Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ff4b1190-0c23-34f2-98a2-f72317443b41.roa
File:                     ff4b1190-0c23-34f2-98a2-f72317443b41.roa (raw, json)
Hash identifier:          QmDCQt8Z1mRU77xJRUYzM9Wr7b0QjxY04yVUKDznYsw=
Subject key identifier:   F7:AF:B4:EB:E5:24:F8:2D:EE:BB:49:63:D8:45:90:D8:88:AE:95:BF
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583DF83397C2EA077CA1995B6700
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ff4b1190-0c23-34f2-98a2-f72317443b41.roa
Signing time:             Fri 20 May 2022 12:00:00 +0000
ROA not before:           Fri 20 May 2022 12:00:00 +0000
ROA not after:            Sat 25 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        199.127.232.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f8:33:97:c2:ea:07:7c:a1:99:5b:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: May 20 12:00:00 2022 GMT
            Not After : Jun 25 04:00:00 2022 GMT
        Subject: CN=0e29cc5e-6037-441e-a828-578fd8d4b748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c2:1e:11:04:8b:b6:51:37:38:80:50:a1:f6:
                    f7:d3:6a:02:5d:37:f5:7c:56:82:f5:6a:60:80:73:
                    03:08:2c:8f:d2:54:c2:90:ad:84:3b:41:16:63:23:
                    98:7e:8a:6c:23:55:ac:96:61:f1:a7:1a:43:0b:36:
                    94:73:30:3a:52:5e:81:de:ac:67:d2:f5:64:80:86:
                    a7:2c:a6:57:dc:65:1a:a5:19:f5:44:df:13:bd:b2:
                    8b:e4:fd:5d:74:ae:f7:78:92:bb:0b:ae:4a:fd:91:
                    47:5c:01:46:e9:51:b2:b0:f9:9e:6b:92:8d:fd:b3:
                    17:c1:26:ae:ce:45:25:3c:e6:3a:e5:a4:bd:e4:ac:
                    6d:42:64:66:8d:38:07:57:98:bd:08:85:97:22:5b:
                    70:ab:75:16:9c:df:bd:51:5c:61:38:95:14:86:d0:
                    7c:6c:65:d2:bb:c2:34:55:c4:7b:5f:58:d1:17:48:
                    2f:fe:c4:6b:07:fc:65:6c:24:35:51:84:03:26:3c:
                    d9:dc:cd:a5:c0:ec:9e:41:36:0f:79:8a:ea:4d:31:
                    49:56:95:d8:7b:36:e3:fd:f7:b0:65:58:be:86:c6:
                    84:78:a2:2a:a9:a1:4d:c2:a4:48:67:34:0c:3a:22:
                    50:84:b4:ce:96:d3:b9:ba:58:bb:6f:04:3e:46:4a:
                    47:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:AF:B4:EB:E5:24:F8:2D:EE:BB:49:63:D8:45:90:D8:88:AE:95:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ff4b1190-0c23-34f2-98a2-f72317443b41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.127.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:b3:5a:06:6d:c6:16:7d:d5:fa:ab:88:f6:2f:c4:5d:59:08:
         bf:ce:17:f1:9f:41:e8:d3:8b:16:a9:1c:8c:c1:7b:8c:3e:61:
         2c:7e:e4:ef:45:00:3f:c6:fd:52:a9:26:17:ca:32:81:c0:ce:
         79:f0:d9:2b:0c:d7:33:b0:c3:11:2d:66:5a:04:0d:65:c5:39:
         62:00:03:aa:af:ff:bb:74:0e:9f:35:7f:9c:44:db:e8:fe:99:
         e9:e3:62:0a:98:b2:e8:23:1a:21:d6:17:26:d8:71:3f:48:99:
         84:21:65:04:6d:e0:a6:9a:a8:19:67:8a:2b:83:56:80:84:5b:
         46:0f:11:18:98:0a:6e:65:bc:df:88:10:ed:b4:51:29:9d:ba:
         cd:09:09:74:0a:5b:55:b1:a8:95:cf:03:59:79:25:96:c3:6a:
         cc:c0:7f:c6:b7:1c:94:28:b6:5d:e2:c4:e8:31:63:18:ff:a2:
         0d:1c:f2:19:68:5e:1f:e6:e9:d4:6c:82:a4:e5:5e:db:87:ad:
         28:80:ab:d4:6a:1b:0e:c6:ea:ca:46:19:fe:16:16:48:dd:06:
         26:36:92:dd:52:b1:69:6c:06:ba:30:2a:5b:8c:78:a6:a5:25:
         e9:66:41:a9:f2:99:83:19:6c:46:fb:17:1f:81:e0:e0:91:dc:
         f7:de:49:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----