Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/608b864e-c698-3917-9cf2-96f86d54c92f.roa
File:                     608b864e-c698-3917-9cf2-96f86d54c92f.roa (raw, json)
Hash identifier:          CXgFN0K0J8FbBHfZ7qfbpqjPJ14Syhi3EmqjbBEF9Fc=
Subject key identifier:   D2:14:06:98:F5:3D:10:EF:1A:BF:13:31:24:2D:B3:3F:A4:BA:C0:3B
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583E962AE40D355F602637F3E980
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/608b864e-c698-3917-9cf2-96f86d54c92f.roa
Signing time:             Fri 15 Jul 2022 12:00:00 +0000
ROA not before:           Fri 15 Jul 2022 12:00:00 +0000
ROA not after:            Sat 20 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        69.169.224.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:96:2a:e4:0d:35:5f:60:26:37:f3:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Jul 15 12:00:00 2022 GMT
            Not After : Aug 20 04:00:00 2022 GMT
        Subject: CN=20613ce2-e091-42f4-a2cf-3c3694a3a8cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1b:42:62:02:76:16:46:5c:69:f3:f7:27:ff:
                    29:ca:4b:38:65:7c:04:f4:32:0f:df:ea:07:c0:26:
                    44:32:42:27:cd:89:05:1c:69:19:88:98:a8:a2:e5:
                    d2:64:8f:0a:25:d5:35:da:45:f3:eb:27:cf:fa:3d:
                    01:15:72:45:20:b6:14:60:31:93:8e:6e:74:3c:5c:
                    dd:3d:ac:0b:33:43:56:ac:ea:b5:a1:64:f3:0b:82:
                    6d:43:69:ae:59:49:19:65:79:b2:08:ac:81:16:69:
                    0b:35:1b:5a:6e:58:6b:32:89:26:17:65:00:75:9e:
                    33:52:7f:04:95:53:9d:99:29:34:fc:66:e3:5f:94:
                    00:64:00:7c:14:c6:2a:86:bc:82:59:86:b3:45:04:
                    c6:03:aa:2d:a4:20:ea:c0:cb:9b:c7:03:29:1a:ee:
                    32:25:13:4f:0f:b1:42:e4:ab:95:34:88:4f:bc:d4:
                    bd:eb:4e:15:33:fc:8b:02:48:18:ea:46:48:82:f9:
                    f1:01:dd:39:7c:1f:b2:c6:8d:e9:3a:a0:6c:3a:7e:
                    27:35:49:48:a9:8e:14:4b:d5:93:90:0e:8f:e3:43:
                    d9:00:6e:c3:65:37:90:fe:a7:53:bd:3d:2e:84:34:
                    ff:b4:0e:66:0f:04:bf:61:4d:4f:a0:7b:24:7f:00:
                    b1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:14:06:98:F5:3D:10:EF:1A:BF:13:31:24:2D:B3:3F:A4:BA:C0:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/608b864e-c698-3917-9cf2-96f86d54c92f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.169.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:7c:ef:f6:e9:e7:2a:80:55:fd:d3:a9:a3:4c:6f:61:6e:bd:
         bf:36:5a:23:53:c3:0b:65:5b:3f:cb:e9:f8:a3:6e:76:6f:de:
         82:01:1a:01:1f:c1:c6:e0:60:f8:3e:bd:3b:b2:1e:fc:d1:43:
         7e:c6:16:8f:5b:a9:e5:5d:25:b0:fe:fb:4e:43:9b:bf:fd:08:
         7a:98:e6:f1:45:23:66:14:ad:d9:b9:0e:fb:b0:87:05:e0:2f:
         a8:8b:91:d8:58:2d:80:8b:5f:26:1e:63:be:82:43:f1:85:90:
         33:96:ae:ea:9e:fb:b8:87:96:c6:14:3e:ec:a2:a5:ee:69:8c:
         7e:fc:b8:55:3e:61:8d:6c:71:4b:f6:40:ce:95:c2:4b:9a:57:
         ee:e0:e0:fb:70:18:1d:91:81:78:da:e3:8e:61:f8:4b:13:22:
         15:55:09:69:73:e8:4b:1c:54:46:d4:c6:4c:a2:31:f6:e1:09:
         b4:aa:21:c2:70:ba:60:e2:8d:40:b6:55:c0:2a:6b:ae:20:af:
         0e:a9:7b:47:70:15:ac:6c:da:94:44:26:bf:d3:36:74:9c:d4:
         8c:a1:13:11:eb:70:76:70:d7:ad:f7:0a:e6:4c:df:0d:1a:c3:
         c0:14:8b:d2:d7:e5:e7:75:05:4b:ce:f3:22:44:c7:a7:f0:db:
         bd:77:1f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----