Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/91ee2738-4906-3329-a57f-20a46c5baa03.roa
File:                     91ee2738-4906-3329-a57f-20a46c5baa03.roa (raw, json)
Hash identifier:          6skHzN8Kc68SSyMdkTjUC9ulywkLJZVfJmRQXJZC4MY=
Subject key identifier:   89:10:86:68:32:D0:D3:83:C1:41:13:D4:18:9F:BC:17:F3:B4:8F:FB
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583DFA08860874C295D725D76EC0
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/91ee2738-4906-3329-a57f-20a46c5baa03.roa
Signing time:             Fri 20 May 2022 12:00:00 +0000
ROA not before:           Fri 20 May 2022 12:00:00 +0000
ROA not after:            Sat 25 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        23.249.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:fa:08:86:08:74:c2:95:d7:25:d7:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: May 20 12:00:00 2022 GMT
            Not After : Jun 25 04:00:00 2022 GMT
        Subject: CN=22050d93-a251-4bc4-92b1-e270dab3cb76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:74:7b:24:d6:b8:4c:79:b2:84:b7:ba:a1:c8:
                    c6:2e:e7:61:cd:81:a3:81:82:ea:6f:4d:4a:73:3a:
                    f5:3d:a3:a6:2a:e8:08:08:d0:c3:b4:25:a0:d7:5e:
                    67:1f:6a:7e:59:0b:62:d7:53:1f:f3:bc:4a:5f:f5:
                    40:84:1e:25:c8:12:eb:c2:07:74:ba:ef:40:a8:b7:
                    b5:70:41:9c:5f:f4:4b:40:74:bf:72:ac:ad:65:ee:
                    ba:84:49:51:2b:b8:da:b3:81:4b:e6:5a:37:e7:61:
                    97:af:5d:14:ba:89:b8:09:1f:78:97:d2:36:1b:e5:
                    96:8d:1a:bb:57:5f:40:5c:69:3e:b4:a9:be:48:02:
                    e7:7e:bb:48:38:a1:00:b5:0f:b0:0f:be:56:5d:6b:
                    2a:3a:46:40:fa:51:9c:d0:c0:fe:bb:d2:51:bf:a4:
                    83:0c:64:0c:21:3f:88:eb:a0:8d:dd:c5:16:01:03:
                    0c:b7:15:94:70:b5:83:de:f1:17:6e:a4:57:f1:e3:
                    a4:d1:d5:ab:a3:53:69:a5:f7:4b:16:ca:a7:7b:55:
                    7b:c5:97:5e:3b:4a:46:d7:94:70:8d:4d:88:c8:41:
                    d2:75:eb:53:67:7e:f9:a7:8a:31:f6:a9:0f:af:66:
                    ed:b5:20:13:36:5b:09:41:4e:0c:8e:41:ba:ca:8a:
                    92:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:10:86:68:32:D0:D3:83:C1:41:13:D4:18:9F:BC:17:F3:B4:8F:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/91ee2738-4906-3329-a57f-20a46c5baa03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:a9:c4:e3:74:fc:a9:f9:8d:33:bb:ed:1f:4e:01:c1:9c:25:
         26:d5:5f:38:58:41:e7:e8:c4:9f:10:1d:9a:07:33:3b:d9:35:
         0a:82:ab:9b:f5:b6:ad:79:e3:c2:10:8d:8e:1d:89:75:fd:f6:
         39:c5:d6:fa:f2:b6:c7:c4:79:ca:22:21:2d:05:9f:e4:b1:40:
         24:d5:08:a3:c6:01:fa:56:39:9f:35:79:4a:4a:d5:cd:34:5f:
         42:4f:15:85:3f:38:38:ad:e6:87:72:d9:1b:24:e5:95:78:db:
         58:5f:70:6a:b4:ea:47:a0:b8:c8:aa:68:27:2e:eb:91:fd:c7:
         94:9c:79:fd:f4:13:22:24:16:c8:08:b0:82:e8:f1:ff:8f:0b:
         2f:4f:1c:59:5c:d7:5d:33:32:2f:ef:c0:36:06:41:65:f5:51:
         d9:09:da:da:6e:d3:8a:97:ef:24:f6:35:d0:41:d8:ab:fa:a4:
         54:ae:9c:42:ee:e8:81:54:70:f8:5a:85:4f:ea:28:a9:3a:16:
         62:c0:05:d0:af:ab:a6:a5:11:46:85:fa:e3:56:8b:07:52:84:
         5e:0d:63:95:b7:85:98:92:13:b5:51:99:2a:74:19:f8:c1:6a:
         dc:24:11:74:cb:7e:76:be:0c:32:ec:08:69:c6:b5:83:ce:ea:
         4c:d1:50:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----