Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/830ad573-91fe-326d-88f9-f18a5e01a1d5.roa
File:                     830ad573-91fe-326d-88f9-f18a5e01a1d5.roa (raw, json)
Hash identifier:          D28zbcBwvDB/fz0pKi2vTuGnX3J52tXBuXD0khmpwAM=
Subject key identifier:   9D:DA:05:BA:9B:4D:8C:A5:98:9F:E2:70:0F:D5:C6:18:34:95:BE:68
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583F813981C9436ACE5B4EB20500
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/830ad573-91fe-326d-88f9-f18a5e01a1d5.roa
Signing time:             Fri 07 Oct 2022 12:00:00 +0000
ROA not before:           Fri 07 Oct 2022 12:00:00 +0000
ROA not after:            Sat 12 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        23.249.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:81:39:81:c9:43:6a:ce:5b:4e:b2:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Oct  7 12:00:00 2022 GMT
            Not After : Nov 12 05:00:00 2022 GMT
        Subject: CN=c8fcdce6-bcd4-427a-ba1d-c48cd2f2c588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:58:50:20:de:ca:28:34:8a:11:0f:b7:90:fa:
                    9b:e7:0d:dc:1a:71:00:6d:e9:0f:71:33:0f:ce:7d:
                    65:36:93:2a:56:aa:88:37:83:6f:ab:14:c9:af:ce:
                    c2:b9:e5:5f:d1:77:ad:80:7e:b1:61:78:f0:d8:93:
                    7f:b6:71:33:53:45:3e:68:2a:a7:9f:80:84:36:e7:
                    53:88:56:0c:7e:4c:8a:36:02:f5:7f:5a:0f:d2:40:
                    1e:0e:5a:1f:61:0f:57:d6:c7:fb:13:de:ca:dc:48:
                    0c:36:49:ec:f4:7e:b2:3d:38:0a:52:82:ab:7f:05:
                    24:8e:c9:72:48:3a:ff:df:b1:c8:be:59:a9:a1:28:
                    83:e0:7a:44:91:04:24:26:ec:ed:c3:06:46:4a:27:
                    47:eb:8e:44:2c:7e:f3:ea:62:31:5d:b4:ee:a0:44:
                    ab:60:30:d9:f9:a6:64:ec:d4:9c:7a:67:7b:de:34:
                    0f:7c:d2:4c:56:e8:68:a4:c0:bd:23:74:8e:1d:40:
                    fd:88:23:2e:c4:8a:80:c9:49:d8:91:9f:64:d0:be:
                    b1:7b:f6:c6:bb:d2:ff:6e:4c:14:64:94:b1:5e:b8:
                    7c:ba:c1:12:19:30:f3:b3:c1:96:90:d4:ab:1e:4a:
                    1f:66:26:d7:f5:6c:4b:50:46:cd:b0:b4:22:fd:4f:
                    f6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:DA:05:BA:9B:4D:8C:A5:98:9F:E2:70:0F:D5:C6:18:34:95:BE:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/830ad573-91fe-326d-88f9-f18a5e01a1d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:1a:a0:5a:ec:7f:2a:85:6f:25:b4:cd:f0:14:3d:87:80:84:
         d0:47:41:09:0e:bd:1a:22:66:23:6a:17:4f:ca:6f:df:69:79:
         7b:0d:21:c1:51:d2:cc:e0:df:e9:0f:18:bf:cd:9d:11:be:ae:
         ef:f4:35:ee:db:0c:2a:26:6b:67:4b:0e:0d:e2:40:92:40:b1:
         ab:b0:5c:c0:2e:50:f2:3e:6a:d6:7e:01:93:73:4f:98:db:74:
         b9:42:ca:34:e2:3e:12:68:75:bc:35:25:2b:eb:1f:a0:cf:9d:
         ef:a4:4a:ff:94:b2:1d:d7:fd:0c:3a:ab:0f:3f:85:3b:96:b7:
         9d:3a:18:25:79:f7:95:00:4f:f5:77:dc:2c:89:b2:b5:46:de:
         63:2a:b4:c9:c0:8f:35:a3:e6:aa:a6:35:b6:ce:0e:15:33:35:
         da:db:97:b3:cf:89:da:0f:4b:38:24:e9:79:49:fe:ef:b2:bb:
         df:21:cf:c2:4d:7e:43:36:75:86:99:dd:59:ad:6b:64:fb:a1:
         05:71:21:50:54:71:1b:3f:2e:f7:14:15:77:6c:a0:e8:b1:b8:
         98:43:55:28:0b:d8:6a:a8:f8:69:bf:b6:5e:0c:2c:1d:ad:ee:
         eb:63:b6:12:65:bf:60:50:0a:2a:54:74:5d:d5:ee:bc:9c:03:
         4c:a5:ff:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----