Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/b859740d-5bc3-3678-b86c-afb9d4b42422.roa
File:                     b859740d-5bc3-3678-b86c-afb9d4b42422.roa (raw, json)
Hash identifier:          fuW0R+uvWtli5a8wkhOpFux0xA1zFiPeUJRJFd5F0PA=
Subject key identifier:   C4:77:C3:9F:FA:7C:3A:AE:78:B1:2A:84:D3:00:4C:45:1B:31:5D:25
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583D33802B0E789660CAF4B32064
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/b859740d-5bc3-3678-b86c-afb9d4b42422.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        199.127.232.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:33:80:2b:0e:78:96:60:ca:f4:b3:20:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=e1e9e978-a99a-4acc-9c85-e41b24b5c710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:01:66:6a:8d:1e:15:f6:16:96:e5:3c:17:78:
                    ad:97:6a:1c:71:f9:56:29:e6:cc:44:bd:cc:5a:9f:
                    1b:19:16:a9:e1:c4:e7:e1:33:d0:ba:f0:ca:2e:3d:
                    25:97:2e:d2:cf:36:c6:c6:72:1c:a1:be:ed:26:27:
                    8c:07:d4:4d:3b:6f:d9:05:09:b0:9c:c8:fb:bb:62:
                    59:45:9c:42:fb:40:1e:3a:53:8c:51:2f:1f:15:65:
                    5d:0f:f6:65:fa:3f:f1:12:fe:a2:35:85:bd:6a:ce:
                    47:fe:77:c6:98:9e:72:2f:da:8c:c2:7e:0b:4c:11:
                    80:3e:d6:b5:89:ae:de:d4:e5:23:c1:40:7f:8b:14:
                    f1:87:f5:fc:33:f0:d7:d2:7c:f5:1b:d6:a6:94:1b:
                    d0:f1:50:4c:80:2a:33:c4:e4:29:38:6f:e6:2e:0a:
                    2f:8a:0c:a3:16:02:c8:b5:46:66:c7:93:25:76:dc:
                    7e:25:55:e3:ab:7f:b2:d0:4f:ed:a9:1c:41:71:20:
                    1c:ec:da:03:4b:d8:99:db:3d:a1:e0:3c:af:31:0d:
                    f4:a4:1d:b0:b9:ef:54:99:6e:f3:c6:0f:cb:b0:9e:
                    4c:a3:d2:3a:78:33:fd:bf:dc:7a:67:2c:b8:3e:9f:
                    63:0c:bd:fd:00:a3:40:33:34:c2:ed:3e:f1:f6:59:
                    0a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:77:C3:9F:FA:7C:3A:AE:78:B1:2A:84:D3:00:4C:45:1B:31:5D:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/b859740d-5bc3-3678-b86c-afb9d4b42422.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.127.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:d8:e2:f7:8f:ca:44:2b:45:02:d6:af:dd:50:98:d1:83:76:
         59:30:2d:11:06:77:86:03:e4:e6:8d:73:9c:5e:9f:66:fc:86:
         cc:e8:0b:3d:00:e7:d8:71:08:1b:11:33:43:49:92:95:47:85:
         86:80:fd:7a:e8:0d:c7:3f:7c:9f:b1:d8:d8:65:ef:9c:b4:1c:
         3c:a1:c8:bd:96:9a:4e:43:fa:2d:e4:81:0a:18:18:d8:4c:9c:
         94:1d:43:d8:e7:d7:34:5a:ff:02:07:ea:ea:dc:a7:54:d0:8e:
         ca:07:92:50:39:d7:84:5f:1d:cb:e7:97:17:76:6e:b8:e9:99:
         40:c0:58:87:c8:7e:8c:dc:fa:e7:74:f3:88:d3:25:d4:ab:60:
         bf:0c:17:3d:e3:20:5f:b3:df:96:1f:ca:0c:cf:61:80:bb:1a:
         dc:a5:1e:3b:59:82:0f:83:27:fe:59:c0:de:36:2a:0d:bb:4e:
         4d:60:95:21:78:5d:41:d8:be:e9:68:4d:63:00:01:34:6c:77:
         dc:ff:53:0b:22:6c:89:b4:8b:e2:c9:e9:ad:36:75:0e:be:40:
         58:59:d6:28:81:68:f7:36:56:eb:f6:25:21:2b:ea:86:55:5c:
         83:e1:97:f9:a3:86:c4:f6:59:aa:98:e9:30:77:b1:e7:3f:33:
         7e:c0:d1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----