Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/b7a02357-dba8-3e6a-9495-427685e8e6f3.roa
File:                     b7a02357-dba8-3e6a-9495-427685e8e6f3.roa (raw, json)
Hash identifier:          2k5BK0jMJiglhTntl3u/0zRkeEPKuXmJH6BTMlLwO9M=
Subject key identifier:   25:26:8D:D1:40:AA:61:0D:8C:68:52:EA:73:A3:2B:90:00:2F:00:62
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583CE54632589D97AA60E7EA8300
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/b7a02357-dba8-3e6a-9495-427685e8e6f3.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        199.255.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e5:46:32:58:9d:97:aa:60:e7:ea:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=70b477f2-399c-46cd-a874-a1eaf1d79e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:33:fa:3e:8d:db:d0:98:87:82:f0:e1:f9:2f:
                    ad:d8:a0:b5:36:cb:f4:28:50:6a:45:6b:ce:0e:0e:
                    e1:87:c0:04:27:d4:ad:66:2a:7d:5c:60:0e:d6:60:
                    50:dc:db:cb:ef:61:8c:ad:d1:c1:d5:16:60:a6:08:
                    3d:b5:ed:b8:8f:b4:4e:4e:36:e1:2e:8e:7b:f3:f4:
                    3b:7c:91:c5:64:44:86:b7:48:83:83:14:37:c5:70:
                    63:6f:20:56:37:64:c7:b5:6d:da:de:cd:ca:8d:ae:
                    49:89:49:be:38:2d:9b:02:fb:15:96:07:ef:ec:49:
                    16:c1:fa:f0:96:72:82:45:20:37:da:06:ca:d4:ee:
                    75:b6:c4:99:a9:a9:45:8a:f8:74:38:aa:d3:38:82:
                    2b:ed:4a:4a:58:e9:24:53:68:56:54:33:b1:26:bd:
                    09:1a:1e:a5:21:5e:1f:7a:dd:36:4b:c0:eb:38:09:
                    62:fd:32:36:ed:3c:15:32:ef:b1:08:a0:53:a8:d3:
                    86:d3:c1:f5:99:ae:08:18:6b:a5:5a:32:6b:48:3d:
                    32:a1:5f:8e:bd:8a:8f:af:63:ec:77:17:58:8b:1a:
                    c1:2b:1d:25:0b:ca:07:cc:5f:26:15:b8:b0:22:a8:
                    06:59:b7:7f:8d:99:69:0e:e4:e2:35:bc:7e:81:da:
                    8c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:26:8D:D1:40:AA:61:0D:8C:68:52:EA:73:A3:2B:90:00:2F:00:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/b7a02357-dba8-3e6a-9495-427685e8e6f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:4b:24:7a:bf:0f:39:59:93:47:5b:03:0f:b8:0a:67:32:c3:
         11:1a:01:a8:ca:9e:ec:1e:a4:9f:51:2d:63:4f:3d:60:6b:e5:
         aa:5e:25:0f:c3:f6:c6:53:ed:60:f6:bb:b1:26:f5:df:fb:27:
         55:da:62:d4:13:17:fb:1e:59:22:a0:53:d3:23:79:40:42:af:
         7b:ae:81:31:cf:99:eb:5c:0a:f0:07:ac:40:e0:f1:e4:ff:93:
         c6:5a:14:bb:55:87:07:07:54:a1:a1:ad:b9:aa:4f:ca:ff:d7:
         07:4e:09:8e:9b:7c:1d:dc:03:ba:4b:35:b7:d4:2c:4e:a4:ca:
         9e:24:e1:ee:17:93:83:9b:d9:de:cf:f8:e9:2f:47:fd:bb:9f:
         f5:76:cf:0e:d1:fe:e7:bd:09:51:95:6d:d0:ac:37:63:06:6f:
         5d:4c:2f:5a:17:ab:13:c5:79:f2:0e:2b:c3:98:1f:aa:5d:03:
         53:d6:e3:cf:60:4b:85:79:8f:ec:2c:77:f4:30:39:66:59:72:
         45:85:91:d8:7a:f3:e8:a0:d4:01:72:02:94:35:61:ed:77:78:
         c0:f3:15:ff:34:d8:38:6f:ae:70:d7:99:4d:c3:c2:f8:9f:4b:
         b2:28:13:c5:d4:9a:8e:a9:20:56:c5:c4:9d:9c:d1:29:37:58:
         02:36:9a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----