Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/83b823c8-60bf-3090-9549-1a5780868058.roa
File:                     83b823c8-60bf-3090-9549-1a5780868058.roa (raw, json)
Hash identifier:          tx4grEy7LeO1lPc4UQ9g6zxFEIbWs6sI4pCtsElWe/Q=
Subject key identifier:   E5:B2:3C:4E:A0:EE:E8:41:8C:86:E0:9A:56:09:22:B5:65:64:0C:E4
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328584046CC4CA5BD0DC4B2E07ABE80
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/83b823c8-60bf-3090-9549-1a5780868058.roa
Signing time:             Sat 17 Dec 2022 12:00:00 +0000
ROA not before:           Sat 17 Dec 2022 12:00:00 +0000
ROA not after:            Sun 22 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        69.169.224.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:46:cc:4c:a5:bd:0d:c4:b2:e0:7a:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Dec 17 12:00:00 2022 GMT
            Not After : Jan 22 05:00:00 2023 GMT
        Subject: CN=92f97105-41fb-4232-bb93-1d7a09b5b0a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ff:79:cf:c5:84:9b:25:26:ec:3d:ae:bd:3a:
                    a0:f0:9a:3b:5e:2e:51:15:62:23:4d:fc:b1:fb:f1:
                    08:06:77:73:be:ca:59:52:e2:8c:07:cf:97:7d:02:
                    60:46:f6:87:1f:10:e6:ae:37:3b:39:08:ef:4e:87:
                    e1:c0:ad:c6:41:aa:d7:c0:1b:73:7b:2d:fc:14:7d:
                    53:91:ab:6f:53:d0:28:d0:b8:53:55:31:0c:11:db:
                    1d:10:1a:83:61:c8:0d:67:f8:8a:e1:35:29:c2:de:
                    52:85:58:65:e0:cb:43:a6:3e:e9:d0:04:d3:62:5d:
                    db:3f:98:c6:b2:3b:e1:62:fa:74:e6:c9:c1:5f:95:
                    ec:c1:93:e0:3f:5d:57:53:6e:5d:93:d5:66:30:a8:
                    c4:e7:d1:5a:77:34:cb:5b:c7:90:55:30:38:db:62:
                    e4:6c:61:3f:c2:18:60:24:dc:ee:9c:e7:18:8f:d0:
                    1a:c6:8b:0d:cd:4e:1a:70:9e:31:30:f2:e4:04:2a:
                    f3:29:70:88:ba:67:c7:62:1c:79:13:89:28:76:71:
                    9f:23:0a:99:b5:0a:09:9c:6d:70:48:14:20:4e:3e:
                    30:2a:d1:ac:a7:a9:fc:52:71:f2:95:50:d9:1f:e2:
                    fa:7c:bb:2c:3b:45:32:32:1e:cd:f9:53:25:da:6e:
                    e3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B2:3C:4E:A0:EE:E8:41:8C:86:E0:9A:56:09:22:B5:65:64:0C:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/83b823c8-60bf-3090-9549-1a5780868058.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.169.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:cd:b1:51:2b:02:a2:69:e6:42:70:f3:8f:b8:46:f3:74:df:
         4e:41:ad:86:26:a0:75:50:d4:d3:23:87:16:08:bb:23:84:18:
         8d:f2:09:e3:a8:c1:f0:fc:97:e5:45:04:5c:d7:7b:24:24:53:
         96:4e:ab:5b:a4:92:f4:bc:d2:1b:42:70:93:7f:0c:76:80:80:
         f9:89:37:f4:ba:91:2f:2c:31:7d:41:fe:60:a4:7c:9a:9e:a1:
         e4:ab:44:68:85:a7:67:a0:72:92:0a:67:05:37:ac:5b:8c:32:
         53:6b:fb:39:26:d7:36:9e:bd:f6:2a:50:01:e9:0f:fd:67:1a:
         9f:11:60:e4:b0:9d:85:f2:72:9f:0a:76:55:a9:71:53:aa:01:
         3f:cd:71:fa:53:1b:42:81:94:e8:28:68:ab:37:96:45:64:4c:
         ad:b9:4f:b4:36:65:75:a7:67:e3:b9:e1:c2:83:0e:e0:bc:9e:
         9d:4f:b1:bb:c2:a2:e6:31:a9:a4:75:60:a8:66:a1:c5:a7:3f:
         14:80:c0:b6:46:e6:3e:c6:2f:c0:e0:93:6a:18:c5:9d:a6:8e:
         47:30:62:92:54:d4:bf:49:f6:90:92:e1:52:00:ce:58:30:6f:
         ca:ee:d7:6f:65:50:c2:91:6b:f6:fe:a6:c6:11:74:32:63:d5:
         6f:41:75:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----