Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/af273ef3-79cf-3c6e-8890-6c75cca83a91.roa
File:                     af273ef3-79cf-3c6e-8890-6c75cca83a91.roa (raw, json)
Hash identifier:          LXSfXepU4cAMjXk8GfjVApKxe08HhnLW9pEm/uXPVk0=
Subject key identifier:   4E:F4:1D:55:EA:9C:B8:7E:41:56:7F:99:E2:36:5C:8C:5E:32:71:BA
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583FF4CA845CCC53A3BB64C24220
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/af273ef3-79cf-3c6e-8890-6c75cca83a91.roa
Signing time:             Fri 18 Nov 2022 12:00:00 +0000
ROA not before:           Fri 18 Nov 2022 12:00:00 +0000
ROA not after:            Sat 24 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        199.127.232.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f4:ca:84:5c:cc:53:a3:bb:64:c2:42:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Nov 18 12:00:00 2022 GMT
            Not After : Dec 24 05:00:00 2022 GMT
        Subject: CN=b4ee5740-dd6a-47af-b6c3-ca3c07dd1df1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d9:a5:6a:3e:c6:92:27:13:87:c2:aa:e7:33:
                    93:42:6c:e8:e8:97:2e:32:f1:7e:4b:43:c8:84:50:
                    e1:9a:57:ab:7b:69:90:41:b5:e0:8f:68:36:0e:a9:
                    da:40:d3:b5:9c:1b:37:32:88:33:0f:0a:ba:a0:36:
                    33:b8:13:4d:c3:7e:4b:4b:d9:b4:83:1b:0b:28:ec:
                    a9:6c:d7:1e:38:41:d5:cc:3d:43:0b:bd:a9:58:34:
                    15:95:00:09:98:f1:c2:79:6b:77:7c:6f:3c:2e:cd:
                    0a:22:5b:83:16:4d:6c:dc:6c:42:91:a9:39:db:02:
                    85:d5:d8:64:e1:ea:1c:8a:12:f7:d8:a7:e1:6d:77:
                    dd:57:4e:9b:92:11:8f:1a:b4:e8:f3:8d:97:80:c1:
                    cc:82:84:9e:c0:71:dd:cf:d2:1b:f4:51:8e:de:26:
                    52:b5:67:5f:14:2c:b9:98:28:80:4e:80:81:a9:93:
                    ca:57:0b:1e:fb:e5:c9:56:03:b9:17:20:f7:95:e5:
                    f7:f2:62:b1:5a:f0:1c:61:78:45:81:5a:ea:c0:49:
                    a0:55:89:36:4a:95:fb:2d:a1:de:f7:0f:7e:c4:01:
                    bc:50:bb:8c:41:34:2f:d8:28:dd:ab:55:04:41:05:
                    99:09:0e:7d:3d:a2:c9:df:c2:6b:c4:49:ea:dd:5e:
                    b3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:F4:1D:55:EA:9C:B8:7E:41:56:7F:99:E2:36:5C:8C:5E:32:71:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/af273ef3-79cf-3c6e-8890-6c75cca83a91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.127.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:00:46:c4:3c:8d:1a:e9:c8:43:18:86:a0:a4:8d:2f:97:bb:
         6b:28:4f:6a:41:b1:72:4c:48:ec:33:66:fc:d1:a5:b1:46:ad:
         be:ae:ee:b4:82:9b:6b:23:b5:1c:f7:3a:80:3a:5b:a3:72:12:
         a8:3c:2a:e1:6e:72:c2:f2:f0:89:29:7d:11:9c:67:91:1f:0d:
         b6:fb:99:13:65:e5:34:3a:23:28:76:e2:4d:09:c0:3d:0f:c3:
         cf:d9:db:df:7b:c7:ca:2d:d0:45:71:5e:34:de:39:3b:ea:4e:
         de:fc:e4:84:f7:82:72:04:ed:0a:cc:0a:31:6a:3b:72:bb:45:
         eb:4c:a0:09:02:71:8d:1b:20:f0:97:40:f2:9a:e3:e0:d1:18:
         ce:d2:75:7e:67:7d:47:dc:31:03:f9:0f:a3:4d:7a:28:10:69:
         4f:2a:f5:dc:a0:5d:31:d3:a4:6b:f2:c0:e3:ac:23:7f:cf:44:
         24:f1:50:bc:c4:6d:2e:25:65:78:00:a7:81:78:6e:d7:f1:38:
         03:84:97:97:58:92:4c:d2:0e:e8:c9:81:ff:b7:05:da:d2:9b:
         82:19:f3:37:07:90:02:10:ad:87:9c:68:24:25:11:46:da:1e:
         ce:0a:7a:09:d4:fc:98:47:fb:84:00:de:51:da:60:e7:19:36:
         58:56:a0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----