Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/dc5cc645-0a99-302f-aca2-b39add128023.roa
File:                     dc5cc645-0a99-302f-aca2-b39add128023.roa (raw, json)
Hash identifier:          7s+XXwk7jdGbWKY88PEl72GziJZ//e75sPd3PidWpes=
Subject key identifier:   60:A3:BD:80:88:51:36:87:FD:92:72:93:31:34:3B:53:07:DD:84:63
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F43285840B5A7401A13D5731D51A62600
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/dc5cc645-0a99-302f-aca2-b39add128023.roa
Signing time:             Thu 26 Jan 2023 12:00:00 +0000
ROA not before:           Thu 26 Jan 2023 12:00:00 +0000
ROA not after:            Fri 03 Mar 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        23.251.224.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b5:a7:40:1a:13:d5:73:1d:51:a6:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Jan 26 12:00:00 2023 GMT
            Not After : Mar  3 05:00:00 2023 GMT
        Subject: CN=5f061af5-56f4-4715-a5e3-09fe858aa331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:90:5f:d3:02:b8:80:de:73:dd:7c:ec:f4:63:
                    30:dd:4d:10:f0:85:de:87:26:16:eb:f7:6d:ea:9e:
                    9e:af:1a:d3:fc:a6:30:c7:06:23:e8:e6:f8:84:52:
                    d7:ed:10:6e:47:43:e4:7f:ad:8d:c8:ef:2f:19:e5:
                    a7:8c:22:46:e8:e8:50:8a:83:ba:ab:f5:34:c2:69:
                    22:ed:cf:c2:a8:10:1b:0c:56:2c:5b:73:79:b4:57:
                    3b:b8:9b:d2:34:82:1d:f4:be:24:9f:0a:1c:ef:ed:
                    65:27:f6:ba:ae:99:ec:cb:43:a8:e3:62:74:40:a0:
                    85:29:09:05:4f:ca:a3:32:31:51:15:12:c6:d2:1d:
                    01:4e:0f:99:92:2f:ed:23:53:50:a0:93:32:3c:0c:
                    59:ad:41:c0:d1:e4:4d:a8:63:a5:c9:98:83:be:15:
                    a3:a8:ec:5f:ad:67:ad:0e:4b:93:ae:d6:74:07:e8:
                    58:61:2a:f1:21:25:8b:6b:4e:a4:db:81:b4:8b:32:
                    bc:8b:46:1c:8c:d4:0f:24:64:93:cf:b2:55:1a:25:
                    61:73:b4:3c:bd:f4:46:f2:ce:96:6a:59:81:76:88:
                    39:06:05:60:3f:b5:08:b1:3c:5f:d5:ed:9f:a1:aa:
                    50:bf:a4:3f:7a:2a:65:bb:4c:bc:3a:50:55:e3:1d:
                    ec:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A3:BD:80:88:51:36:87:FD:92:72:93:31:34:3B:53:07:DD:84:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/dc5cc645-0a99-302f-aca2-b39add128023.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:09:4a:82:f3:0f:61:e2:0d:f4:2c:d9:95:e6:13:6b:ab:74:
         22:6d:b9:49:51:f3:10:a4:77:74:51:9a:9e:79:4e:b3:47:16:
         cf:7e:ae:72:b7:66:d1:ad:a7:8d:ff:88:e5:7d:2d:d5:fc:de:
         f4:f8:fc:19:56:a3:16:64:58:2d:ae:5e:df:ed:70:8f:19:ed:
         78:af:c0:d4:e4:47:92:18:0c:b5:a7:aa:a4:d6:4d:ce:8a:69:
         58:23:01:a3:aa:fc:1d:63:f1:a5:df:d2:b3:ef:80:28:ba:25:
         c3:b0:10:ac:9d:95:47:cf:79:94:20:af:b6:bc:3e:33:9f:22:
         68:2b:4c:ad:f7:76:f2:e1:49:7b:0b:6b:6b:7b:0c:a1:dc:62:
         5a:0f:54:c7:01:26:94:d1:36:14:5c:eb:bf:bb:6b:c3:b0:44:
         21:04:a7:61:f6:b4:f1:e8:c8:0b:00:6f:b1:4b:d9:48:d3:f3:
         55:2d:0d:17:c2:1d:f5:de:13:2f:8b:1f:08:9f:10:35:a7:98:
         b9:b3:c0:4f:43:17:94:5a:ed:ec:fd:bb:77:c2:19:76:c7:ec:
         6c:d2:e5:6a:45:df:4e:d4:a7:5b:85:53:21:5e:80:c9:d2:18:
         9c:fb:c2:2e:90:d1:06:c8:e3:c8:72:05:6f:76:8c:9d:57:0d:
         87:90:59:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----