Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5169c4df-ab74-4824-b98e-799ebbbde9f3/bf14e3bb-8e4b-3ca8-a1a6-4375fcf1aefa.roa
File:                     bf14e3bb-8e4b-3ca8-a1a6-4375fcf1aefa.roa (raw, json)
Hash identifier:          pUOW0kvVsBeqKjygvl39B/Fd3B7xMeiNM2F1pIYd1VE=
Subject key identifier:   49:33:DB:2D:12:0E:50:6C:CE:D6:DF:1D:2A:69:81:AA:41:C0:3A:07
Certificate issuer:       /CN=5169c4df-ab74-4824-b98e-799ebbbde9f3
Certificate serial:       010D0C9F432858388620AFDDB5E1C2ABA675BDC0
Authority key identifier: 29:D2:8C:54:EB:65:0D:67:B6:A4:0A:D6:55:12:75:E9:58:9D:FF:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5169c4df-ab74-4824-b98e-799ebbbde9f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5169c4df-ab74-4824-b98e-799ebbbde9f3/bf14e3bb-8e4b-3ca8-a1a6-4375fcf1aefa.roa
Signing time:             Mon 04 Jan 2021 05:00:00 +0000
ROA not before:           Mon 04 Jan 2021 05:00:00 +0000
ROA not after:            Tue 11 Apr 2023 04:00:00 +0000
asID:                     394102
IP address blocks:        147.160.243.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:86:20:af:dd:b5:e1:c2:ab:a6:75:bd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5169c4df-ab74-4824-b98e-799ebbbde9f3
        Validity
            Not Before: Jan  4 05:00:00 2021 GMT
            Not After : Apr 11 04:00:00 2023 GMT
        Subject: CN=648723b3-9a4f-4bf8-b29b-f2ddd0daecf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:65:d8:44:7e:7b:6c:2d:38:58:5a:c1:37:e5:
                    a7:ec:1a:4b:b0:c5:cb:49:b3:a4:47:64:6c:85:42:
                    ad:38:7c:36:3f:90:86:a0:19:57:2e:c4:35:8f:c0:
                    cc:d1:86:be:d7:f5:e2:c9:8b:9b:ef:65:59:da:a1:
                    b9:6e:9b:af:d3:32:2a:3b:b7:b4:6e:d2:3e:91:f9:
                    47:49:58:d4:d5:78:85:95:16:5f:c7:5f:b2:1c:ec:
                    a5:11:77:98:7e:51:6c:f8:83:a4:3e:d0:0b:96:55:
                    a8:5a:1a:f1:58:5e:f3:fd:67:71:6c:15:10:77:b2:
                    b4:62:5c:9e:a6:1f:06:a2:c6:ba:bd:c0:6b:2c:f1:
                    3c:b5:58:c3:27:a1:28:90:f8:40:26:11:cb:41:a3:
                    22:de:3a:f8:da:3d:33:0c:99:1f:1e:af:29:d5:65:
                    3c:9e:47:46:90:db:c9:f0:fa:3c:e7:d8:af:4f:ff:
                    4c:a3:41:48:f3:1f:c5:1b:a0:a2:58:41:a7:f1:46:
                    5d:4e:4b:6b:5c:79:2d:52:35:5d:fb:a5:97:2a:fe:
                    77:fc:f1:98:be:70:37:ea:bf:a4:4e:ba:ab:c0:30:
                    7e:3e:06:ce:cc:d6:b2:46:76:b5:49:b2:21:8b:d7:
                    e2:8c:59:c6:3d:86:5d:98:02:b9:63:56:90:ed:da:
                    64:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:33:DB:2D:12:0E:50:6C:CE:D6:DF:1D:2A:69:81:AA:41:C0:3A:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5169c4df-ab74-4824-b98e-799ebbbde9f3/bf14e3bb-8e4b-3ca8-a1a6-4375fcf1aefa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5169c4df-ab74-4824-b98e-799ebbbde9f3/5169c4df-ab74-4824-b98e-799ebbbde9f3.crl

            X509v3 Authority Key Identifier:
                keyid:29:D2:8C:54:EB:65:0D:67:B6:A4:0A:D6:55:12:75:E9:58:9D:FF:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5169c4df-ab74-4824-b98e-799ebbbde9f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.160.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:1f:8c:3c:5a:64:b7:8e:c5:9e:d9:e7:57:50:cb:b3:5a:cd:
         31:b6:3a:f1:9a:6b:9d:d3:e4:d5:88:0a:0f:28:f2:98:5f:09:
         31:a4:04:52:51:03:d8:ce:0a:b6:c3:2e:0f:23:8b:c0:76:38:
         78:62:4b:69:17:1d:c6:76:0d:7e:c3:c2:ab:82:d8:f2:b6:7f:
         c5:49:34:1b:e6:e6:17:1a:90:a6:30:fc:54:20:d2:96:4c:41:
         d8:2f:93:45:cb:a5:7b:40:1b:3c:2a:fb:a8:3c:84:c3:4f:57:
         e5:f9:81:47:b6:7b:89:f6:a2:54:6a:9f:31:81:ba:65:e6:4e:
         65:7a:21:4f:e2:a4:9f:71:67:af:07:91:e5:5b:2c:55:0d:24:
         3c:8a:bf:83:bc:c3:3c:90:10:5a:b1:b8:05:4f:e9:b4:ef:f4:
         5c:6a:a0:d6:42:b6:6b:73:7c:2f:38:55:26:da:34:c7:23:6b:
         d3:29:ed:c3:02:9d:2c:08:21:2e:2e:82:ac:50:1f:1f:a6:f4:
         b8:c9:a3:ac:7f:cc:8d:4c:ad:25:89:f7:29:e8:c2:b0:67:51:
         99:6e:1d:48:6d:fe:48:37:93:18:49:eb:1e:31:9a:e6:2e:e7:
         05:dc:d9:f9:46:3b:df:22:9a:38:62:b0:6f:5d:2b:25:c3:3b:
         37:2d:30:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----