Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a/9e4bea4d-b193-3957-a4cf-52de2bf9af12.roa
File:                     9e4bea4d-b193-3957-a4cf-52de2bf9af12.roa (raw, json)
Hash identifier:          15/H2wZqdD6l+UZ7xYEtBt8LJuPO6gSLHMAZVOHm1bw=
Subject key identifier:   23:DD:24:27:0B:D3:E2:E7:9A:6F:7E:AF:4E:1C:6D:FF:17:DF:20:9A
Certificate issuer:       /CN=46107a8c-29da-4914-8858-2b42aa4d8b4a
Certificate serial:       010D0C9F4328583AF60A642E6D0643B1C8CB2560
Authority key identifier: AA:4F:4F:E9:E2:28:28:6A:EC:B1:88:AA:98:ED:11:87:E9:E2:2F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a/9e4bea4d-b193-3957-a4cf-52de2bf9af12.roa
Signing time:             Wed 31 Mar 2021 04:00:00 +0000
ROA not before:           Wed 31 Mar 2021 04:00:00 +0000
ROA not after:            Thu 20 Nov 2025 05:00:00 +0000
asID:                     203
IP address blocks:        173.226.72.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:f6:0a:64:2e:6d:06:43:b1:c8:cb:25:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46107a8c-29da-4914-8858-2b42aa4d8b4a
        Validity
            Not Before: Mar 31 04:00:00 2021 GMT
            Not After : Nov 20 05:00:00 2025 GMT
        Subject: CN=20a49571-c585-4e16-b50a-3d9f81173446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f7:d5:5b:7a:c9:cd:9b:7b:6d:fd:0c:6f:fe:
                    0a:a7:ef:73:fd:60:3e:cf:88:c8:4b:76:fc:c6:0d:
                    26:b2:02:21:95:ee:c3:ef:09:3e:55:ac:ed:08:0a:
                    d7:28:9c:3e:f4:d5:d8:fa:91:1f:0c:75:43:37:04:
                    6a:57:db:93:92:7a:22:c2:21:b6:64:4c:d4:34:f6:
                    7a:80:b0:bd:3b:68:a1:d7:15:ff:d7:0d:f4:e0:33:
                    a8:be:4d:a0:9b:76:46:0f:9d:54:5b:ce:c9:6f:f6:
                    5d:5d:74:cc:43:b9:08:cd:0d:74:54:0c:3d:8a:62:
                    a6:ad:5a:d3:78:78:a7:d8:6d:d7:d8:a3:59:49:78:
                    63:e0:d7:d1:81:2f:1b:d2:44:a5:62:fb:51:01:b2:
                    7b:06:20:69:cd:52:52:8c:6d:5b:f6:13:c9:95:2c:
                    b2:98:25:c1:a1:c5:9b:09:fa:1e:c8:41:17:3c:29:
                    a0:d0:d4:93:06:dc:98:77:df:7e:46:ee:9d:b8:87:
                    8e:23:03:01:d5:f5:bb:d0:2d:b0:37:42:ce:78:dc:
                    b8:7b:d8:c0:e3:e2:d4:53:4d:65:c7:c4:40:90:ad:
                    b3:b6:e8:d3:a5:94:5e:38:e5:18:52:48:a8:2b:d7:
                    d9:e4:52:1f:cc:af:d4:0d:be:27:ed:4e:8a:b7:39:
                    46:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:DD:24:27:0B:D3:E2:E7:9A:6F:7E:AF:4E:1C:6D:FF:17:DF:20:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a/9e4bea4d-b193-3957-a4cf-52de2bf9af12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a/46107a8c-29da-4914-8858-2b42aa4d8b4a.crl

            X509v3 Authority Key Identifier:
                keyid:AA:4F:4F:E9:E2:28:28:6A:EC:B1:88:AA:98:ED:11:87:E9:E2:2F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.226.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:0e:f4:f2:ca:15:a0:4c:3a:c2:ff:49:2a:26:2f:98:a5:e3:
         f3:28:68:db:50:57:48:6c:e8:27:8a:cd:69:46:1c:3b:73:8a:
         bd:c5:da:9f:9b:c5:fb:73:1f:57:3f:2b:36:22:56:e1:f5:a5:
         d0:c7:d4:41:3e:a5:45:97:dd:a6:30:d2:78:3a:0e:2f:0d:01:
         89:db:2d:1c:96:4f:f6:d0:87:2a:63:67:e6:2b:e5:3c:fd:42:
         ea:85:5d:4b:e2:af:96:b5:d9:da:b6:fb:7f:3f:16:d4:d5:4f:
         bd:45:b4:71:3d:a9:08:b5:8b:d4:43:74:e9:64:85:ae:f0:2f:
         6b:dd:8b:e5:e6:c3:ef:41:7e:e2:23:f7:0c:0c:68:3f:a4:36:
         9e:fe:ab:4d:7b:fd:5d:3f:d0:51:10:35:83:81:0d:78:31:aa:
         5f:14:5c:3d:dd:e4:7b:32:be:f8:b4:74:b9:4e:42:03:78:a6:
         57:1b:96:fc:60:01:75:c6:b1:e6:5a:fe:47:08:1c:88:86:62:
         f4:fd:2b:5f:57:fc:7f:ba:7a:f1:39:bd:69:bd:6b:15:27:ab:
         72:c3:ee:ec:cd:ed:03:fc:db:10:83:f1:17:ad:dd:6b:0f:c7:
         e4:f7:c8:7b:1d:8f:d7:d2:23:94:34:b1:8b:69:88:39:55:d3:
         9c:84:14:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----