Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/8b4deb69-3118-3154-bd08-678d998fbfed.roa
File:                     8b4deb69-3118-3154-bd08-678d998fbfed.roa (raw, json)
Hash identifier:          0ySTM0pHttm4/uCV9ITp1Cp+dFR34FAe1pc9PSbYPrs=
Subject key identifier:   AD:14:69:44:44:3C:63:E8:D8:E9:BF:F3:02:55:14:AE:C9:21:9A:72
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583F2F2923A7B4468EFF8FCEAC80
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/8b4deb69-3118-3154-bd08-678d998fbfed.roa
Signing time:             Thu 08 Sep 2022 12:00:00 +0000
ROA not before:           Thu 08 Sep 2022 12:00:00 +0000
ROA not after:            Fri 14 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        23.251.224.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:2f:29:23:a7:b4:46:8e:ff:8f:ce:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Sep  8 12:00:00 2022 GMT
            Not After : Oct 14 04:00:00 2022 GMT
        Subject: CN=df4d965e-e030-4e86-a0cd-acc1875e727d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bf:b1:5c:1e:23:d8:b4:76:1a:f8:9b:ae:c1:
                    c3:f4:fc:03:2d:7b:5e:46:e0:84:68:8a:73:4a:09:
                    81:78:0e:00:67:a7:19:56:68:0a:6a:0c:f8:b1:1b:
                    24:f8:64:aa:0e:5c:82:a9:4e:4c:ab:74:15:3b:96:
                    51:ac:f9:5a:c9:ad:90:d8:6a:20:01:6f:82:41:9e:
                    bb:4e:53:3c:16:03:8e:a3:de:78:6d:c9:aa:71:ee:
                    59:38:3b:1b:82:30:25:a9:32:58:48:83:ba:f0:66:
                    07:14:61:c1:a1:f2:e8:8d:74:8d:e3:53:43:8b:0d:
                    db:fa:fd:40:87:e6:cf:f0:41:04:74:2c:85:f8:d1:
                    db:cb:60:cf:dc:8f:5a:a4:91:6c:e6:29:a1:b2:8e:
                    9e:75:17:4d:b8:6f:c9:db:84:79:7c:d9:e6:b6:1b:
                    78:23:55:be:20:b2:2c:27:86:1b:6d:56:b2:9d:df:
                    d4:d0:db:48:5b:9c:3e:24:c2:aa:31:88:8d:f5:2a:
                    19:77:31:f4:58:0c:78:48:a6:ef:76:a1:60:85:03:
                    5d:aa:b4:90:0a:e8:a6:e5:dc:05:0b:db:a3:56:81:
                    71:5c:6e:84:f9:4c:09:de:f9:04:7b:d5:77:94:06:
                    aa:18:4a:b9:92:4b:ba:c2:c6:f6:5d:21:2e:82:1b:
                    66:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:14:69:44:44:3C:63:E8:D8:E9:BF:F3:02:55:14:AE:C9:21:9A:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/8b4deb69-3118-3154-bd08-678d998fbfed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:15:8b:87:25:b0:be:ce:74:99:dd:9f:95:c7:d9:50:f0:c9:
         eb:ed:17:35:e3:1d:3e:9b:21:66:ca:fa:07:31:0e:17:79:fa:
         ef:ab:c2:a6:af:c6:a7:98:c3:48:22:91:2a:63:21:54:d2:f6:
         b5:d7:13:7d:f2:62:e9:35:34:17:f0:c8:01:68:b4:2d:70:9f:
         0c:1f:bc:ef:8b:51:91:4d:84:40:a7:55:bd:36:e4:5d:cc:f0:
         c1:59:8b:08:3c:c7:c3:55:49:93:4b:1c:6f:4e:de:1f:c5:1f:
         a8:85:ac:19:ab:7d:cd:75:50:5c:00:39:a5:db:8d:7e:9d:65:
         2d:d8:3b:02:f4:0a:40:8d:ae:fc:2a:ac:a2:46:ba:06:a0:23:
         3c:81:2e:db:cf:ad:c0:bd:46:1e:80:c7:bb:77:4a:85:17:9b:
         d9:29:1b:0d:d1:13:b7:74:5b:c6:54:c9:b5:43:d9:08:3a:33:
         52:01:c4:a1:1c:e0:8d:1f:be:e7:a4:29:86:9c:31:9c:4f:25:
         d8:39:a6:99:08:a1:a8:f8:82:2e:2d:ad:50:26:2c:b3:0f:94:
         01:0b:31:f4:a5:87:d9:23:f4:26:1d:13:88:98:cf:e7:7c:27:
         0c:43:23:81:c0:7a:f2:c8:f8:3b:42:c6:d1:f0:1c:22:3c:69:
         52:10:e5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----