Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/bf6dc10e-184a-3bc8-89b9-43af01d441b1.roa
File:                     bf6dc10e-184a-3bc8-89b9-43af01d441b1.roa (raw, json)
Hash identifier:          OGjRdJ4Vo89HSdvtUIx2atMqayMR0doV2Lr4rzfO7j4=
Subject key identifier:   75:2A:7A:0F:51:EE:FC:F8:F3:78:81:96:DE:25:7E:4E:62:AC:6B:BC
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583C6F1EAB9598A198DE75800E80
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/bf6dc10e-184a-3bc8-89b9-43af01d441b1.roa
Signing time:             Fri 31 Dec 2021 05:00:00 +0000
ROA not before:           Fri 31 Dec 2021 05:00:00 +0000
ROA not after:            Fri 04 Feb 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        23.251.224.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:6f:1e:ab:95:98:a1:98:de:75:80:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Dec 31 05:00:00 2021 GMT
            Not After : Feb  4 05:00:00 2022 GMT
        Subject: CN=9f82c37e-3d27-47f7-9145-a7a48ed030bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:67:c1:3b:e5:f1:1b:00:45:c6:ce:e4:f7:39:
                    49:54:b7:7b:72:d1:cc:76:c3:92:cd:01:88:c8:48:
                    1b:ed:ff:d2:2c:4e:1c:6c:9b:2f:b4:c3:af:2c:13:
                    a6:ac:80:b9:31:8e:c7:b6:bb:b1:d5:5f:79:ae:8c:
                    de:15:89:4c:81:84:5c:d9:da:b9:4d:4f:d5:29:bf:
                    6e:fc:64:6e:de:7f:a5:7b:3c:cd:38:35:90:9e:99:
                    83:5c:e2:20:51:6c:cb:d1:21:7f:11:36:61:3f:06:
                    8b:11:7b:ad:80:9b:8a:4c:2b:06:12:b4:ff:2e:9a:
                    ce:72:ab:32:8e:bf:32:1b:3b:ef:e4:bc:25:fd:81:
                    cf:82:bb:f0:0c:97:67:c2:a4:a2:c9:23:69:70:86:
                    2f:5b:00:b4:4c:5d:bb:13:4e:d1:9f:ba:8e:6e:96:
                    63:16:c6:85:b9:10:90:b3:62:fb:9e:3e:5f:e8:e2:
                    df:d2:1f:08:35:eb:40:5e:97:65:77:e5:47:65:a5:
                    26:c2:1d:cc:39:8e:06:47:77:01:5f:ca:71:b4:03:
                    c6:7f:68:54:ce:6d:8a:58:d7:7a:2e:2c:da:64:78:
                    56:ab:d7:71:54:77:20:01:10:f5:88:b5:1c:46:93:
                    84:7c:34:a5:29:7a:89:9a:7a:be:af:48:ff:c9:0c:
                    71:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:2A:7A:0F:51:EE:FC:F8:F3:78:81:96:DE:25:7E:4E:62:AC:6B:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/bf6dc10e-184a-3bc8-89b9-43af01d441b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:94:be:bf:08:1b:74:77:b3:64:a1:31:a0:61:ad:d1:d5:05:
         92:ef:99:39:d0:69:85:f0:47:97:6c:59:82:a7:59:dd:a8:ed:
         ba:54:d5:c5:75:08:a3:04:04:1a:a8:72:49:22:cd:ed:7c:53:
         00:84:ec:85:df:bc:eb:77:cd:5f:7a:12:29:08:21:9c:c0:49:
         8e:23:ec:f5:59:a1:91:64:d0:36:f0:44:7c:c4:7e:e1:5f:35:
         20:ea:cd:f3:ba:9f:c8:62:d8:bf:12:83:f8:38:72:56:a7:78:
         be:09:91:ac:d6:ad:e0:49:f3:11:97:85:98:7f:ac:f7:ff:8f:
         fd:f9:c4:80:67:1b:73:84:97:16:a9:23:54:a1:74:e3:57:8f:
         d8:54:16:9c:0c:75:5c:ef:e8:61:5e:1c:67:97:aa:e0:33:f4:
         75:22:5f:8a:91:4a:f9:2e:67:7b:47:f9:67:f8:69:49:62:c5:
         88:4e:2a:ca:bf:d8:71:c1:ad:96:07:db:66:5a:70:12:93:c1:
         4b:25:e2:d1:41:c2:f3:b5:ac:40:c9:6b:24:ed:ee:4b:df:dc:
         6d:64:2c:ca:30:cd:e1:c8:8a:6a:7d:6e:c8:a9:d4:cb:0b:79:
         09:6a:81:83:c2:28:35:75:1d:3e:e6:44:51:5e:9c:57:80:9e:
         a7:bb:f9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----