Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/b495bd88-fe30-31c7-a4ab-0e814d857625.roa
File:                     b495bd88-fe30-31c7-a4ab-0e814d857625.roa (raw, json)
Hash identifier:          Zkk6d0Z2HbqDiM9uvl0wjBapYvvdJiZXKpgue6HQ/sA=
Subject key identifier:   8C:06:7E:A7:77:24:26:BD:19:C8:E0:9A:E3:BA:29:05:B5:76:48:AB
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F432858401E24B3A8D536B7E3AFAAA880
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/b495bd88-fe30-31c7-a4ab-0e814d857625.roa
Signing time:             Sat 03 Dec 2022 12:00:00 +0000
ROA not before:           Sat 03 Dec 2022 12:00:00 +0000
ROA not after:            Sun 08 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        69.169.224.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:1e:24:b3:a8:d5:36:b7:e3:af:aa:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Dec  3 12:00:00 2022 GMT
            Not After : Jan  8 05:00:00 2023 GMT
        Subject: CN=f3a220d5-3de8-4e30-8287-2fd992d35c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6d:57:a4:10:fb:ca:20:bb:d3:eb:a6:1c:08:
                    6b:91:2a:cc:d5:78:bb:5b:49:00:75:b7:ed:10:9b:
                    57:24:0f:4f:ef:b5:75:81:ef:06:0e:44:ed:63:71:
                    87:1e:1e:66:f4:48:96:e6:22:cd:c5:f2:e1:c0:5f:
                    3e:65:b4:60:43:bf:fb:c9:eb:5b:8e:6a:11:37:1c:
                    20:ec:25:7f:f4:d1:d7:bb:f1:55:78:05:60:ae:20:
                    12:e5:a9:71:9c:8c:50:6d:8b:27:19:f6:fa:e4:fa:
                    2a:d1:b4:e8:6f:ec:92:c8:dc:cc:b7:e8:42:41:fa:
                    e2:1a:72:c1:84:27:af:78:bf:68:29:2c:a8:7a:32:
                    12:69:ea:8b:a6:51:ec:17:94:2a:94:b7:20:d4:58:
                    13:be:c0:4c:77:fb:0f:7b:07:a9:7b:6f:fa:ba:6d:
                    11:2c:18:79:00:86:e2:21:97:b5:d4:25:e0:7f:0f:
                    09:19:4b:60:ee:0d:00:6b:aa:65:61:c4:96:3d:b7:
                    73:78:cf:56:4a:66:b5:0b:70:d4:f2:b2:38:33:12:
                    e1:a8:9f:4d:cd:f6:a0:2e:fb:6e:22:5b:70:0f:a6:
                    3b:f3:cb:cc:06:f1:aa:2f:86:0d:bc:b6:95:a5:66:
                    95:4c:e3:59:a1:fe:9f:4f:ec:18:34:22:89:dc:f9:
                    85:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:06:7E:A7:77:24:26:BD:19:C8:E0:9A:E3:BA:29:05:B5:76:48:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/b495bd88-fe30-31c7-a4ab-0e814d857625.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.169.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:a6:85:3e:32:42:e2:91:25:bc:46:13:bc:97:5d:03:bf:04:
         d3:e2:ed:c6:0a:fd:68:48:50:71:8e:8b:9a:2f:a3:28:ce:d6:
         bd:82:43:04:0f:1c:75:5e:4a:cc:a1:ec:1e:60:3f:de:02:88:
         34:ec:73:b8:ed:0b:2d:e9:75:40:42:a6:5a:6e:80:0d:38:c2:
         2d:f7:6f:64:70:cc:08:a3:2f:6a:2c:8c:01:26:9b:6a:eb:17:
         a4:a6:70:22:ad:fd:c0:cf:cb:3f:16:80:ac:8a:37:d1:62:b6:
         43:92:d1:4c:38:57:a5:ea:d5:7f:23:ec:57:82:ec:67:02:85:
         cd:21:19:f7:45:28:30:d0:31:7b:f3:1c:20:89:fd:2b:ce:37:
         91:98:61:c3:2f:1d:15:13:09:44:ee:3b:88:bc:8f:d4:f5:08:
         c3:1e:4c:eb:d2:b1:0a:91:f9:f5:22:d0:a2:ea:01:60:dc:40:
         95:2c:17:ef:e9:90:8a:ff:96:14:b5:a0:2a:ca:d2:40:ce:9d:
         56:e7:bf:97:4b:03:3d:7a:f1:5d:fc:1f:9b:e6:35:f8:48:59:
         d6:4d:da:49:49:6c:1b:00:69:fe:ff:02:6e:69:47:a0:fa:c0:
         7f:d3:1f:25:a6:c9:79:bb:6c:c7:94:b0:99:c4:a9:81:ef:38:
         59:c8:07:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----