Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/c07942a9-1fa3-30dc-95fa-43e8e2c687d5.roa
File:                     c07942a9-1fa3-30dc-95fa-43e8e2c687d5.roa (raw, json)
Hash identifier:          9k2t/NKcthtrkAOdkgXvOBLh0PT2oN79rg+t5PDafm8=
Subject key identifier:   98:9B:E6:CD:DE:9E:F3:B0:8C:97:85:0D:72:86:7D:36:50:9D:DA:9D
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583C6FEF0879675AA22F6D4E6E00
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/c07942a9-1fa3-30dc-95fa-43e8e2c687d5.roa
Signing time:             Fri 31 Dec 2021 05:00:00 +0000
ROA not before:           Fri 31 Dec 2021 05:00:00 +0000
ROA not after:            Fri 04 Feb 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        199.255.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:6f:ef:08:79:67:5a:a2:2f:6d:4e:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Dec 31 05:00:00 2021 GMT
            Not After : Feb  4 05:00:00 2022 GMT
        Subject: CN=39c66bda-92e7-4a72-9163-33512f8d0d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0b:2b:26:4b:b4:6a:f7:e1:4f:ec:09:df:75:
                    ea:ca:66:cb:b4:0f:85:6c:5d:56:36:ee:7d:a9:96:
                    f7:80:e7:ed:eb:6a:93:9b:c1:2e:6b:d6:f4:c9:c9:
                    cd:76:44:38:dc:2f:fa:82:a5:e0:14:1b:36:a2:89:
                    b2:92:0a:21:d8:3f:26:37:cb:91:40:5c:64:ac:f6:
                    df:4e:c2:1a:9a:84:b6:f1:ef:88:fd:09:06:7d:98:
                    e6:67:d8:16:45:a7:a9:c1:42:77:8b:04:47:12:7c:
                    c8:ae:46:bd:54:d3:49:fa:09:0b:77:9b:19:e9:76:
                    1e:76:01:ea:d4:34:aa:af:07:58:85:03:22:9f:2c:
                    28:92:2b:f4:b6:91:40:38:44:14:88:ca:f7:76:e1:
                    d2:84:2a:e4:b2:b7:a5:a9:7e:ee:df:43:71:87:b5:
                    ce:a8:35:7e:39:fb:cf:02:92:a4:89:c7:f2:54:ee:
                    4f:ca:fc:90:81:bf:75:a4:3e:87:55:75:11:0e:f9:
                    c2:89:e0:ef:ca:0e:85:82:3d:1a:c3:d5:0d:4b:bd:
                    4c:12:86:16:8a:60:e3:9d:2f:47:41:ca:f4:48:4d:
                    5c:92:18:16:9d:f7:25:f5:c8:18:6b:b5:13:e6:1c:
                    f5:9b:73:09:28:49:bd:56:32:bb:e3:5b:d3:72:3a:
                    07:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:9B:E6:CD:DE:9E:F3:B0:8C:97:85:0D:72:86:7D:36:50:9D:DA:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/c07942a9-1fa3-30dc-95fa-43e8e2c687d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:98:df:90:89:c9:fd:c9:fd:c8:e9:b3:22:e9:a8:64:bc:25:
         c7:26:83:05:ed:2d:b4:1b:64:5e:ac:02:bd:a0:90:5d:66:1b:
         be:90:1a:bd:8e:b7:37:9b:ec:c0:63:33:3f:fd:1f:3b:82:9b:
         3a:9c:a5:ba:a1:13:94:89:36:66:10:bf:4c:92:48:4c:c7:8c:
         a2:02:53:4c:9b:12:17:7a:c0:c9:09:e4:61:59:ae:db:ae:b5:
         97:a7:c3:20:30:a0:e9:66:0d:3a:6a:ef:2c:56:5c:80:2f:8a:
         40:7e:ef:d3:e7:45:50:98:00:b4:8b:73:25:40:e6:10:c0:32:
         03:54:9b:63:cf:39:6b:bf:0c:b1:43:0e:9e:82:e0:53:f5:21:
         27:12:94:69:37:8d:ec:2f:c9:0b:3b:87:99:f9:e3:f5:ba:18:
         96:4a:7c:32:04:65:6c:f9:c2:ad:eb:0e:a7:79:27:ad:da:c8:
         c5:f9:4f:c6:69:3a:ca:d7:d9:02:93:5a:e4:7a:c0:25:d4:f2:
         63:5b:5a:dd:f6:00:f0:69:85:4d:ae:9d:fe:f5:4c:28:93:78:
         ed:dc:de:72:1f:45:b3:12:f0:bd:95:f4:96:5a:43:01:d0:d0:
         f8:60:07:c4:df:3c:ca:2a:24:6a:98:25:43:24:2e:4d:0d:14:
         d0:07:ce:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----