Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/d2b3f831-9639-31cc-84c8-39a693029338.roa
File:                     d2b3f831-9639-31cc-84c8-39a693029338.roa (raw, json)
Hash identifier:          uIODdLPpGNUBbmgJiKkObwLAh4DgjJFqlMV8/iRcwI4=
Subject key identifier:   BC:74:C1:9E:2F:C0:EE:99:0C:EB:C5:47:D8:99:96:0B:F3:DD:7B:E6
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583FF67A7D2E57368B58BDF07C00
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/d2b3f831-9639-31cc-84c8-39a693029338.roa
Signing time:             Fri 18 Nov 2022 12:00:00 +0000
ROA not before:           Fri 18 Nov 2022 12:00:00 +0000
ROA not after:            Sat 24 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        23.249.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f6:7a:7d:2e:57:36:8b:58:bd:f0:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Nov 18 12:00:00 2022 GMT
            Not After : Dec 24 05:00:00 2022 GMT
        Subject: CN=46527655-3b0b-4653-b0e8-7a44e5bf8701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3c:a8:dc:cf:63:3a:ba:ca:3c:b1:06:68:26:
                    e1:c3:e6:1f:6b:26:57:5e:06:f3:b1:c9:c6:40:a6:
                    f4:91:6f:86:15:7d:32:cc:0d:8e:22:86:f9:ba:80:
                    7a:78:78:fc:de:f2:e7:90:e5:49:14:0c:7e:27:62:
                    7a:2b:11:b5:61:b5:d0:f2:b4:49:5d:0e:32:52:80:
                    0b:6e:53:00:75:70:85:c2:fa:ea:73:56:99:bf:62:
                    5c:8c:b4:4c:35:1c:a3:6c:8e:41:93:ce:10:cf:16:
                    1e:7a:d5:d4:0e:2c:1b:bb:aa:73:26:28:25:ef:67:
                    7b:cd:86:83:be:7d:21:a7:77:32:ef:71:a7:b3:b8:
                    ba:8b:51:cb:ee:09:08:bd:1b:86:c3:86:9a:02:d4:
                    f9:9c:d4:5b:ee:52:b7:ca:a0:05:ad:c1:66:0e:77:
                    01:e1:fc:86:ee:45:97:ff:7f:bd:54:81:3c:5b:4d:
                    98:c4:99:0d:60:35:ab:15:4d:c9:9d:d2:19:f9:3c:
                    22:83:92:8c:1f:39:3b:76:8e:99:b7:51:c4:84:24:
                    69:41:c0:ba:24:4d:fc:1a:f1:9d:58:2f:6a:4d:c8:
                    f3:06:c5:d2:c6:3e:ed:fc:7e:db:2b:37:4d:c7:88:
                    12:a0:ba:9c:e5:e9:ca:29:c6:52:47:9b:c0:33:ee:
                    7a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:74:C1:9E:2F:C0:EE:99:0C:EB:C5:47:D8:99:96:0B:F3:DD:7B:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/d2b3f831-9639-31cc-84c8-39a693029338.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:f0:2e:58:f0:f9:76:ff:77:99:1d:fc:4f:cf:bf:32:44:4f:
         1d:eb:cc:32:e9:03:46:35:0c:32:f4:f6:64:18:49:71:05:47:
         b5:a1:fb:74:a5:c7:36:09:63:b3:d7:03:54:be:18:dd:ad:b6:
         89:8d:ce:9a:a1:26:0a:5f:7f:2c:87:be:d6:8e:db:0d:49:2d:
         3a:69:8c:4f:e1:9c:c9:1b:6a:3d:f5:e6:a6:42:db:04:20:77:
         00:10:96:81:91:70:86:49:0a:6c:98:54:b5:79:b1:e7:be:aa:
         a7:80:5a:6a:70:45:0d:e7:e8:47:5c:16:1f:5e:08:2c:c5:f9:
         b3:bb:36:70:01:53:2d:28:be:2b:d5:7f:7f:c6:cf:a0:da:bc:
         ee:b5:a9:f3:2d:09:7c:b9:2c:60:8a:e2:cc:99:86:41:1c:14:
         00:4a:bb:93:ba:e7:de:f9:cd:20:db:b2:da:25:4c:9a:6d:9f:
         54:dc:6f:0d:c5:23:3d:79:ac:56:70:66:63:0e:28:b6:92:42:
         44:56:91:95:d8:e3:9c:96:20:2e:2e:56:f6:25:87:af:0f:7c:
         81:af:00:26:e9:d6:3c:f2:98:4d:a9:4c:e9:f8:13:3d:b7:4f:
         60:e2:77:33:f7:11:d5:c9:71:e1:04:9f:8d:a6:6a:ea:5c:e1:
         e9:5b:98:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----