Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/5d8e1c62-9f6d-3b6a-a114-faae1f0d53cb.roa
File:                     5d8e1c62-9f6d-3b6a-a114-faae1f0d53cb.roa (raw, json)
Hash identifier:          JdrYZyJxUSb2xKCCVfhN+R16q/tGBElpmUaLwE/fDSE=
Subject key identifier:   A6:2E:DA:51:4F:BD:4B:C9:81:A1:72:3D:53:DC:86:07:E6:55:05:DC
Certificate issuer:       /CN=c097bbd1-dde1-4ee5-a727-5ee45da69052
Certificate serial:       010D0C9F4328583DFF3DA7F47C0DE08311ADE9F0
Authority key identifier: 24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/5d8e1c62-9f6d-3b6a-a114-faae1f0d53cb.roa
Signing time:             Wed 29 Sep 2021 20:03:54 +0000
ROA not before:           Wed 29 Sep 2021 20:03:54 +0000
ROA not after:            Sun 25 Aug 2024 04:00:00 +0000
asID:                     14618
IP address blocks:        157.254.154.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ff:3d:a7:f4:7c:0d:e0:83:11:ad:e9:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c097bbd1-dde1-4ee5-a727-5ee45da69052
        Validity
            Not Before: Sep 29 20:03:54 2021 GMT
            Not After : Aug 25 04:00:00 2024 GMT
        Subject: CN=30deebbc-1e0b-49c4-8625-f304abc4ec31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b6:45:ad:7c:ac:aa:f8:79:eb:f6:bc:d7:19:
                    d1:7e:d7:4d:12:a2:3a:00:48:dc:87:6a:04:0e:d4:
                    42:fd:d8:79:89:7a:5b:47:dc:2f:95:e3:a4:e3:ec:
                    7b:f2:3e:b0:31:6b:f5:a2:2b:6a:5a:6d:e2:87:ac:
                    09:94:05:58:36:43:e7:a4:f2:f3:7c:ed:d2:31:79:
                    51:23:2b:a2:96:7d:a3:e7:0a:15:49:a2:32:8e:2c:
                    eb:f6:6e:74:83:73:76:54:9c:00:42:e2:de:c6:10:
                    98:0b:f4:57:fd:88:70:59:ac:3f:55:d7:05:1d:90:
                    25:bf:c7:c8:0d:e2:17:d0:71:a4:8f:ec:5a:a6:45:
                    35:d8:0c:2f:4b:10:f6:2d:7f:d3:d0:61:88:49:a8:
                    18:29:d7:79:d3:9c:be:88:f0:21:f5:45:ae:ca:3e:
                    48:dc:03:8c:4e:e4:97:2b:9c:3b:87:2f:7e:6b:46:
                    ec:a3:c0:2c:fb:eb:26:65:37:3d:5b:6e:a7:9f:13:
                    03:10:ee:a4:81:90:d9:f5:5c:8e:77:16:02:17:91:
                    48:dd:8f:94:47:dd:d5:8b:3b:d0:4c:af:8a:5d:35:
                    dd:c5:66:12:33:29:38:9b:0b:96:f9:b8:26:81:b8:
                    1e:18:3f:af:eb:ff:b4:2b:a5:18:83:6c:b8:08:ac:
                    6d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:2E:DA:51:4F:BD:4B:C9:81:A1:72:3D:53:DC:86:07:E6:55:05:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/5d8e1c62-9f6d-3b6a-a114-faae1f0d53cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/c097bbd1-dde1-4ee5-a727-5ee45da69052.crl

            X509v3 Authority Key Identifier:
                keyid:24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:20:53:1f:28:ac:74:e3:ec:b3:aa:26:ae:31:a5:78:61:35:
         fd:3e:a6:0c:d6:9c:9d:3b:5e:68:b8:2d:8e:37:e4:c0:e6:a1:
         02:98:b9:84:9a:b9:f1:2d:33:49:b6:07:7b:c0:82:50:d6:f4:
         3c:30:31:af:df:b8:1a:b5:6b:89:18:38:6b:d7:2b:13:7e:93:
         f1:a5:df:32:b1:d9:0f:fb:5c:e1:ac:c1:a9:56:df:18:bb:85:
         d2:aa:f0:94:cc:18:c8:08:a6:53:48:90:fd:bb:e1:8c:45:b4:
         d5:37:43:67:ae:3a:a0:24:52:58:ae:e6:e4:a2:41:ff:35:6d:
         5e:0c:94:7c:eb:ad:b2:95:d4:87:58:54:7b:f4:53:95:15:85:
         da:67:fc:ab:79:37:87:51:c1:75:a8:2c:df:39:d0:0e:0e:a3:
         18:39:72:c6:51:27:4e:ae:96:49:48:62:ef:97:a3:ff:ea:c0:
         96:5c:5a:45:09:36:b0:b3:61:c2:25:f3:11:41:5c:38:d7:e5:
         99:ba:6e:80:62:23:fb:b5:f9:be:b4:87:f2:b5:f3:98:a9:d5:
         73:25:2b:fa:7a:fc:bc:88:05:86:33:95:b3:c5:31:c0:45:73:
         52:6c:c6:bb:1e:c8:25:a0:88:64:e8:9f:99:a8:0f:a7:ea:79:
         4b:0a:4e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----