Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/66fe7f13-ad47-308b-873e-61f4301e8942.roa
File:                     66fe7f13-ad47-308b-873e-61f4301e8942.roa (raw, json)
Hash identifier:          kdxXraWxoAd77SvCJl1Y2bsQXdJEGE7ZaC5FtoSFoPk=
Subject key identifier:   79:3F:9A:89:FB:11:3C:15:DB:17:BD:93:44:12:C9:4A:8E:54:E7:32
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583DB440D41F9DFEDE12A2FEEE00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/66fe7f13-ad47-308b-873e-61f4301e8942.roa
Signing time:             Mon 25 Apr 2022 12:00:00 +0000
ROA not before:           Mon 25 Apr 2022 12:00:00 +0000
ROA not after:            Tue 18 Apr 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        151.213.222.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:b4:40:d4:1f:9d:fe:de:12:a2:fe:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr 25 12:00:00 2022 GMT
            Not After : Apr 18 04:00:00 2028 GMT
        Subject: CN=0fcdd01d-ce3e-4432-83ac-9e04dbd3b067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9b:27:2f:dd:7b:cd:23:c9:e2:c9:b2:f3:b5:
                    52:7e:81:3a:fe:28:28:8f:61:f8:3c:f5:fb:f2:f9:
                    7b:e6:05:6f:53:2a:82:c2:ab:e8:e0:e8:8e:26:d4:
                    3e:8c:a3:c7:0c:fd:ef:ae:84:80:cc:34:91:6a:d8:
                    01:e4:6a:47:f0:0b:23:cf:c0:93:1b:ed:49:4c:5b:
                    e6:f3:34:40:6b:11:31:9b:da:3e:ab:e3:b4:98:e5:
                    e5:8d:dc:aa:8b:d1:a1:b8:cb:e4:a4:8b:27:46:30:
                    39:f4:a1:91:4f:0d:95:0c:78:55:3c:6b:97:d6:0e:
                    b4:01:a6:f5:f7:0c:b5:15:7a:ec:b0:93:7f:5a:25:
                    74:35:12:20:3a:b5:ca:0b:55:80:fd:a9:fc:48:5d:
                    82:21:87:c8:06:7f:ed:70:a1:55:46:b6:62:f4:2b:
                    3e:89:4b:2b:43:77:bb:6f:09:dc:00:1e:8d:ae:6c:
                    2e:2e:8e:cc:35:81:1a:5e:e1:c2:b2:6e:47:41:d1:
                    7c:14:05:ea:b0:d0:41:26:3d:b0:60:da:69:82:3a:
                    91:86:ee:cf:72:3e:5f:08:fe:6b:bb:82:fe:7d:7c:
                    1e:08:c4:d2:2a:58:94:31:41:9f:fa:02:e4:0c:f2:
                    69:8c:d0:b3:bc:92:68:58:b1:b8:05:9a:3d:bf:ff:
                    c0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:3F:9A:89:FB:11:3C:15:DB:17:BD:93:44:12:C9:4A:8E:54:E7:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/66fe7f13-ad47-308b-873e-61f4301e8942.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.213.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:23:46:d7:2b:7e:4a:93:cb:b9:07:43:fb:b1:f0:08:0f:b6:
         23:c9:d1:bb:7f:a6:6f:5f:4d:5a:41:a7:10:9d:f6:7c:06:e5:
         2f:81:f3:1a:d5:31:23:e1:f1:f9:f7:a5:25:77:16:d5:6f:97:
         34:3b:ac:80:a0:09:1c:7b:fb:1d:14:ba:33:20:74:3f:25:e5:
         02:1f:03:1d:60:b2:e7:1c:13:56:4b:d8:4c:4d:eb:20:46:e0:
         f1:52:79:41:df:5a:b0:9c:87:f5:7f:57:57:a3:7e:45:f6:f8:
         36:f3:9a:6f:13:84:fc:05:9c:48:47:03:a2:fc:77:8e:1d:fc:
         44:50:7c:eb:02:6d:69:94:ec:47:49:fd:6b:a9:ea:28:bc:3c:
         b7:7a:a9:96:03:dc:31:1b:92:85:82:65:f7:3c:5c:92:40:3c:
         f8:4e:5a:fb:f2:5c:9d:bb:87:70:11:3b:be:43:e9:18:96:59:
         57:5a:0f:45:da:c5:94:22:df:4b:47:b0:0b:ac:65:1a:ce:1e:
         36:86:bf:e0:42:19:ad:b6:47:e9:5e:ab:3d:4a:1b:22:ac:a1:
         e8:eb:ef:f8:0c:c4:bb:cf:31:90:5c:33:f5:eb:40:8e:71:95:
         d3:33:18:6b:80:1b:d1:b1:a0:ab:a0:5d:d2:6c:30:7f:b2:aa:
         69:72:53:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----