Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ef2545ed-54ca-338d-804a-0a650d8caf80.roa
File:                     ef2545ed-54ca-338d-804a-0a650d8caf80.roa (raw, json)
Hash identifier:          NI+eXENSj7R0Nr5IG/x3QzZ4B1tzMwQOlv8AGHMHaGQ=
Subject key identifier:   2F:87:77:85:D6:55:0B:70:B1:37:17:DD:6F:10:EE:AC:8C:0E:65:30
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583FA8BEE17C9C0CD0A95ADF9F00
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ef2545ed-54ca-338d-804a-0a650d8caf80.roa
Signing time:             Fri 21 Oct 2022 12:00:00 +0000
ROA not before:           Fri 21 Oct 2022 12:00:00 +0000
ROA not after:            Sat 26 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        69.169.224.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a8:be:e1:7c:9c:0c:d0:a9:5a:df:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Oct 21 12:00:00 2022 GMT
            Not After : Nov 26 05:00:00 2022 GMT
        Subject: CN=e757e7f3-c22a-4677-8fc9-cd9b00ce1788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:27:d4:30:97:78:92:2a:17:ac:90:4f:0f:b8:
                    d0:e1:f0:1e:d2:a3:01:ac:54:12:a4:9c:f9:05:54:
                    23:9a:38:67:0a:97:98:09:e4:a3:b7:e7:09:d0:58:
                    30:b2:0c:33:30:55:6c:23:c0:ca:2e:0d:01:73:d8:
                    c4:cd:9a:f1:2b:f9:2e:70:ba:9c:40:7d:4d:15:d3:
                    05:4c:1e:7e:48:36:40:7f:67:ef:84:04:88:fd:a9:
                    d3:f6:0a:96:5b:43:40:11:10:64:46:a3:d7:3e:fe:
                    a3:9a:3a:9b:e5:d8:8f:3d:78:c7:98:65:4f:f1:8b:
                    40:1b:29:9e:4a:fe:0c:9e:ae:9e:c2:c7:e9:3c:df:
                    fb:ff:c2:4a:dc:e5:04:d0:ff:0a:4d:f4:ab:03:5b:
                    1f:67:94:82:03:47:53:c8:26:10:2e:17:0c:fb:68:
                    8f:70:8c:96:41:24:ce:f0:ce:85:2e:ba:77:73:28:
                    80:81:a5:e3:be:43:55:46:d1:e3:ce:3f:1f:e2:98:
                    a2:f9:42:bd:aa:41:77:95:c3:26:1e:b5:23:7f:e0:
                    13:cf:ca:e9:a8:4e:0f:22:97:c1:02:99:e0:66:7a:
                    f3:20:78:57:f2:18:4b:46:1f:15:57:ec:79:d7:37:
                    97:2b:db:48:49:52:3d:54:31:21:ca:9a:af:dd:ea:
                    b2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:87:77:85:D6:55:0B:70:B1:37:17:DD:6F:10:EE:AC:8C:0E:65:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ef2545ed-54ca-338d-804a-0a650d8caf80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.169.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:b0:d9:81:a1:c9:51:b5:85:e3:6d:19:2a:0f:be:db:89:0e:
         01:73:cd:ee:1e:a2:a1:66:89:e8:30:21:94:d9:44:b9:df:f7:
         9e:73:ba:9a:e9:61:12:d4:25:d5:3f:f5:a5:b9:48:15:b3:78:
         2f:e6:21:04:f9:fc:2b:67:73:e1:2b:a6:b3:7f:6b:20:92:11:
         4c:74:4a:39:d0:be:75:61:25:f4:d7:79:1d:5d:90:59:da:e3:
         8f:52:0c:e2:5b:2e:ac:12:92:9f:04:f8:e5:ce:a0:a3:b4:3b:
         23:d7:1c:f5:c5:e2:1a:44:37:b0:53:62:86:2e:0b:7f:3e:90:
         73:5a:1c:c4:25:3f:be:d0:45:6f:63:07:d6:2e:73:4d:d8:9c:
         72:74:af:d4:0c:d9:d1:a3:b6:19:0a:fd:00:d2:d3:fc:08:f3:
         51:04:bf:73:58:5f:55:16:1c:e1:b1:54:17:2d:d7:dc:e4:5d:
         1c:37:9f:84:11:8d:17:21:37:54:63:e9:d3:a6:b9:7c:93:df:
         ef:80:da:1c:ed:42:15:b8:89:fb:3b:cd:39:d5:22:1d:f4:7b:
         1e:df:cc:df:41:82:49:96:cd:96:67:3c:4c:33:c7:15:41:19:
         38:1b:9d:23:e2:dc:d1:94:db:ab:60:08:0e:da:f5:bb:9d:87:
         d2:1c:17:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----