Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/3a27149e-e0c7-3f82-8c11-7a28bee3dacf.roa
File:                     3a27149e-e0c7-3f82-8c11-7a28bee3dacf.roa (raw, json)
Hash identifier:          hqe1YaZKkddPJizWMHzhNw+oiWcFZ/2qDvECRlI3nNk=
Subject key identifier:   AA:27:15:CE:D3:52:71:7F:05:66:6D:68:AC:D1:28:E5:02:2F:11:2B
Certificate issuer:       /CN=c097bbd1-dde1-4ee5-a727-5ee45da69052
Certificate serial:       010D0C9F4328583EFD8EB4D0E432ECEFC19DFB00
Authority key identifier: 24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/3a27149e-e0c7-3f82-8c11-7a28bee3dacf.roa
Signing time:             Wed 29 Sep 2021 20:03:54 +0000
ROA not before:           Wed 29 Sep 2021 20:03:54 +0000
ROA not after:            Sun 24 Nov 2024 05:00:00 +0000
asID:                     139660
IP address blocks:        157.254.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:fd:8e:b4:d0:e4:32:ec:ef:c1:9d:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c097bbd1-dde1-4ee5-a727-5ee45da69052
        Validity
            Not Before: Sep 29 20:03:54 2021 GMT
            Not After : Nov 24 05:00:00 2024 GMT
        Subject: CN=25b966e0-c78e-4ca9-b285-d3d015238847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9f:9d:44:5f:38:5d:d4:c1:e4:88:5c:51:69:
                    6b:1e:fb:4d:56:1a:a7:a0:23:b5:dd:2b:f7:e3:27:
                    62:52:be:11:b9:bd:13:45:d4:f7:81:b4:75:31:f5:
                    7f:17:18:b5:46:a1:59:3d:96:6a:99:d5:5b:de:64:
                    a1:16:67:e4:01:4b:65:4b:c9:53:af:29:5c:6d:93:
                    55:06:57:72:4e:c0:b3:01:49:fe:fd:4f:83:d5:d6:
                    c4:82:03:56:34:2f:0c:93:cb:eb:af:97:b9:5c:8a:
                    c0:20:b2:7c:4e:f5:13:ff:6d:95:c4:0f:74:ce:b5:
                    9c:be:b7:75:8b:10:e6:20:07:b6:2f:1a:d2:66:cd:
                    ba:94:07:28:ef:b4:2e:53:43:a8:a7:8f:ca:92:46:
                    ad:22:e0:6c:b6:4c:27:84:d3:1b:e3:d0:77:f2:78:
                    06:32:d6:2e:9f:8f:e2:71:14:d9:ab:9b:c1:0a:ac:
                    be:14:8c:ad:59:67:ce:cb:7f:b3:b1:f5:c7:66:f7:
                    7b:33:cf:59:a9:78:c7:2c:83:35:f0:b9:32:7d:64:
                    76:7f:85:39:2c:78:78:aa:46:ab:fc:a8:09:f8:1b:
                    0d:b1:88:65:a1:f1:f1:42:de:c8:c1:a1:79:fc:40:
                    19:71:76:fa:d9:21:e2:9b:98:82:4b:82:cd:45:15:
                    99:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:27:15:CE:D3:52:71:7F:05:66:6D:68:AC:D1:28:E5:02:2F:11:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/3a27149e-e0c7-3f82-8c11-7a28bee3dacf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/c097bbd1-dde1-4ee5-a727-5ee45da69052.crl

            X509v3 Authority Key Identifier:
                keyid:24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:59:00:62:48:12:43:f1:7b:36:e7:4c:bf:e5:57:3b:aa:d0:
         fa:23:60:a4:bc:66:e8:c7:db:18:fe:09:e5:ef:58:28:22:11:
         a9:49:03:d8:70:a9:d0:90:f0:34:71:44:59:2a:9b:6c:22:e8:
         9f:58:74:f2:54:82:8b:04:ed:5e:e9:4a:2a:05:e5:aa:2c:18:
         14:3d:7b:f7:1c:40:11:70:be:04:5f:63:04:45:c0:83:61:28:
         7c:08:0f:b6:c4:ca:a7:14:16:3d:31:c3:1c:ca:cd:67:a2:9a:
         04:6c:71:e7:ad:ba:11:db:04:30:3d:69:9f:18:6b:3e:c3:36:
         c5:55:a9:f6:02:e3:bf:f7:89:81:cd:e8:e4:59:f5:cc:a8:16:
         48:88:13:23:1e:e1:0e:7e:87:f7:ad:24:c3:3a:af:7f:a4:da:
         32:0c:df:97:4b:59:39:bb:e5:e9:6c:3f:64:f6:b8:27:35:58:
         3f:ad:23:de:29:24:4e:b0:16:6e:b6:bc:e1:b1:0e:b5:f2:a8:
         66:4c:fd:4d:33:38:01:be:4c:01:1a:1a:2c:30:bf:73:6c:2c:
         55:d1:5b:a4:79:e0:af:25:14:ee:7f:73:70:b2:44:b3:72:42:
         71:95:66:9b:9e:e4:8c:75:3c:00:99:1e:bf:4f:0a:99:63:92:
         f6:0a:da:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----