Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a6d95ed-60dd-4766-aaa3-2d0bbdfb227f/11933188-f105-3c80-b4f1-e00d1f0e974d.roa
File:                     11933188-f105-3c80-b4f1-e00d1f0e974d.roa (raw, json)
Hash identifier:          ti/kGxhf8xlsGBkenTBcrlXaZb9kNJK+HdHkCkYRpHI=
Subject key identifier:   BA:E6:61:49:FE:A2:45:22:93:1A:21:53:F9:3B:8B:41:08:D4:D6:3C
Certificate issuer:       /CN=6a6d95ed-60dd-4766-aaa3-2d0bbdfb227f
Certificate serial:       010D0C9F4328583CA815BA9F324EA61932BA3980
Authority key identifier: 85:37:06:75:08:24:44:0E:0E:5C:56:72:2A:36:AB:4B:20:8E:CB:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a6d95ed-60dd-4766-aaa3-2d0bbdfb227f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a6d95ed-60dd-4766-aaa3-2d0bbdfb227f/11933188-f105-3c80-b4f1-e00d1f0e974d.roa
Signing time:             Wed 08 Sep 2021 04:00:00 +0000
ROA not before:           Wed 08 Sep 2021 04:00:00 +0000
ROA not after:            Wed 24 Apr 2024 04:00:00 +0000
asID:                     61317
IP address blocks:        199.91.100.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:a8:15:ba:9f:32:4e:a6:19:32:ba:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a6d95ed-60dd-4766-aaa3-2d0bbdfb227f
        Validity
            Not Before: Sep  8 04:00:00 2021 GMT
            Not After : Apr 24 04:00:00 2024 GMT
        Subject: CN=ddaf7d14-b985-41b0-96eb-544c7d34dde5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bf:ee:53:42:c9:f8:8a:64:f7:cc:34:73:f2:
                    49:3e:0a:b0:4d:8a:d2:e0:c9:8e:5a:57:ee:b7:00:
                    46:20:23:67:c0:3f:c0:3c:ae:77:dd:7b:e7:6e:c2:
                    5c:f1:d0:fc:72:3e:e7:d3:d6:41:86:51:69:cb:8c:
                    66:8c:78:71:23:a2:af:9f:bb:db:5b:05:58:8a:e8:
                    6b:49:37:8d:bb:3c:a9:2f:88:9b:fe:2d:8a:77:71:
                    d3:f4:c1:c9:25:0b:b5:5e:86:36:82:8d:6f:bd:41:
                    d9:2c:db:3b:f6:9a:b8:b3:b3:1d:7b:f1:ac:e9:fd:
                    79:c1:2c:6c:b4:b7:24:ff:cf:13:10:c2:09:7d:05:
                    54:b0:2f:13:63:70:09:45:7f:ef:9f:75:59:a5:7e:
                    4a:e4:49:b2:c8:03:b8:80:84:1c:fd:33:1a:77:c5:
                    14:e2:91:a8:47:75:c7:45:fb:43:dc:94:99:ed:c4:
                    f7:34:dc:79:24:43:e9:ed:9b:82:29:5b:28:e5:75:
                    ef:ba:e9:af:59:af:89:d2:2f:88:1b:3a:c5:53:a5:
                    65:98:2f:16:74:f5:7a:41:a8:3e:dd:50:33:ab:4c:
                    b6:4f:41:37:5a:6b:30:a0:97:be:77:27:5b:af:e1:
                    fe:18:6a:56:fb:3c:79:5d:cc:49:fc:f5:eb:99:5d:
                    f6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E6:61:49:FE:A2:45:22:93:1A:21:53:F9:3B:8B:41:08:D4:D6:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a6d95ed-60dd-4766-aaa3-2d0bbdfb227f/11933188-f105-3c80-b4f1-e00d1f0e974d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a6d95ed-60dd-4766-aaa3-2d0bbdfb227f/6a6d95ed-60dd-4766-aaa3-2d0bbdfb227f.crl

            X509v3 Authority Key Identifier:
                keyid:85:37:06:75:08:24:44:0E:0E:5C:56:72:2A:36:AB:4B:20:8E:CB:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a6d95ed-60dd-4766-aaa3-2d0bbdfb227f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:14:97:33:6c:17:56:e1:3a:54:77:0c:bf:6a:87:4f:a2:1c:
         d9:a6:25:72:b0:d7:aa:29:5a:ca:0c:02:52:c6:21:7d:de:c5:
         14:1e:ca:76:da:55:be:96:85:8c:fc:dd:93:d7:e3:de:60:de:
         9a:00:3f:1b:4c:17:59:e0:0b:57:ff:6c:80:da:99:6f:47:ad:
         81:fa:2e:78:b2:0c:cb:57:e0:86:80:b5:99:d2:b2:ac:03:4d:
         ed:bd:1b:a0:63:d5:b8:58:d4:d6:f1:32:10:20:5a:77:3e:6c:
         76:8d:ff:5c:64:a9:58:8c:77:08:a8:e4:d4:7b:82:fb:e2:d1:
         77:6f:4b:0a:0b:b8:9b:ad:b3:2c:0e:5c:9a:86:ef:fc:d2:35:
         6e:21:69:53:40:8f:27:93:d8:17:5b:04:5a:08:c2:bb:b5:08:
         05:53:cc:75:3f:a7:12:67:00:be:19:31:9d:49:a4:25:38:d8:
         27:88:92:d4:56:e7:32:24:db:c9:57:a2:42:18:b2:9f:3c:ef:
         bc:78:82:1f:2b:8f:9d:88:33:6b:8a:8a:01:1a:c4:8c:74:45:
         cb:36:a9:aa:5b:86:98:3f:a8:26:fa:e9:e2:ba:b5:5a:42:56:
         63:9b:35:b0:ce:d7:e9:56:9d:a1:46:37:1a:79:be:3f:31:64:
         5b:a5:d6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----