Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/92838c77-3c92-321e-97b6-ec6bb9aeefb3.roa
File:                     92838c77-3c92-321e-97b6-ec6bb9aeefb3.roa (raw, json)
Hash identifier:          tJ1rW32DFxZ1VFvQHVL4SgfX3CRCFhfnBgTiMdXoTNg=
Subject key identifier:   27:C6:EA:08:00:21:DD:89:10:2F:A2:90:11:A6:EC:01:41:8F:16:31
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583EBD999F8174E63A3D11639B80
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/92838c77-3c92-321e-97b6-ec6bb9aeefb3.roa
Signing time:             Fri 29 Jul 2022 12:00:00 +0000
ROA not before:           Fri 29 Jul 2022 12:00:00 +0000
ROA not after:            Sat 03 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        23.249.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:bd:99:9f:81:74:e6:3a:3d:11:63:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Jul 29 12:00:00 2022 GMT
            Not After : Sep  3 04:00:00 2022 GMT
        Subject: CN=1eb0e598-ce48-46f7-9e9f-c25e054ff5e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:0c:1f:ee:ce:4d:29:0d:cc:2b:d6:2b:d6:e1:
                    15:17:5a:e9:3d:45:f3:77:f9:6a:af:ca:ed:af:d8:
                    5f:40:d9:67:42:f0:64:36:24:10:99:86:59:c4:0e:
                    53:d1:58:67:51:fa:70:62:56:68:37:f5:62:36:ce:
                    37:1a:1e:bd:45:f7:86:71:52:af:47:65:cd:79:d6:
                    8a:ec:a0:2b:46:bc:42:fa:be:05:27:d0:d4:de:e4:
                    c8:48:88:12:1d:2b:9f:29:a8:02:6f:fa:30:ec:49:
                    39:50:7d:4a:f2:e3:b4:a7:d4:3b:5c:22:76:6e:78:
                    55:c6:02:85:40:d7:53:1b:d3:c1:04:e4:e5:d7:f1:
                    db:fe:64:87:e9:2a:9e:fa:76:d9:80:0d:22:6f:cc:
                    d4:4f:a9:50:18:2a:10:1e:a9:9c:37:79:8e:d7:a6:
                    f2:fb:66:42:f8:ae:d3:73:c7:e5:71:30:d3:1b:b8:
                    6b:f8:65:77:f5:c8:eb:da:0b:98:49:64:dc:7e:99:
                    e8:fc:49:85:65:e8:1c:b6:52:7e:67:be:7d:dc:b5:
                    7d:00:dd:f1:3e:ed:49:5d:8a:c1:d8:9e:b7:a6:69:
                    68:f6:60:2d:ed:a1:3b:22:21:4b:38:4a:f1:1d:15:
                    a0:3e:55:2d:f5:43:dc:b4:56:df:ac:ff:e8:7f:ef:
                    14:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C6:EA:08:00:21:DD:89:10:2F:A2:90:11:A6:EC:01:41:8F:16:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/92838c77-3c92-321e-97b6-ec6bb9aeefb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:0d:c2:c7:b0:b0:e0:73:a6:10:9b:b4:90:57:a7:7c:99:5e:
         e5:f6:6d:3d:e5:cb:44:76:3f:03:eb:5f:98:7e:e4:e4:ef:de:
         64:38:1b:d2:0c:70:ae:90:b9:92:3b:d1:12:30:82:ff:e2:6d:
         54:2c:31:9f:11:7c:91:85:6c:3e:c7:c2:95:44:09:a4:c4:66:
         ca:36:b3:24:e0:ff:02:ca:98:7a:f4:cd:92:a0:58:16:86:b1:
         5c:f0:d5:77:6b:76:6b:c0:71:3f:a4:82:33:a6:a9:99:91:ee:
         a4:93:4d:b3:60:95:0d:76:d5:51:54:e5:4b:8b:b5:8c:75:71:
         05:e8:82:65:49:53:56:2a:23:73:a4:6c:68:d8:5e:7c:dd:b5:
         e4:42:44:1c:8f:26:26:0b:e6:2f:67:02:5c:52:e6:21:db:f4:
         a3:8b:67:ad:45:26:90:30:87:f4:a7:b3:de:ba:34:5d:3a:59:
         4c:ee:8f:33:d4:30:b4:1f:c4:ba:93:7c:1d:99:f6:e4:f1:a7:
         a9:d9:a4:59:83:7b:96:42:ae:6f:ec:b9:db:c1:85:36:79:52:
         6c:dd:ff:46:40:27:68:83:6b:c9:ba:4c:d7:ca:75:8d:ae:57:
         ad:54:1f:6e:f0:f8:24:6a:fb:9a:e3:a8:3f:6a:76:29:0f:6a:
         c4:46:0d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----