Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/850b7910-feaf-30db-96dc-5c411bffa917.roa
File:                     850b7910-feaf-30db-96dc-5c411bffa917.roa (raw, json)
Hash identifier:          qOX9J4YU+xpkj1/BI25yT5UgbUsk4oX4k4gwAi+Z1Qs=
Subject key identifier:   04:C2:87:03:34:69:EA:E2:8C:FA:D6:73:39:25:B6:31:4B:3C:D5:1D
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D551E23DA11FA7B8C8DFA3300
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/850b7910-feaf-30db-96dc-5c411bffa917.roa
Signing time:             Wed 23 Mar 2022 04:00:00 +0000
ROA not before:           Wed 23 Mar 2022 04:00:00 +0000
ROA not after:            Wed 15 Mar 2028 04:00:00 +0000
asID:                     33393
IP address blocks:        205.196.158.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:55:1e:23:da:11:fa:7b:8c:8d:fa:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 23 04:00:00 2022 GMT
            Not After : Mar 15 04:00:00 2028 GMT
        Subject: CN=4e51efdb-fdc0-410a-b728-ee5366681921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ae:8d:93:fe:82:10:a3:5f:e9:8b:61:b5:95:
                    ff:ca:85:81:4b:60:5b:ff:e7:20:77:53:c1:65:92:
                    66:02:d0:e7:06:11:37:ca:53:ac:0c:75:b6:a6:ee:
                    09:9b:52:39:ea:97:5e:eb:a8:80:04:96:4f:80:21:
                    40:e8:b0:ae:64:9c:28:ad:98:68:eb:8d:2e:20:97:
                    c2:8f:60:a4:02:eb:7e:0e:b1:12:98:a2:23:8f:a0:
                    29:45:62:28:df:8d:b1:8f:8d:4a:7c:76:88:60:77:
                    4e:df:0d:93:a2:b6:14:d1:5f:6c:01:21:69:3a:33:
                    98:4b:38:39:9f:ad:ac:68:5e:c1:52:12:9e:ae:aa:
                    2f:39:a5:bb:72:e6:23:85:27:a0:86:e0:19:c4:3b:
                    29:06:82:94:a0:93:00:18:f0:24:33:cc:4b:83:7d:
                    63:76:05:78:10:74:85:cc:d3:0d:41:80:d0:de:a1:
                    9d:e8:6c:03:11:92:8e:26:c9:54:16:18:0c:cb:38:
                    eb:d4:1a:18:89:ab:0e:8e:6f:64:64:6a:c0:f0:be:
                    62:d4:07:98:6e:d4:d1:35:f6:01:ad:f8:04:57:31:
                    a1:04:00:41:4c:eb:f8:06:f6:78:3a:a1:8f:0b:15:
                    b9:9c:a1:0c:13:ee:58:0d:6e:87:ab:11:17:25:af:
                    24:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C2:87:03:34:69:EA:E2:8C:FA:D6:73:39:25:B6:31:4B:3C:D5:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/850b7910-feaf-30db-96dc-5c411bffa917.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.196.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:3a:a2:60:a9:c2:2b:eb:ca:c0:99:d0:cc:44:fe:19:a6:20:
         c3:aa:3e:32:3e:b7:4d:a4:88:64:a2:ee:c9:01:35:25:c7:c0:
         01:f7:b7:77:58:05:9a:6b:4b:ad:cf:1b:89:af:e8:0e:c0:2b:
         81:c4:89:d3:7d:e4:09:7b:08:31:97:c9:87:d8:b0:48:de:f9:
         90:02:ff:42:09:9c:2e:93:28:09:dd:4d:27:56:37:2c:d5:61:
         80:ba:72:85:6f:41:3c:d2:47:f1:d1:12:e9:f0:35:d0:78:b7:
         3d:a7:df:7f:25:49:a8:5f:75:48:ab:93:34:52:b2:de:ad:b6:
         c6:e9:e1:01:18:99:d3:6a:76:83:ef:9a:06:41:5f:ec:b0:45:
         7e:dc:ee:1a:db:9a:48:df:2c:a7:21:4f:1e:dd:44:1e:51:c9:
         d3:4c:af:96:7e:fd:3c:6c:ae:59:3e:3f:cc:82:63:7e:33:42:
         d1:02:3e:b5:a4:49:d5:1d:07:e1:e0:36:73:26:f4:0d:35:92:
         37:6a:dc:20:60:e6:29:0e:f1:13:5a:ef:ae:1e:d4:67:74:dc:
         e3:92:4a:6c:25:e5:2b:d3:14:cc:0f:93:c3:53:f7:f4:0b:a2:
         86:d1:49:46:65:8e:2a:2d:04:c1:18:fb:16:9c:ed:58:b8:1c:
         2d:2c:5d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----