef:10:
                    af:c7:3a:37:13:35:f1:a1:fc:4b:fa:2b:61:31:36:
                    40:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:AB:6C:FB:CF:B8:C7:CE:77:C8:0E:4A:E5:54:74:3E:C1:02:7D:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/5375c18e-c337-37c9-adc1-5a3502d59e27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:8f:f9:a5:94:d7:a7:e3:cd:3c:aa:31:85:ca:88:64:7e:a7:
         b0:17:c3:14:19:56:d5:30:c3:7a:fd:4f:90:cd:87:59:6d:c1:
         fb:c4:3e:2e:95:52:a1:5d:3d:05:f6:b9:6b:12:ab:af:08:cb:
         9c:78:3d:05:d8:68:a4:56:29:fb:2b:15:11:63:1f:ef:7d:6a:
         e7:2a:8f:c0:48:1d:5d:4c:60:2c:59:9e:99:43:a7:6b:e3:bc:
         2e:82:ea:ee:33:48:3e:0b:cc:8d:fd:21:56:0d:38:e6:17:77:
         b6:cd:8e:3c:83:52:10:bd:42:d9:9c:94:1e:50:dc:1c:5e:16:
         f7:06:3a:f5:ff:e9:b6:34:99:09:15:3e:98:f8:8a:d8:c5:91:
         9c:db:d7:d2:d5:fb:34:d3:ef:a9:eb:8d:da:d8:00:14:d9:39:
         03:18:77:a3:9e:b3:47:09:ec:ce:f9:e0:1d:a5:15:dc:cf:c6:
         6b:6f:4b:c7:e9:95:20:8c:b0:fd:2e:c0:22:8b:81:c0:26:2f:
         8b:06:2b:f9:a2:c6:f8:22:3c:45:eb:a4:d5:86:37:7f:2f:53:
         c3:fe:63:40:7d:5b:23:43:98:86:44:ce:8f:05:81:6d:85:59:
         a5:0c:2f:e9:69:23:62:a5:f3:0c:bc:0c:3d:5a:63:5f:ad:1c:
         7b:6a:98:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----