Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/68ce9f2f-ec2e-3bd6-b8ee-5e2dbb1a4730.roa
File:                     68ce9f2f-ec2e-3bd6-b8ee-5e2dbb1a4730.roa (raw, json)
Hash identifier:          Q6+dnq/2rUMfNFMD2YMziH6fimXGIpveHzzgK6wV/cA=
Subject key identifier:   EC:86:09:BA:BD:58:7B:D1:E2:26:4C:7F:73:C8:5A:DF:97:0E:B0:31
Certificate issuer:       /CN=c097bbd1-dde1-4ee5-a727-5ee45da69052
Certificate serial:       010D0C9F4328584040DF2613D3146E7C1AA79980
Authority key identifier: 24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/68ce9f2f-ec2e-3bd6-b8ee-5e2dbb1a4730.roa
Signing time:             Wed 29 Sep 2021 20:03:54 +0000
ROA not before:           Wed 29 Sep 2021 20:03:54 +0000
ROA not after:            Thu 20 Mar 2025 04:00:00 +0000
asID:                     61317
IP address blocks:        157.254.222.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:40:df:26:13:d3:14:6e:7c:1a:a7:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c097bbd1-dde1-4ee5-a727-5ee45da69052
        Validity
            Not Before: Sep 29 20:03:54 2021 GMT
            Not After : Mar 20 04:00:00 2025 GMT
        Subject: CN=21462104-3bf0-43e2-aae1-b08170ddb268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6e:25:ec:1c:c3:16:73:e1:ad:2f:d0:a4:52:
                    23:78:1f:ba:fe:f7:71:ef:df:83:d7:c8:3a:45:d6:
                    88:19:0e:3e:87:0c:c9:10:60:91:89:91:bb:84:cb:
                    27:db:48:2a:84:c4:40:07:86:87:5a:f1:5d:39:61:
                    d0:0c:5c:b9:20:c1:9b:00:b9:92:53:ac:7f:6f:cf:
                    dc:03:8f:a3:53:fc:a3:94:37:fe:c5:0a:0c:41:60:
                    00:c0:16:9f:34:df:41:f3:79:c2:7a:65:93:90:9e:
                    79:7f:af:43:5b:ea:6d:61:0b:e9:03:b6:87:95:30:
                    db:2d:65:c7:b9:15:5f:b2:58:b6:3c:7d:a5:74:35:
                    a8:f5:72:d5:2e:21:e6:99:4b:82:18:be:2f:b5:59:
                    92:7a:83:28:65:1f:c5:e3:25:25:2b:36:67:63:47:
                    e0:94:52:9f:35:f9:f2:91:b0:46:86:ee:ee:e1:3c:
                    2b:0a:8d:cd:df:67:69:09:5f:9a:f6:1a:89:86:3a:
                    6d:7f:74:73:13:59:7e:65:37:88:95:98:23:13:6c:
                    b3:3a:69:f3:d2:4e:0a:47:f7:9a:04:5a:aa:98:64:
                    4f:b6:70:60:41:3a:ed:9b:e1:79:47:25:0b:62:36:
                    47:41:af:98:da:df:58:d4:73:ac:eb:76:98:9f:25:
                    74:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:86:09:BA:BD:58:7B:D1:E2:26:4C:7F:73:C8:5A:DF:97:0E:B0:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/68ce9f2f-ec2e-3bd6-b8ee-5e2dbb1a4730.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/c097bbd1-dde1-4ee5-a727-5ee45da69052.crl

            X509v3 Authority Key Identifier:
                keyid:24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:1c:fb:6d:ce:07:9c:24:fd:9d:14:6f:ae:89:29:31:bf:49:
         a0:64:54:a6:c3:a8:8a:a8:32:c5:9d:81:82:70:40:c2:4a:82:
         63:fc:a7:79:0b:cb:ac:23:03:26:19:7a:85:77:19:38:2d:30:
         22:25:23:33:a4:3d:ce:94:96:a0:b4:91:bf:79:c5:9a:87:54:
         58:e8:9f:63:c8:8a:28:11:d3:0b:d8:f3:95:f0:c7:aa:4b:93:
         e9:be:54:3f:30:be:1f:57:82:33:21:29:4e:cd:4e:55:1d:a1:
         71:bf:44:ce:cf:de:d0:b8:e0:b9:c3:c7:ae:50:45:7a:c5:f7:
         a5:ca:bd:14:3f:79:73:ef:7e:d5:b1:c8:46:c8:75:37:33:17:
         b3:6a:48:98:f6:dc:eb:94:67:46:82:9b:f0:6d:a5:bd:2c:0d:
         75:c5:12:2e:64:3f:b8:a5:7a:8d:f6:46:2a:25:ce:30:10:b6:
         a2:50:d3:e1:95:78:f8:0d:53:21:9f:0b:56:f7:e5:4c:1e:80:
         e1:10:a6:60:0d:77:80:1b:57:9c:d6:da:b2:8e:1d:f2:c9:9c:
         3e:af:c1:f7:ba:c4:4b:98:9e:2a:b6:95:50:b4:95:79:cc:bb:
         3b:ce:e9:9d:d5:cf:47:85:c9:5e:0f:f0:43:56:0b:b7:ed:70:
         25:54:2e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----