Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/df942fad-2a7b-3a37-ae57-0bd37832ed9b.roa
File:                     df942fad-2a7b-3a37-ae57-0bd37832ed9b.roa (raw, json)
Hash identifier:          qXHNUI32ULXWSeaUrT3jpdoFxiZ9q+fnaoOcm3Omz8c=
Subject key identifier:   4E:25:3D:FE:73:E0:2F:9E:E2:ED:63:30:EF:41:9C:B2:97:6C:9C:7B
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328584044BBEABF7A907013F442E7C0
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/df942fad-2a7b-3a37-ae57-0bd37832ed9b.roa
Signing time:             Fri 16 Dec 2022 12:00:00 +0000
ROA not before:           Fri 16 Dec 2022 12:00:00 +0000
ROA not after:            Sat 21 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        23.249.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:44:bb:ea:bf:7a:90:70:13:f4:42:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Dec 16 12:00:00 2022 GMT
            Not After : Jan 21 05:00:00 2023 GMT
        Subject: CN=0967eac3-3681-4573-8673-7330c97295b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2c:38:42:c3:9a:ef:c2:cd:15:82:dc:a9:8c:
                    60:a3:7b:0e:0b:50:5e:53:d9:61:80:cb:fa:57:65:
                    47:13:23:d1:aa:c2:a0:75:c3:81:ee:fb:38:29:73:
                    f0:d7:c7:9d:45:c5:a6:70:9e:93:f7:7f:e3:d4:90:
                    23:6e:3c:bc:3f:50:d1:01:c7:28:1f:94:1c:e2:9e:
                    2d:71:d4:10:8a:b0:df:7e:9f:f0:6e:b4:8f:a2:6d:
                    7d:7d:14:97:ba:9c:d6:be:fe:9c:f5:a6:fe:1a:b1:
                    b5:29:e8:8e:fc:40:86:ad:e9:42:d2:73:21:d8:70:
                    9f:4a:84:c0:5c:64:0e:fc:a2:00:ce:c5:1d:73:71:
                    73:8c:c0:c3:6c:93:f3:c4:19:73:38:57:f3:75:98:
                    8b:f0:04:6c:dc:75:de:48:b3:5c:29:bc:61:7c:72:
                    e6:f2:ab:3f:b8:90:8d:93:71:0e:f1:f9:26:e8:c4:
                    1a:bc:e6:37:3c:4d:e5:81:70:69:da:63:1a:68:42:
                    4f:f2:4e:d2:ad:5a:9e:03:4a:4f:8b:13:37:99:68:
                    eb:5b:1e:23:70:61:17:04:29:98:ab:99:aa:87:f3:
                    af:2d:82:cc:91:55:cb:c1:b7:7c:a8:df:4b:38:de:
                    88:55:16:50:68:27:3f:da:c8:ed:c9:4e:71:63:da:
                    e5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:25:3D:FE:73:E0:2F:9E:E2:ED:63:30:EF:41:9C:B2:97:6C:9C:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/df942fad-2a7b-3a37-ae57-0bd37832ed9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:96:59:50:fc:65:46:75:07:05:d0:9a:e5:09:ba:9b:04:1e:
         24:3d:e6:48:6c:5a:c1:d0:fb:78:35:d2:91:19:c5:1c:e0:52:
         75:ec:46:ad:a4:c1:5e:ed:8b:1b:36:5c:7c:d9:b4:41:e1:ad:
         f3:88:f2:18:9c:42:55:35:4b:80:e9:3c:7f:99:c6:b4:ec:15:
         a1:b3:60:01:5f:b6:00:72:12:d9:3b:16:b9:b9:81:6b:97:8b:
         42:44:87:47:d9:e7:34:0c:e2:cd:90:f3:ab:7c:a2:70:3d:c9:
         3a:42:75:9a:e6:35:d1:c8:17:65:77:7e:26:54:aa:e1:6e:5d:
         a0:8e:35:c9:a4:e5:90:c0:5d:24:c3:d0:03:f8:ea:cb:b0:81:
         13:06:fa:b7:6e:d6:3b:f8:f1:ab:19:df:07:03:db:a6:cf:fc:
         7c:ce:79:c1:92:8c:ab:e5:58:87:41:ec:06:af:93:a9:8c:ba:
         ae:90:9c:32:8b:fb:7a:00:7d:5a:76:9c:ad:64:da:fe:78:01:
         9a:b2:98:cd:9c:41:71:b8:95:88:b3:86:ec:e0:a6:f2:55:56:
         4a:c3:b5:88:b3:51:a4:62:25:5e:ab:bd:52:65:22:94:3a:e8:
         9b:46:54:33:0e:b8:13:94:dc:e6:92:d1:3b:9f:c5:a1:75:a9:
         75:75:bd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----