Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855/babc910c-3f4c-3727-a670-9ed38dcbad27.roa
File:                     babc910c-3f4c-3727-a670-9ed38dcbad27.roa (raw, json)
Hash identifier:          GG1HWfz4SHLXJ2d2R6piV1xcOm/1LmfzXJIDWGb6yF8=
Subject key identifier:   91:87:41:25:B0:61:BB:A0:A7:73:6D:10:BA:05:52:F7:C8:E2:6A:B4
Certificate issuer:       /CN=18ccca26-f6c3-490d-aea1-56ccca162855
Certificate serial:       010D0C9F4328583D050AE8F3DBD12C585C5D5640
Authority key identifier: F7:AF:BB:DE:1B:20:72:2F:96:C0:4F:B3:92:FD:F4:88:C6:3E:EA:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855/babc910c-3f4c-3727-a670-9ed38dcbad27.roa
Signing time:             Mon 13 Sep 2021 04:00:00 +0000
ROA not before:           Mon 13 Sep 2021 04:00:00 +0000
ROA not after:            Mon 27 May 2024 04:00:00 +0000
asID:                     0
IP address blocks:        149.112.26.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:05:0a:e8:f3:db:d1:2c:58:5c:5d:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18ccca26-f6c3-490d-aea1-56ccca162855
        Validity
            Not Before: Sep 13 04:00:00 2021 GMT
            Not After : May 27 04:00:00 2024 GMT
        Subject: CN=a05d0480-26ce-41ac-91d8-5c8473dce71e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:20:28:53:44:e9:99:ca:a2:78:87:e2:24:13:
                    b8:db:29:83:af:50:69:03:4f:24:b5:9a:a7:f8:32:
                    12:38:56:2c:e4:1e:80:d5:70:31:25:a3:10:37:97:
                    87:c0:0e:9c:44:3e:2b:fd:a7:03:57:7f:00:d4:78:
                    a6:5c:4c:04:3f:9e:39:7a:4b:51:76:79:64:03:aa:
                    6e:e4:0b:04:7c:72:4c:85:15:83:79:25:e8:9f:c1:
                    13:d0:f6:45:f6:3f:2e:e7:d9:08:58:a3:d6:f2:97:
                    5c:68:94:8b:0d:2d:c9:39:12:04:fb:6d:eb:6d:8b:
                    eb:65:e2:76:34:3f:f8:24:75:35:15:ed:5d:c2:9a:
                    d9:e9:3f:52:5e:8f:3c:14:0e:33:a0:8c:2c:b8:a7:
                    ad:f1:90:c8:28:64:f1:27:eb:e7:f5:d5:d1:33:af:
                    1c:eb:17:0e:5b:ff:2e:c8:c8:02:38:1d:80:dd:22:
                    25:fd:a2:0f:37:79:e2:56:e8:7c:ee:06:81:91:0a:
                    05:4a:aa:99:b7:b3:8f:72:db:8f:99:c4:4a:92:60:
                    3d:cb:ff:a4:17:45:bc:11:7d:3e:c1:9a:49:fa:d9:
                    65:16:84:49:1b:c0:dc:c2:3c:9b:f8:84:9f:e5:e1:
                    e0:94:75:c8:ff:95:4e:b8:a9:a3:87:9a:f6:cc:0e:
                    31:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:87:41:25:B0:61:BB:A0:A7:73:6D:10:BA:05:52:F7:C8:E2:6A:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855/babc910c-3f4c-3727-a670-9ed38dcbad27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855/18ccca26-f6c3-490d-aea1-56ccca162855.crl

            X509v3 Authority Key Identifier:
                keyid:F7:AF:BB:DE:1B:20:72:2F:96:C0:4F:B3:92:FD:F4:88:C6:3E:EA:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:93:75:8b:5d:58:9f:82:5a:ec:f8:02:ea:25:f1:b4:f1:60:
         63:50:80:86:3c:ad:e2:59:04:d6:44:be:ee:cb:c1:7b:7f:04:
         b6:f7:db:ed:d6:12:e5:c1:0f:2b:05:48:71:d8:9a:41:f3:ed:
         72:6c:64:f6:70:27:83:da:db:c7:bc:84:91:49:9b:8f:16:ab:
         0b:23:fd:dc:4d:7f:48:52:49:4e:cc:7b:37:70:63:c3:a6:fe:
         cd:68:0b:37:b7:b4:5c:f2:33:8a:08:9b:eb:af:c6:99:1e:d2:
         37:ab:93:3d:70:32:46:2c:53:49:c1:05:26:10:7e:bd:70:81:
         bd:e2:ed:f9:fd:d5:67:8e:3e:ad:bb:4f:c9:2c:1d:68:be:14:
         e1:5f:3a:75:de:8a:c4:3e:ee:62:d7:5a:69:d9:30:c2:d9:b9:
         85:f4:1a:2b:ad:64:82:b3:af:12:f3:6c:e2:2b:d9:df:cc:ca:
         74:97:a1:d4:ff:3f:bd:3f:86:33:a0:ed:44:91:ba:9f:dc:30:
         ac:42:8d:50:cd:46:5d:7a:fe:ac:91:1e:21:ad:13:f4:c0:04:
         96:ae:98:2d:47:9b:03:f5:18:07:38:df:b2:f8:f1:05:5b:e8:
         40:a8:da:3a:11:ef:be:b1:74:2e:31:cc:0a:cb:a2:26:b7:be:
         84:f6:b1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----