Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/84b19f33-2071-3f9f-bacc-d5bf706d98e0.roa
File:                     84b19f33-2071-3f9f-bacc-d5bf706d98e0.roa (raw, json)
Hash identifier:          5cUAuc+ANVdcxq0RnAwJDAPMMNROuHix6Kxn7PXJMzU=
Subject key identifier:   F8:2D:3E:9F:35:A6:87:A6:EF:C6:B0:C1:7C:CE:D9:84:5A:A0:AC:00
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583F329ECDB59E5ACBA8EAB9BA3E
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/84b19f33-2071-3f9f-bacc-d5bf706d98e0.roa
Signing time:             Fri 09 Sep 2022 12:00:00 +0000
ROA not before:           Fri 09 Sep 2022 12:00:00 +0000
ROA not after:            Sat 15 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        69.169.224.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:32:9e:cd:b5:9e:5a:cb:a8:ea:b9:ba:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Sep  9 12:00:00 2022 GMT
            Not After : Oct 15 04:00:00 2022 GMT
        Subject: CN=607cb2ac-56a9-4358-a8cc-b00373ee6e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:02:57:a3:e5:6d:32:6b:66:39:f0:54:bc:0c:
                    1a:2e:dc:b0:5b:f7:02:f4:6b:9b:4e:3d:44:96:c6:
                    9c:34:74:4a:f2:3f:2c:5f:0a:33:73:85:80:06:78:
                    79:fd:1d:96:aa:cf:d6:1e:e3:68:d6:21:d0:1f:b9:
                    f4:03:e3:b4:f1:6a:e2:ac:54:e0:ff:cd:8c:f8:ba:
                    ce:dc:be:8e:e6:bc:5d:82:87:80:f2:b9:55:9d:60:
                    68:00:17:61:92:1a:af:6a:89:1a:40:12:e4:fb:20:
                    9e:02:a2:f5:68:c5:20:17:d5:dd:b5:66:23:50:4f:
                    db:96:68:ae:9e:f7:e6:99:e4:1c:af:7f:32:f2:f4:
                    51:ab:9d:26:f3:59:b1:ea:fb:31:ee:ab:be:0a:d8:
                    5b:b0:d0:54:b1:ad:b9:be:cf:13:1e:73:e5:52:86:
                    66:3f:3e:03:f8:5c:c2:1e:03:6d:e0:22:0c:e8:7f:
                    5a:f1:41:3b:e7:68:fc:60:6d:b2:a7:e4:bd:33:33:
                    12:67:7b:0a:56:88:0a:47:af:e6:58:7d:f8:da:82:
                    41:ba:63:af:0a:72:50:b1:7b:2a:66:3b:14:25:b2:
                    33:34:3c:10:e9:22:2c:4e:b7:f0:1b:21:7f:f7:33:
                    b7:39:2c:0d:c2:df:8f:1d:04:65:8c:6d:14:30:63:
                    18:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:2D:3E:9F:35:A6:87:A6:EF:C6:B0:C1:7C:CE:D9:84:5A:A0:AC:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/84b19f33-2071-3f9f-bacc-d5bf706d98e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.169.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:1d:6c:73:3e:cd:a2:a9:31:97:54:3c:78:cf:22:3c:39:6c:
         98:01:5a:a0:f4:25:84:93:9c:ba:5a:1e:d6:e8:4e:63:7d:6e:
         d6:fe:3b:d0:be:73:ac:28:76:02:78:b5:0b:60:e9:22:48:7d:
         7a:e1:b2:fc:41:a8:cb:28:cf:70:90:d2:2e:67:ba:d9:99:f9:
         f4:28:c7:bf:d6:87:94:9e:55:a2:85:09:92:ab:0f:6b:5b:74:
         eb:d9:7e:4c:55:ce:c7:9a:b3:a2:9d:cc:9b:1a:63:aa:27:03:
         17:be:84:77:5b:44:66:d9:ab:ea:69:ec:8a:26:d7:a1:75:c3:
         03:c3:85:a0:7e:2b:60:05:0a:fc:00:b7:08:91:5b:03:c6:19:
         db:77:8e:38:59:1c:3e:cf:75:15:0e:ec:e1:db:8e:1f:2e:ae:
         40:a8:1b:36:46:a4:f5:d1:a9:ef:c3:fe:ea:2c:3a:03:4a:0b:
         28:66:96:8b:51:10:ab:86:fe:73:12:4e:0a:70:28:d9:11:2c:
         6e:f3:dc:a8:54:14:2c:31:1c:7a:fe:ab:cf:0c:d5:76:94:4b:
         fc:b4:b2:b1:e9:12:ab:c5:7b:c5:26:b7:dd:ae:d1:5c:15:d8:
         34:2c:b1:a7:85:88:8d:bb:c9:b9:57:24:a2:1e:20:7a:c4:b8:
         09:4d:9f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----