Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a6d95ed-60dd-4766-aaa3-2d0bbdfb227f/48fa4e25-0f17-316a-89b3-7cd5387984d7.roa
File:                     48fa4e25-0f17-316a-89b3-7cd5387984d7.roa (raw, json)
Hash identifier:          E3W40bHrSHMs0riYHCo2sh/wsiQxl3TQGDUHS/mLLIY=
Subject key identifier:   6A:91:95:BB:1C:A3:A9:A8:6F:69:56:C0:3F:E5:89:D6:63:E8:0E:94
Certificate issuer:       /CN=6a6d95ed-60dd-4766-aaa3-2d0bbdfb227f
Certificate serial:       010D0C9F4328583B31DDD7E6CB99107A858D2A00
Authority key identifier: 85:37:06:75:08:24:44:0E:0E:5C:56:72:2A:36:AB:4B:20:8E:CB:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a6d95ed-60dd-4766-aaa3-2d0bbdfb227f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a6d95ed-60dd-4766-aaa3-2d0bbdfb227f/48fa4e25-0f17-316a-89b3-7cd5387984d7.roa
Signing time:             Wed 08 Sep 2021 04:00:00 +0000
ROA not before:           Wed 08 Sep 2021 04:00:00 +0000
ROA not after:            Thu 08 Sep 2022 04:00:00 +0000
asID:                     1239
IP address blocks:        199.91.96.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:31:dd:d7:e6:cb:99:10:7a:85:8d:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a6d95ed-60dd-4766-aaa3-2d0bbdfb227f
        Validity
            Not Before: Sep  8 04:00:00 2021 GMT
            Not After : Sep  8 04:00:00 2022 GMT
        Subject: CN=5ff551eb-f377-45d7-9851-a33edcac8ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:19:4f:58:0c:f5:30:6e:dc:2d:92:f6:be:d5:
                    64:d9:5c:9c:00:a9:15:22:30:b4:a0:a2:86:cd:a9:
                    81:bc:d2:4f:c1:db:e4:bc:17:d3:c1:52:e7:8b:00:
                    0b:1a:15:5c:ee:73:ec:20:f0:fd:80:84:d8:d9:16:
                    f9:9e:3c:6b:e6:1d:18:76:02:7c:a7:6d:1b:26:27:
                    ff:53:45:89:50:2d:8c:a0:fa:e5:78:19:95:35:4e:
                    6b:88:86:27:63:a8:eb:1f:0e:48:81:5c:df:9b:b8:
                    79:b6:4d:ac:9c:51:f8:16:22:55:f5:e9:16:06:ac:
                    fe:9a:2a:c0:59:ef:9d:78:9b:b2:ca:1e:76:5b:8a:
                    a8:aa:11:a7:41:df:6e:54:5b:4c:ce:97:bc:8e:14:
                    6d:75:42:7a:6e:33:47:66:99:2c:b2:9f:40:95:67:
                    99:b2:e1:f6:4c:39:86:a4:d9:56:2f:69:28:d4:9e:
                    61:61:08:f3:4a:c1:50:88:0c:26:d8:da:16:ff:b5:
                    f7:ba:e4:3d:10:23:62:ca:82:ed:88:1f:f6:b0:65:
                    c1:81:3b:4d:dd:c1:b3:20:3f:71:d4:8f:72:19:9d:
                    3b:56:67:98:33:ea:d4:62:2e:28:6d:ba:76:62:23:
                    f9:31:cc:99:3f:c7:d6:c1:bf:b3:6a:3d:d4:73:50:
                    03:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:91:95:BB:1C:A3:A9:A8:6F:69:56:C0:3F:E5:89:D6:63:E8:0E:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a6d95ed-60dd-4766-aaa3-2d0bbdfb227f/48fa4e25-0f17-316a-89b3-7cd5387984d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a6d95ed-60dd-4766-aaa3-2d0bbdfb227f/6a6d95ed-60dd-4766-aaa3-2d0bbdfb227f.crl

            X509v3 Authority Key Identifier:
                keyid:85:37:06:75:08:24:44:0E:0E:5C:56:72:2A:36:AB:4B:20:8E:CB:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a6d95ed-60dd-4766-aaa3-2d0bbdfb227f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:4c:af:b9:d6:84:fc:11:6e:10:82:d9:56:12:83:4b:32:8d:
         ba:de:36:d9:89:db:68:25:90:2f:d8:8e:6b:86:c4:02:ab:80:
         50:fc:c8:86:da:03:d4:bc:03:99:93:71:02:73:60:63:95:a6:
         de:53:fb:8b:20:7e:08:38:26:ef:fd:d6:4a:e2:da:8a:cc:9b:
         d1:2d:ac:c4:d7:c6:e8:f0:79:78:d0:25:77:57:e7:6a:16:f4:
         3a:50:11:54:64:e0:ff:3e:e6:38:b5:2f:42:e6:ed:ba:75:6e:
         41:da:42:22:e7:b9:52:a6:34:fc:14:ee:0a:0d:8b:c8:ee:db:
         ec:07:92:f4:d6:f3:65:53:9a:0e:90:1b:38:77:58:0b:35:a6:
         1c:37:ef:30:b9:1d:b6:ff:e4:31:14:24:be:21:07:ee:c1:20:
         13:f5:b4:f0:a2:b5:11:30:ab:af:40:3c:a4:4c:92:03:01:e3:
         d7:81:c5:04:74:e0:95:d0:6e:9d:84:87:05:4e:13:9b:22:7a:
         b5:17:23:14:c8:95:fd:97:8f:b8:ac:2d:69:2e:e1:08:39:0d:
         e9:b3:2a:0d:34:0e:07:73:56:71:6c:ae:56:52:e0:53:8b:f2:
         d9:31:c3:79:bd:43:65:fb:4b:4d:5b:99:64:9b:ea:a6:7d:66:
         ae:72:74:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----