Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/9049faa7-b21b-3b52-8a3e-7810aacc6b5c.roa
File:                     9049faa7-b21b-3b52-8a3e-7810aacc6b5c.roa (raw, json)
Hash identifier:          oqxZATRRlEGd2mA9DgNBJR+T4tHPrHrYWBHXyZMWmt4=
Subject key identifier:   7C:90:C9:47:B0:F8:ED:2A:A7:55:4A:02:72:8D:ED:C0:C5:5F:98:B9
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583D0C6338A658D66DFE6A057E80
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/9049faa7-b21b-3b52-8a3e-7810aacc6b5c.roa
Signing time:             Fri 25 Feb 2022 05:00:00 +0000
ROA not before:           Fri 25 Feb 2022 05:00:00 +0000
ROA not after:            Fri 01 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        199.255.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0c:63:38:a6:58:d6:6d:fe:6a:05:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Feb 25 05:00:00 2022 GMT
            Not After : Apr  1 04:00:00 2022 GMT
        Subject: CN=17c0eb5d-3eb4-41c2-8bb7-b50a1cfcc914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e3:28:19:b4:e9:a6:60:d7:36:34:d1:ca:0f:
                    51:d8:8a:08:96:f2:f9:5b:2e:c8:69:54:5a:7f:b6:
                    cf:38:89:c7:f9:ec:0a:c2:85:8d:6e:87:43:74:a4:
                    a7:c5:1f:4f:64:cb:8b:99:fb:42:3b:68:04:43:c1:
                    2f:a3:55:70:d1:a2:1f:43:c2:d1:a3:c3:1f:fb:e3:
                    02:14:07:14:97:8e:a6:0d:8c:f2:9b:db:86:2b:b7:
                    7c:80:bd:b4:37:0c:a2:69:d3:78:69:c5:d4:9b:66:
                    5d:14:f7:b3:28:d3:04:d8:fc:66:db:65:1e:32:a0:
                    55:ec:ed:71:6c:a1:81:7e:e1:92:73:62:83:09:8f:
                    a8:92:26:55:00:09:58:21:0c:31:cd:d4:8b:fe:e7:
                    8e:a4:d8:ff:69:9d:5e:4b:58:66:71:fb:25:f3:8c:
                    7e:73:61:54:64:07:f2:02:3a:a2:f7:6b:e6:57:b8:
                    85:08:b9:2c:dc:1c:22:2a:31:15:75:a6:57:98:b7:
                    78:d1:79:fc:4a:63:30:2b:3f:a7:be:eb:9f:2b:53:
                    ee:30:db:8e:75:66:59:76:3e:d3:b5:a1:2a:e4:c9:
                    25:08:24:b4:e9:6c:11:64:e6:32:1d:90:e3:38:2f:
                    31:b7:76:3c:a7:27:22:27:c6:06:f0:5c:1c:d8:1c:
                    7a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:90:C9:47:B0:F8:ED:2A:A7:55:4A:02:72:8D:ED:C0:C5:5F:98:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/9049faa7-b21b-3b52-8a3e-7810aacc6b5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:76:56:08:47:9b:46:48:66:c9:86:ab:be:0e:28:36:c0:a4:
         0c:16:09:60:b5:98:82:33:4a:c6:c7:6b:49:23:2b:22:4b:53:
         d3:3f:88:d3:d5:0b:85:2a:f1:d7:50:c1:8d:df:7f:aa:4b:6e:
         b6:ef:65:46:04:d9:0e:00:36:c2:28:13:a2:db:91:79:ec:55:
         39:9d:f4:ee:61:cd:e0:9b:0b:5d:0e:07:bd:b0:46:0d:d8:cf:
         3e:a3:92:4e:d4:2a:ae:f1:a8:1a:cc:e2:4b:f3:9c:a2:50:19:
         07:8d:0c:47:69:53:fd:9e:be:da:6f:6f:5e:c0:f3:9c:63:10:
         7f:f5:0a:ef:99:f7:95:08:2a:77:57:4f:29:7b:11:17:6a:ff:
         ff:61:38:27:4a:dd:eb:19:f1:d3:fa:1f:b5:44:c9:a2:fc:ee:
         4c:4d:8a:03:d3:17:b9:e1:6b:ed:dd:e9:74:af:01:5a:ce:cc:
         78:28:9b:e1:bc:5b:25:ab:66:00:90:a0:14:57:39:75:28:14:
         ee:31:d9:ab:87:b1:c6:71:38:bd:ea:c8:74:5f:e3:ff:16:94:
         6d:c1:2e:84:bb:9f:26:cc:83:9e:ff:ae:5f:ba:66:d2:ff:f1:
         1d:3c:f2:18:45:7c:c9:09:98:4e:81:68:7d:c1:40:f7:13:7d:
         09:ed:4a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----