Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a/92d50ced-e4e7-384e-b7f7-f5e9d943f603.roa
File:                     92d50ced-e4e7-384e-b7f7-f5e9d943f603.roa (raw, json)
Hash identifier:          0rZHNowqSQ/7ZZwt8npD44u3kqxPUKxzFR8JS0zXTyU=
Subject key identifier:   FE:04:4A:B1:7B:A9:ED:12:B8:C9:D5:22:FB:F9:11:C9:A1:F3:5F:C4
Certificate issuer:       /CN=46107a8c-29da-4914-8858-2b42aa4d8b4a
Certificate serial:       010D0C9F4328583AF599624327E93B1F9E6B6220
Authority key identifier: AA:4F:4F:E9:E2:28:28:6A:EC:B1:88:AA:98:ED:11:87:E9:E2:2F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a/92d50ced-e4e7-384e-b7f7-f5e9d943f603.roa
Signing time:             Wed 31 Mar 2021 04:00:00 +0000
ROA not before:           Wed 31 Mar 2021 04:00:00 +0000
ROA not after:            Thu 20 Nov 2025 05:00:00 +0000
asID:                     26630
IP address blocks:        173.226.72.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:f5:99:62:43:27:e9:3b:1f:9e:6b:62:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46107a8c-29da-4914-8858-2b42aa4d8b4a
        Validity
            Not Before: Mar 31 04:00:00 2021 GMT
            Not After : Nov 20 05:00:00 2025 GMT
        Subject: CN=908d18a5-3166-4873-a43a-bd9ebff27c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:14:49:5a:38:91:cc:ac:de:69:9b:e3:49:d2:
                    78:72:8b:b2:0a:41:2e:f8:e9:25:2b:85:93:a7:c5:
                    d8:35:90:37:30:d7:db:83:14:80:9c:91:5c:ac:7a:
                    ac:73:fb:e7:ea:3c:83:9b:56:57:47:f1:40:7a:1d:
                    17:b9:af:3f:ac:fe:1e:81:b8:52:11:1c:f9:b9:94:
                    82:63:11:93:23:d6:57:8b:67:42:a9:ec:eb:99:a6:
                    dd:15:ea:79:54:9c:8c:15:cd:f0:79:c9:db:81:ad:
                    e7:23:ec:11:db:65:02:7f:96:4e:f1:03:06:41:99:
                    b4:44:be:43:53:98:4d:ee:2b:8b:1a:e3:ca:b8:2d:
                    78:c9:d8:75:97:de:40:7c:86:24:7b:5e:7d:1b:d7:
                    68:24:1d:10:39:d4:bd:03:8d:a2:81:f5:43:9f:ad:
                    05:57:c8:c3:a5:ff:0f:de:e9:62:ab:c8:06:a0:b2:
                    d2:a2:32:dd:6e:0b:cf:f1:c1:0a:a6:33:97:03:4b:
                    1b:e3:58:e1:2a:e8:06:70:96:12:eb:6c:0b:63:37:
                    96:15:87:ba:e8:3a:3b:a5:53:ba:95:3f:6a:35:04:
                    41:83:47:7a:25:18:c2:25:17:e4:9f:81:d9:55:46:
                    7d:3e:fb:e1:24:99:c1:7d:1b:0b:da:e9:0c:e4:7b:
                    64:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:04:4A:B1:7B:A9:ED:12:B8:C9:D5:22:FB:F9:11:C9:A1:F3:5F:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a/92d50ced-e4e7-384e-b7f7-f5e9d943f603.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a/46107a8c-29da-4914-8858-2b42aa4d8b4a.crl

            X509v3 Authority Key Identifier:
                keyid:AA:4F:4F:E9:E2:28:28:6A:EC:B1:88:AA:98:ED:11:87:E9:E2:2F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.226.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:57:d5:f2:37:9a:a8:ba:bf:8a:7b:a1:a4:c2:ce:ef:5e:57:
         f7:e9:61:9a:14:fa:a2:5d:f5:b4:00:72:6c:b0:c4:83:62:41:
         95:3d:0e:d9:be:90:09:42:ab:9e:a1:28:b1:95:0c:67:db:e7:
         f9:83:e9:b6:54:af:aa:3e:87:1f:f0:93:f5:c3:70:5c:5b:95:
         01:a4:e0:da:61:6c:0f:0a:89:0d:9a:91:40:84:7c:b1:94:ba:
         7b:71:d3:b7:71:07:eb:ea:67:1a:94:e2:7a:b6:53:6e:38:1e:
         10:9b:e8:16:0b:09:f6:4b:23:0f:ea:aa:ac:d6:eb:9f:d1:2a:
         90:77:af:f3:ad:b6:36:75:da:87:f5:22:54:95:c4:49:42:c4:
         d0:94:1e:e4:26:d6:69:ac:32:ed:45:92:b1:73:73:fa:36:8b:
         78:a1:cf:a7:25:2a:f5:c9:33:2b:9a:e7:da:e7:f1:3d:5b:ea:
         52:bb:9b:2e:66:28:55:f7:55:24:28:1e:ad:b2:95:dc:10:0a:
         19:9a:27:cc:cd:82:7e:29:cd:a2:f2:71:69:c8:bd:b0:d9:ba:
         4c:75:b8:f2:89:48:3f:0b:c3:e7:43:b6:20:11:41:98:a9:b3:
         b6:f7:84:92:cd:26:d7:57:2e:58:2c:26:c9:e0:05:a3:17:31:
         d4:f8:0f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----