Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/bac3e972-6e53-3de8-8107-d42d5a8eb556.roa
File:                     bac3e972-6e53-3de8-8107-d42d5a8eb556.roa (raw, json)
Hash identifier:          6Eke1IkbAFKi1M1P7wXp7eXdJmG9eyZ24KFgLzEt0xo=
Subject key identifier:   0E:5F:D0:21:B2:21:A2:AB:F2:9E:E5:E2:E7:01:14:FF:6B:8B:BF:C5
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583FF6F1689B221FA72810F51740
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/bac3e972-6e53-3de8-8107-d42d5a8eb556.roa
Signing time:             Fri 18 Nov 2022 12:00:00 +0000
ROA not before:           Fri 18 Nov 2022 12:00:00 +0000
ROA not after:            Sat 24 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        69.169.224.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f6:f1:68:9b:22:1f:a7:28:10:f5:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Nov 18 12:00:00 2022 GMT
            Not After : Dec 24 05:00:00 2022 GMT
        Subject: CN=5e3ecf92-6985-495f-987b-915c7a7e70db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:88:01:57:7e:ce:d9:18:13:af:5b:0f:9a:c5:
                    62:1c:53:e7:3d:15:41:eb:3d:c9:7c:d6:37:d6:2c:
                    1a:17:db:4a:86:d8:07:c1:01:2b:a7:02:7d:cd:da:
                    82:1f:56:87:ae:4b:c7:d8:4d:6a:f2:f9:b7:81:02:
                    58:72:8e:7a:e5:27:ce:db:29:51:82:cd:38:54:b0:
                    f0:a2:df:1f:76:ca:9f:28:0c:c7:4e:07:56:0c:b6:
                    9c:1b:7a:b8:2b:aa:f0:b4:f1:f9:35:70:c7:bf:5d:
                    3a:86:6a:5a:f7:3d:f4:9b:31:9f:c5:3c:10:8d:e8:
                    17:e3:90:b6:08:24:b9:03:4c:9b:0c:9d:dc:50:5c:
                    df:18:5d:ef:80:1e:cf:cb:f5:b1:8e:c1:a5:ae:a6:
                    98:17:2e:8d:77:c9:94:a7:1f:bd:15:52:a3:ea:c8:
                    04:aa:d2:5b:50:af:ee:b4:95:27:3b:c5:c1:00:95:
                    62:11:48:86:77:96:07:71:b0:5a:e8:9c:af:54:5c:
                    80:0b:31:fb:6e:8b:54:b2:f3:39:73:35:3a:da:1e:
                    44:fd:de:e1:07:31:8c:9a:5a:ee:07:b3:29:8d:ae:
                    95:65:9c:6a:f3:68:67:69:20:d5:70:2e:73:73:cc:
                    77:a4:74:a5:29:4c:b7:85:0a:45:06:d2:ed:db:fe:
                    ca:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:5F:D0:21:B2:21:A2:AB:F2:9E:E5:E2:E7:01:14:FF:6B:8B:BF:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/bac3e972-6e53-3de8-8107-d42d5a8eb556.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.169.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:46:fa:8d:52:02:51:4c:66:64:77:5c:de:f7:71:30:34:ce:
         57:92:cd:af:04:d1:93:f8:dc:c2:b5:ef:7f:98:8d:d3:5d:26:
         51:2c:20:8d:37:2e:36:87:89:20:b6:3c:d2:66:20:0e:73:b5:
         f8:5f:fb:6d:90:02:ae:25:c4:b5:40:df:a6:1e:65:5c:24:db:
         54:69:a2:cc:5c:39:b4:f9:8c:9f:6f:cd:c9:c1:8e:19:44:c8:
         e1:39:46:e0:ab:a4:ad:46:d9:d9:89:04:e1:9e:62:ef:d8:1f:
         82:fa:7d:ef:e8:3d:45:8e:87:f7:bb:3a:73:bb:c3:93:15:7f:
         f7:0f:f6:3c:4a:db:f5:bb:7c:92:db:95:4f:7d:7e:6d:69:77:
         3b:1a:b4:41:c5:88:73:e2:a0:82:0a:41:cf:bd:3c:b5:18:9f:
         e8:c9:86:7b:79:17:1a:50:9b:f7:1f:4d:b1:36:b2:4a:cb:c3:
         8e:76:00:c5:26:8e:d6:87:78:ad:71:52:98:7c:b5:71:ea:87:
         36:82:b7:46:18:52:35:05:cc:2c:61:eb:60:29:9c:42:35:fa:
         18:37:3d:aa:61:86:fc:ae:7f:2e:ec:cc:ac:6d:e8:30:91:ac:
         a4:99:1f:63:26:71:ad:6e:51:70:aa:e6:1f:42:4c:a3:2e:8c:
         0b:bf:fc:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----