Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/83b92212-06e4-3b88-ad5f-8c746c18fb81.roa
File:                     83b92212-06e4-3b88-ad5f-8c746c18fb81.roa (raw, json)
Hash identifier:          yVMuNjnP8lptHY/Ra2bOwnFlkeIIeYNhwAPQ97OB7Ig=
Subject key identifier:   5C:6D:1A:AD:62:FA:01:BD:14:DF:89:6D:58:09:20:4F:A9:EA:77:91
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583EBC8DC018625280983796EE80
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/83b92212-06e4-3b88-ad5f-8c746c18fb81.roa
Signing time:             Fri 29 Jul 2022 12:00:00 +0000
ROA not before:           Fri 29 Jul 2022 12:00:00 +0000
ROA not after:            Sat 03 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        76.223.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:bc:8d:c0:18:62:52:80:98:37:96:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Jul 29 12:00:00 2022 GMT
            Not After : Sep  3 04:00:00 2022 GMT
        Subject: CN=c0bb190b-8729-4dd7-9475-b49025c2b522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e5:43:17:51:1a:5c:77:c6:4e:6f:aa:48:3e:
                    56:3e:02:48:eb:d2:84:56:f6:48:45:a8:22:19:67:
                    7b:a3:85:44:64:05:0b:5a:24:2d:83:1e:51:96:92:
                    9e:a4:15:8e:45:08:31:33:fa:f1:d9:b8:b8:4e:73:
                    06:1a:4d:70:0a:23:0e:05:8c:97:e6:9a:f4:ea:b7:
                    d0:0f:25:9b:15:f7:83:fc:d8:ee:08:80:0e:d4:e8:
                    f3:34:e6:95:be:14:14:7b:62:10:de:ef:ed:fc:d6:
                    56:d1:b9:ee:f6:cd:13:ba:f9:a8:bd:fe:33:19:88:
                    9c:86:d2:8c:67:fc:08:d2:3e:71:26:01:24:74:08:
                    3d:4a:8b:14:65:78:6e:b6:a4:1c:2b:53:94:35:e7:
                    cb:81:16:d2:5c:2b:7d:a1:f4:2e:b7:bd:98:60:13:
                    54:48:4b:1d:c4:f0:80:ec:df:ff:c6:06:d8:b7:2f:
                    35:3f:28:73:a2:3c:08:bd:4b:1f:f3:2f:30:57:83:
                    77:69:72:e4:c7:46:ee:28:64:01:29:55:11:a6:9d:
                    38:35:e9:9d:18:96:e5:3b:32:69:11:65:80:e9:20:
                    57:21:2e:ac:0d:12:3a:c7:99:30:76:5b:b8:30:a5:
                    2d:bc:c9:e9:24:b5:97:69:84:a5:9c:80:bb:f9:8a:
                    d0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:6D:1A:AD:62:FA:01:BD:14:DF:89:6D:58:09:20:4F:A9:EA:77:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/83b92212-06e4-3b88-ad5f-8c746c18fb81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:dc:50:36:4f:77:e1:d9:14:b8:3c:36:67:a9:a0:2f:9f:aa:
         55:76:c3:49:14:f6:b0:86:74:c5:f9:83:ae:20:55:43:67:c4:
         9c:7b:84:c1:32:d3:2f:48:72:6e:4c:06:7b:5d:59:73:11:48:
         f2:90:13:8b:ef:a4:fe:0f:68:c9:0f:0d:0e:dd:ca:97:1e:e4:
         16:94:50:e7:d8:8f:16:b4:a0:97:3e:da:45:e0:75:14:b8:af:
         a0:60:fe:1d:cc:9f:20:45:18:36:71:2b:62:79:be:cb:b0:25:
         26:37:9f:a4:bf:40:f3:da:31:02:66:8c:47:e7:22:fb:61:33:
         e7:db:b4:5c:b9:d0:82:fa:1e:5a:7a:ef:fe:86:ae:6d:d9:d5:
         c2:52:72:e4:35:e0:dc:6e:79:f5:ac:4b:cd:43:33:32:c4:e9:
         6b:c8:2e:bc:21:91:d6:e2:f0:53:86:25:15:43:94:56:d3:07:
         6d:2f:fb:84:b6:5d:8b:34:c9:e0:e4:bb:05:28:2b:68:ab:70:
         a4:e8:8e:01:0b:5b:b6:a6:6a:b5:84:84:44:b9:b2:2a:4f:37:
         3c:06:ec:b9:6d:ba:72:9d:f3:c0:5a:22:85:91:ef:b4:2a:30:
         86:8d:38:94:6e:58:9e:65:c1:b8:7d:81:d9:a1:86:e9:91:b8:
         f2:92:9a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----