Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c404bddd-0928-4f6e-b783-e16ade868456/d2726e08-be86-3174-97b4-cc868c97c451.roa
File:                     d2726e08-be86-3174-97b4-cc868c97c451.roa (raw, json)
Hash identifier:          REoBCzUFfdMD/QbaqKyj1cVxZWPiNujm21cs29oSCwg=
Subject key identifier:   66:72:7A:8E:F5:62:7E:04:E3:7C:60:DF:CD:55:69:ED:79:18:83:53
Certificate issuer:       /CN=c404bddd-0928-4f6e-b783-e16ade868456
Certificate serial:       010D0C9F432858450D85841AF067474202E84C80
Authority key identifier: E6:FB:B7:DE:DD:DE:2B:95:64:4A:10:B7:7A:C0:06:8E:B8:BF:94:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c404bddd-0928-4f6e-b783-e16ade868456.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c404bddd-0928-4f6e-b783-e16ade868456/d2726e08-be86-3174-97b4-cc868c97c451.roa
Signing time:             Thu 29 Feb 2024 14:00:31 +0000
ROA not before:           Thu 29 Feb 2024 14:00:31 +0000
ROA not after:            Wed 29 May 2024 13:00:31 +0000
asID:                     398202
IP address blocks:        69.64.116.0/22 maxlen: 24
                          66.118.240.0/22 maxlen: 24
                          23.148.80.0/24 maxlen: 24
                          2605:88c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0d:85:84:1a:f0:67:47:42:02:e8:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c404bddd-0928-4f6e-b783-e16ade868456
        Validity
            Not Before: Feb 29 14:00:31 2024 GMT
            Not After : May 29 13:00:31 2024 GMT
        Subject: CN=2a076365-c97c-4ade-b653-6cdb196ead96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fa:e8:7a:3d:46:ca:20:7a:0e:83:b0:fe:6d:
                    5d:b0:a3:6e:34:76:e5:fe:cd:5d:58:46:2d:8e:0b:
                    68:41:f5:c3:50:f0:53:fb:ad:bd:24:42:f4:e9:9a:
                    c6:31:50:d0:88:50:b5:61:b4:05:5f:ec:73:8e:3c:
                    3d:88:21:e3:c3:f2:5d:93:10:1a:1a:7d:3c:12:3d:
                    be:1d:dc:6e:45:83:f3:df:82:83:19:3e:28:ae:15:
                    81:e9:f1:b4:da:5b:ec:8f:ff:9b:c5:fe:7e:7d:c2:
                    b2:19:f9:a9:db:cd:76:eb:c3:fe:34:d4:26:57:86:
                    a3:f3:2d:3f:59:25:e6:ac:77:59:0a:18:3b:b5:d4:
                    de:2d:f1:1a:07:60:8b:17:c9:70:bd:31:a3:5d:64:
                    05:9a:0b:ef:a4:6a:a5:58:58:b5:69:ae:60:d9:0e:
                    a9:71:2e:44:be:0a:3b:70:0a:77:7e:58:9b:16:f7:
                    a7:c9:a2:e5:c3:71:2a:de:68:50:6d:e5:76:f5:13:
                    1a:34:37:4e:8a:4f:cd:d5:a9:2f:58:a8:36:3b:0e:
                    85:10:64:5e:36:d1:31:51:d4:98:aa:5a:7a:04:7e:
                    bc:99:a1:78:7d:ae:db:43:f2:80:d9:af:b2:f7:de:
                    f9:1a:3b:11:23:56:30:7d:c6:7d:6e:c9:7d:10:7c:
                    22:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:72:7A:8E:F5:62:7E:04:E3:7C:60:DF:CD:55:69:ED:79:18:83:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c404bddd-0928-4f6e-b783-e16ade868456/d2726e08-be86-3174-97b4-cc868c97c451.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c404bddd-0928-4f6e-b783-e16ade868456/c404bddd-0928-4f6e-b783-e16ade868456.crl

            X509v3 Authority Key Identifier:
                keyid:E6:FB:B7:DE:DD:DE:2B:95:64:4A:10:B7:7A:C0:06:8E:B8:BF:94:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c404bddd-0928-4f6e-b783-e16ade868456.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.80.0/24
                  66.118.240.0/22
                  69.64.116.0/22
                IPv6:
                  2605:88c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:14:a7:43:e4:14:6a:b8:4d:65:27:ee:72:63:d4:d7:db:40:
         94:16:26:ed:cf:6e:65:d6:5e:1d:80:57:f4:26:9b:46:2a:0d:
         d9:be:cb:68:b2:77:dc:1c:49:49:8c:2c:07:04:a2:cb:5e:b3:
         c2:59:3d:50:89:6d:81:6a:e3:65:5e:74:93:f2:a5:d6:a1:fa:
         d0:30:ce:f1:ac:c6:df:7c:5b:d0:fd:c7:a7:49:3e:6f:4d:42:
         a2:7a:e3:9d:a5:a7:5d:0e:de:18:73:f0:8d:5e:41:a9:42:7d:
         22:b3:1a:50:80:41:41:e2:3e:56:bd:5d:c6:25:d8:12:9b:fd:
         25:57:99:73:52:18:25:f5:8f:0b:33:c4:40:ce:1d:28:64:ba:
         75:b6:9a:c4:c0:5d:f5:e0:2c:a0:71:2b:26:ec:99:2c:21:3e:
         10:ab:c1:f1:fe:3d:03:52:8f:c4:bc:21:9a:17:13:05:60:a7:
         2b:cb:44:f0:13:e3:5b:a6:26:c6:dd:95:54:da:6c:bd:48:3e:
         61:ac:3d:96:7c:4d:8f:87:68:0c:4f:c2:bf:09:d2:52:bf:80:
         17:cb:4c:a1:bb:2a:d9:e7:85:e8:b3:5e:68:03:c6:0c:4c:73:
         5f:09:f9:9d:27:a5:11:45:21:f9:37:8a:25:af:c9:44:87:46:
         58:f3:3f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----