Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/53b30428-5824-3998-92ac-f050707ecd3e.roa
File:                     53b30428-5824-3998-92ac-f050707ecd3e.roa (raw, json)
Hash identifier:          rpBt3BDjFAJEd5ifVmD1rCWs3tIymjHTlGbkZqOXkU0=
Subject key identifier:   AB:78:45:F1:54:F2:21:C4:1D:54:16:C4:A7:EB:C4:27:5F:AE:1A:95
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F432858401BFDCF9C67FD76681A94B880
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/53b30428-5824-3998-92ac-f050707ecd3e.roa
Signing time:             Fri 02 Dec 2022 12:00:00 +0000
ROA not before:           Fri 02 Dec 2022 12:00:00 +0000
ROA not after:            Sat 07 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        199.127.232.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:1b:fd:cf:9c:67:fd:76:68:1a:94:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Dec  2 12:00:00 2022 GMT
            Not After : Jan  7 05:00:00 2023 GMT
        Subject: CN=ce74477e-0f17-4bc2-9eda-ea12b340a992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d6:9b:84:cb:ba:20:53:ed:11:d8:68:d9:23:
                    05:bf:05:c2:6f:f6:f7:34:6d:cd:54:58:0c:90:6e:
                    8b:ef:4f:a4:2b:48:98:68:46:3f:0d:73:28:7e:32:
                    58:aa:76:f3:2f:9b:34:94:eb:27:02:4e:f4:f8:ff:
                    12:40:75:31:a7:c1:4f:bc:8c:49:63:c5:e4:3e:f6:
                    41:68:0e:6a:7b:01:00:01:ff:21:39:3a:4c:ff:dd:
                    dd:86:c2:6b:cf:fe:fa:fd:40:eb:66:46:97:ee:58:
                    f2:25:56:50:e2:be:24:60:99:09:40:72:b1:09:95:
                    8e:44:63:19:e9:a4:91:17:91:35:5a:4f:6b:ce:17:
                    d6:2f:c2:c6:b5:05:b8:e2:04:3f:d1:cc:ca:58:85:
                    ce:b0:d0:d4:10:c0:ec:f8:7f:8c:98:d3:7a:10:ba:
                    83:ae:5f:d6:2b:5c:4a:d9:55:a0:63:80:7b:7c:74:
                    1d:33:e7:ee:59:a6:73:96:14:a1:db:ef:8d:da:00:
                    6c:ba:c5:8b:57:27:77:a1:ce:9f:67:c0:55:7a:be:
                    96:a8:c3:0b:7f:f6:bd:41:bf:a8:f2:2e:48:fd:f7:
                    4e:cd:a3:69:3e:8f:18:b1:c7:e4:50:d2:cb:93:45:
                    1c:ff:ec:7e:e2:80:6c:0a:65:2b:8f:86:61:f7:44:
                    da:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:78:45:F1:54:F2:21:C4:1D:54:16:C4:A7:EB:C4:27:5F:AE:1A:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/53b30428-5824-3998-92ac-f050707ecd3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.127.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:f9:7a:b2:ed:5e:ca:57:d0:e0:30:6d:2d:8a:a7:ae:14:ff:
         9a:8c:df:bb:92:11:84:d7:de:2d:30:76:31:3b:37:c0:64:b4:
         57:5d:76:52:71:a8:ea:2d:ed:37:ab:0b:f9:82:80:80:c6:59:
         a1:2d:09:d4:67:39:e1:c2:01:84:33:ac:9d:50:06:65:53:98:
         9c:cd:62:3a:10:97:93:a0:bf:53:57:6a:fa:2e:75:dc:5e:a8:
         e5:e8:a5:ac:62:29:2b:ad:8d:76:a4:6f:74:0b:73:19:c3:d3:
         21:ee:c5:c3:d5:3c:28:4f:3b:f3:7a:45:50:c1:58:25:54:e2:
         57:94:d9:4a:24:da:88:c1:8b:c7:59:32:06:25:77:8e:72:4e:
         7e:25:36:d2:24:4d:cb:bb:57:2b:ea:48:4e:12:e3:57:38:5e:
         d5:26:89:5a:ac:00:45:95:51:1f:df:3f:ba:a4:af:94:c3:77:
         70:90:e7:96:fa:54:71:68:14:b0:b0:61:5a:c4:bd:50:3a:ab:
         bf:e6:6e:ff:de:6a:d9:18:7d:e5:47:4e:1c:d3:a6:3d:c3:97:
         d0:8e:26:5f:86:87:8d:c3:7f:46:e4:b0:4e:a9:65:31:ab:9b:
         6d:c5:d9:77:6d:7d:9e:46:c9:d1:39:4b:5c:02:55:2a:6e:34:
         31:48:5e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----