Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/7ca50d7a-0fb3-37b7-82cb-145629a35d55.roa
File:                     7ca50d7a-0fb3-37b7-82cb-145629a35d55.roa (raw, json)
Hash identifier:          0YPAxD0JY2sVxKtSwvl7OG5+2O+Gv8p3BWbUwpmULaI=
Subject key identifier:   5B:0F:70:31:0D:B7:38:D8:4D:E4:15:DA:DA:4F:21:FA:46:91:65:05
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328584094F77E36F124477C79F51580
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/7ca50d7a-0fb3-37b7-82cb-145629a35d55.roa
Signing time:             Sat 14 Jan 2023 12:00:00 +0000
ROA not before:           Sat 14 Jan 2023 12:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        69.169.224.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:94:f7:7e:36:f1:24:47:7c:79:f5:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Jan 14 12:00:00 2023 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=fff2b786-cbe8-4c71-a07b-7d71a43e7e88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:72:4d:fb:90:32:90:db:fc:68:39:f4:b7:b1:
                    05:d2:b7:9a:b9:5f:44:45:89:c6:1e:61:3f:d4:67:
                    0b:2c:37:15:36:e7:6e:d3:90:11:c9:d7:66:6b:55:
                    ee:1d:87:87:21:b4:74:62:f3:82:8c:b5:73:63:68:
                    bf:ad:b4:41:9c:f9:5c:28:a1:9c:cd:9e:7d:7a:0d:
                    fc:b8:df:a4:9c:8e:21:0b:84:9d:c8:05:b5:61:99:
                    6a:ce:ef:4b:04:7c:37:7c:c4:c0:39:58:8b:6f:74:
                    74:b7:61:98:55:3b:70:0f:38:1f:56:43:d8:49:31:
                    f9:f4:56:cf:14:4c:fa:ca:34:cf:c8:2b:c9:9c:d6:
                    89:2b:e7:aa:ea:9c:24:a5:ae:83:8a:9e:de:91:21:
                    21:88:dc:d4:d7:3e:ae:48:04:38:be:71:19:2a:21:
                    7d:0a:87:eb:63:79:94:cf:38:37:b0:bf:40:08:c2:
                    f5:91:11:34:ae:e0:c4:76:d7:be:75:71:89:1d:7c:
                    76:57:65:63:63:a0:44:30:e8:9b:c7:ef:87:64:2e:
                    ca:6c:3a:15:40:7d:6c:bf:c7:95:53:b6:6b:8e:11:
                    94:5f:06:f2:f2:9e:37:03:d1:4c:49:91:fb:d4:52:
                    0c:7f:76:44:2c:99:b3:0e:b8:3a:6d:39:fb:c2:ef:
                    48:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0F:70:31:0D:B7:38:D8:4D:E4:15:DA:DA:4F:21:FA:46:91:65:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/7ca50d7a-0fb3-37b7-82cb-145629a35d55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.169.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:c5:f9:94:1b:84:a6:d4:a1:d3:4e:a9:e1:70:d3:43:8c:31:
         f6:42:be:b0:2f:83:e5:1b:9a:a5:cf:79:70:23:97:22:c5:23:
         80:68:2c:46:cd:53:b2:96:cb:3a:aa:20:86:77:04:47:fc:fa:
         cd:1b:a7:69:6b:80:bd:b4:79:77:b2:00:b9:cc:6c:61:73:52:
         7e:e4:00:4c:8a:37:04:f5:31:2e:19:d2:6e:7a:9d:05:31:26:
         c6:6e:61:90:7b:43:6e:a4:52:a3:b6:e6:d7:37:7d:3b:9d:c3:
         27:52:44:d9:b2:dc:30:d9:dc:29:5d:3e:c2:e6:3c:ff:de:b1:
         9d:4e:55:11:5a:f1:9d:1b:79:98:a8:41:a9:c1:f7:4f:7b:85:
         52:a5:1f:b8:75:92:aa:2b:91:34:6b:87:e9:a6:45:ce:df:cb:
         ff:c7:0d:aa:af:9a:da:de:ac:e3:b1:0c:98:db:82:9c:31:55:
         6e:8f:9c:f3:ac:65:f4:96:c2:2f:2e:6a:3f:32:30:8a:9f:0f:
         ed:aa:e5:a9:3c:4f:87:65:56:6d:5e:cf:3f:85:90:54:28:b6:
         ff:04:39:a5:63:4e:c9:8a:83:4d:48:7e:5b:7a:56:06:60:ee:
         d3:74:99:fa:87:77:b9:36:c4:f8:cd:0f:75:8b:a2:f5:d8:5a:
         ff:47:7f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----