Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/7bfda307-eb36-3546-960c-7cf6b7fe5e85.roa
File:                     7bfda307-eb36-3546-960c-7cf6b7fe5e85.roa (raw, json)
Hash identifier:          aCA5mMjY0j2rZzHZ5r67M8ZWw6oFmKElFm6iCctDKtc=
Subject key identifier:   F0:B1:0B:73:88:94:1D:7B:A8:1E:8F:3D:44:DA:CD:0A:55:FD:39:3E
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583F5A93D570F2208A31326D9780
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/7bfda307-eb36-3546-960c-7cf6b7fe5e85.roa
Signing time:             Fri 23 Sep 2022 12:00:00 +0000
ROA not before:           Fri 23 Sep 2022 12:00:00 +0000
ROA not after:            Sat 29 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        69.169.224.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:5a:93:d5:70:f2:20:8a:31:32:6d:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Sep 23 12:00:00 2022 GMT
            Not After : Oct 29 04:00:00 2022 GMT
        Subject: CN=534c0fd5-8abc-4284-a617-2394f9e562af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c1:1d:42:97:06:af:d5:19:58:6c:ad:d4:9f:
                    e3:4f:85:b9:05:7e:54:3c:8a:bd:93:68:22:f4:bc:
                    af:a1:70:8c:b9:de:50:42:f9:88:5a:78:28:6c:52:
                    5c:f2:4e:c3:c5:0c:8f:fb:14:89:ea:1f:df:d4:a5:
                    e7:86:8b:a5:99:e3:bb:72:13:0e:b9:1d:cf:00:81:
                    d0:ac:75:19:31:ce:df:8c:bb:eb:07:81:d6:e1:ad:
                    d6:57:a3:d8:ec:c3:f0:23:82:98:fc:05:c5:1a:54:
                    c5:d8:b9:d1:50:d5:16:b6:41:cf:a6:86:d9:42:49:
                    a7:ad:e6:4e:b3:ea:fc:ed:85:55:ce:55:93:5b:fd:
                    cc:44:50:e2:f8:87:14:c3:64:8b:29:47:8c:e4:f8:
                    f9:9e:c2:7d:bd:ad:df:27:60:44:c9:45:fd:0c:69:
                    31:57:2a:38:77:13:56:c5:3b:8d:31:a7:9d:50:cc:
                    81:8a:84:b2:e4:e8:8d:f6:c4:68:1d:cb:d5:1d:5d:
                    6a:d0:d2:6a:fd:66:8c:2f:09:ab:5f:db:66:9f:4b:
                    a4:e8:24:48:6b:1f:bd:e3:dc:3f:32:97:e3:65:69:
                    aa:fb:10:05:97:f0:99:50:ef:4d:41:8a:85:30:6e:
                    7e:82:d5:5d:ec:3c:65:98:11:6f:39:16:ac:79:4c:
                    96:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B1:0B:73:88:94:1D:7B:A8:1E:8F:3D:44:DA:CD:0A:55:FD:39:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/7bfda307-eb36-3546-960c-7cf6b7fe5e85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.169.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:b1:75:4d:46:54:05:b8:b8:e3:66:9c:6a:5a:f6:af:54:75:
         6f:5e:c8:78:ba:aa:11:7a:27:35:b4:15:22:69:f8:b1:69:34:
         dd:39:05:78:87:d7:de:59:dc:eb:c8:8f:14:cf:46:b9:93:65:
         cb:8d:dc:63:81:e7:60:85:a7:fb:43:6d:8b:42:05:36:63:9a:
         db:52:df:6d:d7:69:04:f7:5f:d4:83:58:0e:36:fd:25:89:7d:
         75:0e:d5:e0:eb:cc:0f:5f:5e:3a:97:34:81:76:81:22:c1:ce:
         a0:00:db:58:68:5c:3b:99:34:f5:a2:28:aa:f8:4d:51:6b:bd:
         41:d6:64:ec:f5:fe:8f:4f:8a:ab:03:b1:68:a8:04:95:ba:5f:
         de:b2:37:02:a2:9a:1a:a2:91:2d:90:92:a8:a1:0f:60:0f:cf:
         c0:45:14:f6:5a:00:1c:33:07:ed:59:e8:53:5f:fd:06:9e:7b:
         61:12:d0:c2:c5:e5:df:c2:b0:d2:1e:42:26:bd:75:79:e4:c1:
         b4:fb:ec:98:20:9b:05:ea:b2:14:25:d8:ec:1d:a7:27:7e:b1:
         fa:fa:1d:7d:a9:37:88:1a:dd:c8:f1:41:4d:69:e0:d9:2c:fa:
         b5:a1:30:b1:72:7b:34:cf:0e:15:f1:bb:84:d7:8d:bb:eb:0c:
         27:1e:a5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----