Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/efc7bf1b-858f-3951-b858-b4d6b89daa26.roa
File:                     efc7bf1b-858f-3951-b858-b4d6b89daa26.roa (raw, json)
Hash identifier:          x33s2GPvnfMXXDDAXsBAi3YI/PUH00aQVns4AhlR1tQ=
Subject key identifier:   A6:2C:60:FF:8E:CC:EF:BA:96:A0:AD:2B:33:3B:2C:79:07:0E:A3:F1
Certificate issuer:       /CN=c097bbd1-dde1-4ee5-a727-5ee45da69052
Certificate serial:       010D0C9F4328583BA474DB010A100D821D878A80
Authority key identifier: 24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/efc7bf1b-858f-3951-b858-b4d6b89daa26.roa
Signing time:             Wed 29 Sep 2021 04:00:00 +0000
ROA not before:           Wed 29 Sep 2021 04:00:00 +0000
ROA not after:            Mon 22 Jan 2024 05:00:00 +0000
asID:                     61317
IP address blocks:        157.254.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:a4:74:db:01:0a:10:0d:82:1d:87:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c097bbd1-dde1-4ee5-a727-5ee45da69052
        Validity
            Not Before: Sep 29 04:00:00 2021 GMT
            Not After : Jan 22 05:00:00 2024 GMT
        Subject: CN=f5818ecc-3005-47d3-97b6-6efc9643c014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7c:47:ef:b5:4e:b6:76:c2:2d:31:3b:4e:34:
                    9c:e0:80:39:2f:df:9d:a3:a9:61:2f:50:00:cd:f0:
                    0d:ee:cf:c7:5d:7f:f3:36:85:7e:cb:64:b5:e2:82:
                    be:f6:2d:27:49:86:6f:e7:ca:45:dc:04:3a:9e:b5:
                    a9:ae:1d:86:45:27:bf:d1:76:fb:3e:9e:d7:82:4b:
                    4e:12:01:8c:c7:bf:86:3f:18:bb:b4:04:30:8e:00:
                    12:d5:e6:0c:ae:e4:00:fd:f8:44:87:4e:78:10:ce:
                    6c:2e:5d:da:2a:df:b8:38:8f:14:a1:65:fa:79:22:
                    37:9d:a1:82:e3:9d:d2:bf:3d:a6:8f:13:f2:31:bc:
                    2f:ba:b7:00:e2:3f:84:96:2b:ba:58:87:cc:43:a9:
                    26:09:1c:d7:20:20:4d:17:b8:6b:f2:4f:bb:15:29:
                    23:93:df:49:31:63:02:2a:4c:46:9a:7c:2c:cc:37:
                    80:55:be:ef:8c:76:6b:dc:40:ca:fc:51:f1:59:ae:
                    07:be:14:8f:a0:84:8f:12:1a:a6:41:1c:e5:97:a8:
                    c3:20:89:a0:84:89:3c:8f:d6:3c:86:f7:70:ce:95:
                    d4:ad:1f:5b:b5:72:a3:60:b8:5e:5e:e6:a5:33:69:
                    c8:76:fa:01:a4:bd:e8:8f:2e:0f:01:5c:5f:6f:95:
                    12:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:2C:60:FF:8E:CC:EF:BA:96:A0:AD:2B:33:3B:2C:79:07:0E:A3:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/efc7bf1b-858f-3951-b858-b4d6b89daa26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/c097bbd1-dde1-4ee5-a727-5ee45da69052.crl

            X509v3 Authority Key Identifier:
                keyid:24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:0d:f1:e9:78:87:54:63:a5:e6:c1:c2:34:5d:9e:cf:20:f7:
         eb:84:2d:cb:32:02:e0:00:47:f3:c0:2b:66:57:ff:42:a5:c9:
         82:19:ce:80:20:6e:03:39:49:4f:99:5e:eb:1f:ae:20:3d:30:
         52:c6:d8:ac:0b:75:1b:3c:f8:d7:5f:d1:e9:68:9b:8d:15:22:
         13:85:9d:ad:f2:cb:ff:19:a6:2e:d3:3f:89:ec:e5:94:04:23:
         a5:c0:55:39:45:ac:22:fb:92:0e:fa:f8:a6:04:d8:91:a9:98:
         2a:7a:32:71:9a:18:57:6c:ca:7f:2b:ed:1d:fc:02:57:89:f0:
         72:d8:54:d5:35:92:3c:05:25:a8:27:eb:d0:48:22:28:67:27:
         a1:ce:c9:ae:ac:a7:ef:e2:56:1a:84:89:44:c1:68:55:fe:69:
         d1:a3:8c:60:d0:57:00:f8:34:15:55:66:53:6d:0e:cc:f7:5d:
         f3:3b:6c:31:eb:2d:b1:9c:4f:11:8f:65:2b:43:59:67:09:2e:
         1b:5c:7b:c9:83:65:cc:1f:48:df:a2:9d:c8:22:f3:2a:5c:98:
         9f:e7:6b:7c:d1:09:d3:30:5e:18:97:7a:78:25:b1:aa:46:53:
         3e:c4:3b:35:a1:1e:e1:42:3c:cd:63:7f:d1:18:36:46:f1:b1:
         0d:4d:c8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----