Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/6fec61b3-77b1-36aa-9821-a1f136b7d128.roa
File:                     6fec61b3-77b1-36aa-9821-a1f136b7d128.roa (raw, json)
Hash identifier:          fiGNmXeBHIiEHg711FheI7Wyjro8eOBUbafhOwD10iI=
Subject key identifier:   FC:D8:68:D6:75:EE:BD:9D:DE:65:81:78:84:B4:33:56:6F:C7:DA:AD
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F43285840678AF374AE63FBC8539D0840
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/6fec61b3-77b1-36aa-9821-a1f136b7d128.roa
Signing time:             Thu 29 Dec 2022 12:00:00 +0000
ROA not before:           Thu 29 Dec 2022 12:00:00 +0000
ROA not after:            Fri 03 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        199.255.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:67:8a:f3:74:ae:63:fb:c8:53:9d:08:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Dec 29 12:00:00 2022 GMT
            Not After : Feb  3 05:00:00 2023 GMT
        Subject: CN=cee96144-5288-431c-a564-5155a103f23e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6f:94:67:ad:16:26:0e:98:0b:0b:a9:91:8d:
                    d3:e8:60:a0:89:20:dd:68:1f:66:96:04:c7:e5:71:
                    0e:94:83:c9:2f:cd:f0:92:4c:72:b8:e5:34:c0:91:
                    c5:50:d3:39:99:3e:96:1f:8b:3e:3f:18:14:50:a1:
                    f1:3b:de:20:27:51:e3:cc:1d:e0:8d:4e:de:5e:72:
                    4d:60:39:6d:93:1a:e9:e9:bb:26:fa:12:67:29:10:
                    5e:84:f2:dc:19:2a:08:fc:9d:a1:f6:94:d3:6f:81:
                    0b:4d:8b:fb:79:ff:22:c4:a8:05:c8:57:4e:c5:82:
                    99:ac:79:4a:99:be:a3:d8:2f:2e:99:0c:63:ae:e0:
                    9e:0e:85:e9:7f:84:08:3d:5a:e4:39:04:0e:31:c0:
                    d9:ed:81:7f:21:7b:95:d6:ac:35:b2:8d:05:2b:c4:
                    bd:8b:47:51:68:6f:f3:86:79:b8:a2:b2:c1:d3:f7:
                    ab:6d:d0:69:77:cc:01:a8:d9:1d:1f:cc:ed:c6:30:
                    f4:4d:6d:a4:b5:f1:b3:d6:60:cb:6a:9d:5e:28:39:
                    d4:05:40:0d:85:ba:29:5e:03:53:c9:11:94:7a:29:
                    70:05:fe:d2:93:91:0f:82:95:6e:df:0b:d6:32:cf:
                    70:72:40:5f:77:f7:0c:4b:df:59:be:1f:9f:61:89:
                    a3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D8:68:D6:75:EE:BD:9D:DE:65:81:78:84:B4:33:56:6F:C7:DA:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/6fec61b3-77b1-36aa-9821-a1f136b7d128.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:30:f1:c0:07:4a:fa:d3:5a:07:45:99:13:6e:41:35:3c:72:
         cf:69:12:2f:f2:fc:f2:34:be:af:81:3e:1b:f6:18:71:ae:63:
         97:17:eb:71:39:51:37:e9:91:e6:18:14:8b:ff:bc:85:40:0a:
         15:75:c4:12:4f:25:0b:02:af:f7:05:3b:a8:7f:be:c0:3f:75:
         09:4d:d6:80:02:87:a5:73:37:a7:16:bd:76:d0:06:cf:81:cb:
         8b:32:7f:19:ed:78:f7:8e:02:a3:0d:18:6b:71:b4:e7:c3:9c:
         64:14:0e:ba:be:9b:be:a7:1f:2c:f4:a1:60:04:49:a7:28:8a:
         f5:7b:ee:f8:85:c6:d7:82:f0:48:74:3c:06:fa:54:79:e0:fb:
         d2:32:ea:31:eb:a8:f2:37:9b:c2:df:37:78:73:ab:ad:f0:d5:
         a5:c3:66:d1:17:ec:6c:0a:14:de:e9:4c:9c:d1:c4:0d:49:d6:
         28:fe:96:08:84:47:a3:98:fd:57:c3:c4:9a:f4:ff:b8:92:22:
         d2:77:b6:d6:15:bc:1c:e6:ad:b9:40:6b:2e:60:d4:67:e9:31:
         bc:22:2b:ad:86:b4:13:85:38:79:7d:40:be:3a:10:92:30:5d:
         c2:8e:bb:b6:8b:cd:bb:0c:40:6f:bb:bc:03:2c:ef:06:20:30:
         77:ba:c5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----