Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/79c6a5ea-5967-3e9f-be4d-b59648461c76.roa
File:                     79c6a5ea-5967-3e9f-be4d-b59648461c76.roa (raw, json)
Hash identifier:          Pvh5v+uw/pakp3iA1MeL8Swl+iqDGnvQe6kPZolI2qA=
Subject key identifier:   F4:04:5F:B6:6E:D8:4B:15:E7:5F:51:90:85:12:2B:4F:F1:87:DE:F9
Certificate issuer:       /CN=c097bbd1-dde1-4ee5-a727-5ee45da69052
Certificate serial:       010D0C9F4328583FD6B8767214CAE1B4C1A248C0
Authority key identifier: 24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/79c6a5ea-5967-3e9f-be4d-b59648461c76.roa
Signing time:             Wed 29 Sep 2021 20:03:54 +0000
ROA not before:           Wed 29 Sep 2021 20:03:54 +0000
ROA not after:            Mon 10 Feb 2025 05:00:00 +0000
asID:                     212238
IP address blocks:        157.254.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:d6:b8:76:72:14:ca:e1:b4:c1:a2:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c097bbd1-dde1-4ee5-a727-5ee45da69052
        Validity
            Not Before: Sep 29 20:03:54 2021 GMT
            Not After : Feb 10 05:00:00 2025 GMT
        Subject: CN=186abe9b-b283-4441-956d-8805ecfa754a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:88:0e:1b:ca:70:2d:38:f0:65:72:eb:54:9a:
                    11:71:53:28:af:5b:1c:24:d6:0a:2c:ec:02:af:ee:
                    15:56:47:ab:6c:cf:23:db:4e:72:ab:7d:36:82:60:
                    91:76:bb:3f:5e:37:b3:23:f2:b4:e6:90:be:ad:cb:
                    6f:ee:45:8d:99:40:8a:a5:e4:4f:29:6e:32:a0:f3:
                    50:2f:02:06:f7:25:15:74:99:93:28:68:18:98:67:
                    a4:47:fd:53:22:89:95:ac:53:bb:1a:d9:38:56:5c:
                    f7:82:ac:ba:fe:27:b2:17:2a:04:1b:6c:d7:85:72:
                    4b:a5:b8:ee:53:09:a5:b2:a9:a9:90:8e:2a:aa:68:
                    c4:bf:40:72:4a:9e:c2:4f:54:b0:47:be:20:d8:f9:
                    b1:3f:46:7b:66:5e:65:c5:bf:c6:25:aa:56:00:e1:
                    69:82:3d:ce:01:70:e6:14:17:7a:fd:5f:91:81:98:
                    14:78:1f:52:b7:0d:b1:e5:60:c8:74:5d:ee:9d:e4:
                    ac:ee:93:bb:fd:6a:f1:36:13:10:48:5b:80:72:21:
                    ef:3d:66:c0:28:a3:c0:a1:2f:cf:7a:22:39:51:02:
                    2a:1e:d1:ce:30:23:11:87:fb:97:12:4c:6f:63:35:
                    d7:fd:23:f5:e9:9d:12:ee:5e:1b:0b:ca:28:40:49:
                    92:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:04:5F:B6:6E:D8:4B:15:E7:5F:51:90:85:12:2B:4F:F1:87:DE:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/79c6a5ea-5967-3e9f-be4d-b59648461c76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/c097bbd1-dde1-4ee5-a727-5ee45da69052.crl

            X509v3 Authority Key Identifier:
                keyid:24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:0c:16:f3:8b:4f:61:8a:7d:d6:15:58:96:20:eb:a0:aa:a1:
         58:59:19:d6:f1:86:72:fb:ae:e8:c1:0e:07:c9:55:7f:35:76:
         06:c5:ae:af:2e:2d:ce:de:30:d3:40:02:fc:50:16:0b:1e:b4:
         87:8a:15:5f:1e:27:1b:56:2c:81:93:e0:38:f7:79:00:9c:5e:
         8b:ed:73:6d:dd:03:58:2f:95:d7:1a:f3:b3:e4:47:0b:4b:21:
         35:0b:52:d9:c9:53:ce:2c:75:f0:b1:13:92:8e:66:0f:08:b3:
         dc:17:28:7f:6c:20:bd:0e:4f:ac:b8:92:ea:0f:a1:56:d4:c3:
         e2:a6:3d:91:50:80:25:ca:58:90:62:4d:fd:35:f9:a7:04:00:
         c1:4f:42:43:9a:53:88:32:d8:4b:b1:8e:6c:cd:e8:23:87:29:
         3c:2d:e4:6a:25:9a:1b:c7:89:98:0b:da:31:b7:93:eb:38:93:
         97:8c:cc:51:ba:36:c0:86:17:3e:db:12:a0:7e:df:17:16:af:
         ee:8e:04:09:d9:a1:45:be:f0:0e:c1:6c:ab:95:09:0f:cf:a2:
         48:a8:78:75:9d:7e:b4:28:d9:3d:63:72:a1:6a:0e:e5:c4:98:
         18:0a:2c:a9:de:99:ff:6a:3b:eb:35:61:10:ba:82:0a:9c:47:
         70:43:4c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----