Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/740bc83b-dd87-34b1-b817-03a07e236180.roa
File:                     740bc83b-dd87-34b1-b817-03a07e236180.roa (raw, json)
Hash identifier:          EkRTXOp5p+G64PRmA2OM9ydWYh/8paN11pq4L1xNBw0=
Subject key identifier:   34:16:97:8B:AB:97:9F:7E:37:BA:41:83:04:56:6E:ED:52:D8:35:74
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583F0AC7D44FA0E1559F7A89FC80
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/740bc83b-dd87-34b1-b817-03a07e236180.roa
Signing time:             Fri 26 Aug 2022 12:00:00 +0000
ROA not before:           Fri 26 Aug 2022 12:00:00 +0000
ROA not after:            Sat 01 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        76.223.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:0a:c7:d4:4f:a0:e1:55:9f:7a:89:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Aug 26 12:00:00 2022 GMT
            Not After : Oct  1 04:00:00 2022 GMT
        Subject: CN=7ed636c7-5b0c-4083-ba53-849c3f0b7e6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:50:f8:35:25:f0:06:b4:eb:a9:8a:a7:33:73:
                    70:8d:46:ea:c9:5a:14:dd:2b:19:06:7e:3b:64:04:
                    cf:a0:04:c5:d4:0d:cb:08:ed:d3:5b:39:11:79:e1:
                    48:b2:7b:e5:d9:09:96:62:d3:6b:d3:65:82:2b:7a:
                    25:29:23:a7:67:ee:e3:c2:11:2d:79:76:f7:c2:24:
                    cb:35:ff:42:ed:7f:13:9d:b4:28:8e:11:59:fa:37:
                    a7:46:08:a8:ec:17:f8:cf:11:bd:d8:86:3e:9a:9b:
                    13:ce:19:20:72:51:2e:32:e8:f1:a1:c1:2b:16:85:
                    7c:09:d1:2d:d8:aa:14:df:0d:9a:40:7e:ba:e1:fa:
                    9f:ad:7c:20:aa:b0:23:15:ff:45:f2:f9:5b:15:ef:
                    78:35:96:8b:67:52:50:19:86:44:ff:86:1c:fd:2c:
                    cd:b2:ee:5a:17:0f:1d:59:7d:f6:7a:d1:b5:2e:7d:
                    74:68:f7:6d:02:3c:c4:61:24:df:65:c8:36:cd:45:
                    ea:3c:04:6d:5d:6a:c1:f2:f9:f2:58:07:28:03:fd:
                    91:9e:cf:c0:4c:c6:ae:1b:eb:42:e3:63:52:43:89:
                    24:26:de:2b:43:d0:08:61:7c:83:08:62:1b:75:6f:
                    f6:54:80:35:6c:32:d9:51:9d:6a:8b:75:7e:2f:ec:
                    39:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:16:97:8B:AB:97:9F:7E:37:BA:41:83:04:56:6E:ED:52:D8:35:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/740bc83b-dd87-34b1-b817-03a07e236180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:7e:fc:82:5c:57:73:f3:be:3e:d8:69:4c:65:97:a0:33:d5:
         aa:30:83:47:c6:d7:5f:6c:bb:d6:bf:15:c0:a0:75:2d:fe:e2:
         66:d0:98:e2:47:5d:32:0a:06:bd:ed:d2:59:d4:23:43:3d:9f:
         79:48:8a:cb:ac:16:e9:b0:35:7f:b5:83:9d:22:5f:24:09:63:
         82:cc:0c:c8:21:51:44:cb:77:a7:c8:8f:35:2f:5f:97:b2:15:
         98:ee:a5:68:2c:58:fb:36:7e:71:78:4e:a5:3b:c2:cc:3d:50:
         27:dd:ae:a8:a6:bf:a5:ba:ca:9b:e2:b3:b3:d1:b3:6b:0e:17:
         d9:c0:4e:cc:4f:35:c7:11:32:42:7f:48:d8:41:bd:bb:85:8f:
         3c:ff:93:48:c2:6b:2e:ab:38:20:ae:12:65:07:4f:19:5a:d5:
         ec:1d:3e:ee:a1:0d:e1:1c:bb:f4:4f:e9:74:17:b7:28:e4:65:
         5f:11:03:fc:e8:21:4c:10:58:a4:d7:bc:66:80:64:ce:fb:b7:
         cb:c1:23:3b:b6:47:a4:d5:9d:44:51:b4:73:7f:3a:b9:62:2c:
         d7:87:28:6d:bb:95:d6:cf:a5:00:3f:95:7e:c9:d4:56:d8:53:
         6c:d3:a8:56:95:59:73:fc:e1:82:6b:62:94:6a:64:fe:7d:e3:
         4a:39:64:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----