Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/7aa2064e-4076-3249-8c09-eed888185cb7.roa
File:                     7aa2064e-4076-3249-8c09-eed888185cb7.roa (raw, json)
Hash identifier:          rUUwqsUCiJxOK7YfbUxnrp+74oFuN5kz8Wg8u5xcmwY=
Subject key identifier:   45:F8:5C:CB:D9:BC:94:67:53:27:AD:A8:69:1F:AB:4C:9A:E1:0B:28
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583D0B92C23D28C78634C25B36C0
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/7aa2064e-4076-3249-8c09-eed888185cb7.roa
Signing time:             Fri 25 Feb 2022 05:00:00 +0000
ROA not before:           Fri 25 Feb 2022 05:00:00 +0000
ROA not after:            Fri 01 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        23.251.224.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0b:92:c2:3d:28:c7:86:34:c2:5b:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Feb 25 05:00:00 2022 GMT
            Not After : Apr  1 04:00:00 2022 GMT
        Subject: CN=fb7d1321-c2f7-42ce-b500-4d29d6bda499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:05:32:1a:9c:cb:91:8b:55:87:7d:23:b5:a6:
                    bc:61:8b:a6:02:a1:39:b5:45:a9:f6:bd:6e:bc:92:
                    30:3d:11:b3:47:56:88:10:78:e5:6f:77:86:3c:e9:
                    03:9c:8a:5a:0b:c8:13:f4:ad:2a:70:83:07:1a:d3:
                    f3:e3:39:f9:01:15:35:a8:b8:61:82:0d:b0:2c:cf:
                    77:09:1d:24:28:28:2a:c6:55:cd:8c:06:fe:58:c2:
                    0d:3f:ce:99:4f:1e:68:46:e9:85:7f:8d:c9:4d:f1:
                    04:57:af:54:fa:97:20:99:f7:72:32:b6:fb:a0:8c:
                    7f:01:55:9a:cf:7f:cb:da:6e:9b:7d:57:08:44:d6:
                    53:02:db:a1:e8:b6:b3:16:47:93:e2:72:1b:75:53:
                    92:fb:14:87:3a:20:01:5b:2f:70:76:00:79:39:92:
                    86:2b:6f:f7:68:0c:5b:32:c5:f1:6d:4c:ff:e7:a9:
                    d3:72:d3:81:ab:76:94:23:a1:f8:dc:8e:c5:01:5e:
                    ca:38:24:80:47:1c:0d:38:0d:b6:40:91:70:d0:1b:
                    23:17:62:0f:e0:c8:57:fa:e0:f1:bc:a1:1c:78:9d:
                    e3:d6:19:21:c0:f2:27:83:ef:0a:90:b1:dd:5c:00:
                    69:1d:2d:85:1e:8d:a4:34:93:13:12:c2:90:02:12:
                    e9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F8:5C:CB:D9:BC:94:67:53:27:AD:A8:69:1F:AB:4C:9A:E1:0B:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/7aa2064e-4076-3249-8c09-eed888185cb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:ea:ce:64:a4:6b:55:e2:1b:a3:e5:67:b3:04:49:09:29:17:
         b7:69:2b:19:b1:7b:69:e7:ad:b2:29:38:fa:f3:03:d5:b6:eb:
         7f:86:e5:2f:a6:41:77:c6:59:01:0e:31:34:55:a0:b5:30:6c:
         c4:94:bb:d0:50:8a:1b:b3:1b:6b:e7:3c:85:8e:cf:4c:9a:e0:
         ad:12:de:50:c8:31:35:30:0e:d1:c6:fc:63:62:de:10:f0:b8:
         79:4f:8a:f2:a7:16:93:ea:40:bd:08:6e:09:73:58:db:1e:64:
         cc:52:58:c9:78:c0:e9:c6:a1:4b:82:31:84:d4:c7:e9:86:cc:
         cf:f3:19:42:16:bd:96:45:42:5c:74:02:9e:4f:91:68:97:76:
         48:3d:3e:74:dd:ab:b5:a2:36:c2:ce:ee:16:c2:69:a8:9d:e4:
         1d:9a:34:00:3c:36:7d:0c:58:0d:ec:56:02:2a:76:c2:aa:57:
         2d:96:d7:6b:2a:8a:b2:75:57:32:9a:64:af:a8:50:82:3b:7b:
         28:95:07:5f:a5:85:ce:11:c6:37:35:8d:08:f8:21:f4:e3:69:
         e2:7f:40:43:86:a5:ae:af:ae:4a:ec:36:d0:f7:52:d4:d1:98:
         60:48:45:e8:ec:46:2a:bb:10:cf:0f:e0:66:25:de:7b:e3:46:
         c4:4b:b5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----