Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0367694c-6422-395b-8397-53716a9034f1.roa
File:                     0367694c-6422-395b-8397-53716a9034f1.roa (raw, json)
Hash identifier:          lGzn6V4rudUkgVC6LNx2GnCQ3vule0au7fxGQEOJlXs=
Subject key identifier:   7F:43:68:AB:0F:C1:3C:AA:B6:E5:B0:97:C2:37:A1:99:F9:90:CD:D5
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D4FBCF0F33B9F8AD4A54EBF40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0367694c-6422-395b-8397-53716a9034f1.roa
Signing time:             Mon 21 Mar 2022 04:00:00 +0000
ROA not before:           Mon 21 Mar 2022 04:00:00 +0000
ROA not after:            Mon 13 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        64.80.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:4f:bc:f0:f3:3b:9f:8a:d4:a5:4e:bf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 21 04:00:00 2022 GMT
            Not After : Mar 13 04:00:00 2028 GMT
        Subject: CN=122ddacf-c984-452d-918a-89df248b22fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5f:21:c7:35:52:a9:73:aa:8b:25:17:2e:ed:
                    a8:a6:61:b4:50:e1:f8:e9:4b:7f:ca:43:22:86:9d:
                    00:1a:0f:c7:97:1b:29:7c:d5:01:5c:57:bd:45:3e:
                    df:1d:58:68:73:c6:e9:8c:bc:c0:3f:76:6f:a6:3b:
                    7c:cf:48:4c:e5:e5:3b:8e:ad:59:d6:17:48:55:0a:
                    d1:d7:f1:ca:4a:6a:a4:ac:86:d3:7c:f7:43:90:70:
                    b5:9a:06:8e:82:62:f2:9b:d7:45:e4:16:b2:04:33:
                    f4:7d:64:39:90:fc:15:76:67:d8:43:11:54:fe:ab:
                    fa:d9:7d:65:82:85:25:04:a3:00:a6:3d:a7:64:69:
                    1c:fa:67:63:15:cc:ed:c8:cf:60:5a:cd:4f:ef:30:
                    24:57:62:f2:40:3b:83:48:0e:d7:11:b2:79:74:74:
                    be:30:e8:5c:70:79:3d:5c:5f:d0:88:67:46:41:39:
                    da:b3:7c:a2:7a:68:45:8c:9d:37:c7:e2:22:9f:24:
                    36:9c:38:0b:7e:0b:8a:17:46:b5:67:5f:d9:12:9d:
                    ea:0b:39:4d:df:73:1e:81:d1:b1:7c:d3:5f:f5:e0:
                    41:8d:b9:50:12:bc:b5:44:a1:2f:e2:0a:59:21:c3:
                    c7:77:71:7b:59:30:4e:68:d8:a1:2f:d9:8a:df:46:
                    62:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:43:68:AB:0F:C1:3C:AA:B6:E5:B0:97:C2:37:A1:99:F9:90:CD:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0367694c-6422-395b-8397-53716a9034f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.80.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:89:bb:09:bd:97:31:b3:14:77:86:37:5d:0b:a4:02:38:67:
         a6:47:3d:e3:1c:4e:3e:6f:54:19:ff:df:46:82:49:bd:63:28:
         ad:aa:e5:e0:a2:49:95:87:27:bf:4a:52:48:15:94:ad:f5:f0:
         2c:3f:b8:0b:36:ee:db:88:a3:0a:5f:c6:54:eb:6b:4e:ba:36:
         84:70:59:99:94:5e:36:ad:16:17:af:fb:9b:bf:e5:29:1d:19:
         4f:db:41:2b:6e:f3:64:03:e6:70:6a:71:7d:d9:64:c2:3a:43:
         f8:85:8c:19:3b:9f:1b:f7:95:0d:09:fa:a5:de:12:ec:f0:9f:
         0d:42:b7:9b:44:3c:77:e9:0e:de:07:9f:39:82:d3:45:81:89:
         7e:de:07:2a:11:ed:0b:23:15:ce:fc:30:3b:23:ee:85:62:7d:
         b2:6a:7f:83:85:35:64:ee:37:d8:4d:72:55:7b:09:1d:76:27:
         77:9a:8f:7d:6e:58:ac:61:c7:d7:0a:fd:3d:9e:6f:b5:ea:7d:
         3f:64:86:f6:45:b4:40:82:42:38:f9:8f:f4:cf:df:6d:23:15:
         26:1b:fa:7b:e5:46:8f:73:18:87:8c:21:27:b6:3f:af:4c:9e:
         fe:b3:2a:04:f9:a3:1b:72:b0:95:63:96:d7:80:e1:c1:e5:4a:
         4d:d1:d6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----