Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5169c4df-ab74-4824-b98e-799ebbbde9f3/fb0bdf02-e984-3a97-b3c7-ca118a9acda3.roa
File:                     fb0bdf02-e984-3a97-b3c7-ca118a9acda3.roa (raw, json)
Hash identifier:          WZBuodCr4frceYxIDLZqffGYWR7cw/3rBOOdyBDAKQ4=
Subject key identifier:   11:9E:89:1C:62:B6:BA:31:72:29:EC:B4:30:20:6E:0B:8C:BC:4D:29
Certificate issuer:       /CN=5169c4df-ab74-4824-b98e-799ebbbde9f3
Certificate serial:       010D0C9F4328583881C17C295D287C0100147300
Authority key identifier: 29:D2:8C:54:EB:65:0D:67:B6:A4:0A:D6:55:12:75:E9:58:9D:FF:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5169c4df-ab74-4824-b98e-799ebbbde9f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5169c4df-ab74-4824-b98e-799ebbbde9f3/fb0bdf02-e984-3a97-b3c7-ca118a9acda3.roa
Signing time:             Mon 04 Jan 2021 05:00:00 +0000
ROA not before:           Mon 04 Jan 2021 05:00:00 +0000
ROA not after:            Sun 09 Apr 2023 04:00:00 +0000
asID:                     394102
IP address blocks:        158.51.114.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:81:c1:7c:29:5d:28:7c:01:00:14:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5169c4df-ab74-4824-b98e-799ebbbde9f3
        Validity
            Not Before: Jan  4 05:00:00 2021 GMT
            Not After : Apr  9 04:00:00 2023 GMT
        Subject: CN=c56702d1-7541-41cd-90dc-1cf0650b3ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d8:b1:b9:32:01:23:01:3a:bd:0e:b7:7e:f0:
                    b6:0b:c9:8e:d0:ec:ae:fd:4a:ce:72:1e:90:ee:aa:
                    75:db:59:31:5f:52:07:7b:4b:7d:5e:22:9f:07:81:
                    55:8a:ec:ba:2c:42:01:6e:fc:58:5d:31:2c:d3:25:
                    4d:10:7c:c9:64:56:e8:25:44:2e:71:1c:8f:22:22:
                    48:91:f4:cb:36:fd:a5:90:05:b3:c8:c9:98:5a:f6:
                    e2:a7:c4:d0:27:67:65:9d:17:55:d4:52:fd:6d:23:
                    d4:d7:20:2b:be:26:08:8b:68:8a:87:a1:60:3d:8a:
                    bf:15:ef:a3:43:df:12:c5:09:54:98:a9:5a:17:4d:
                    02:7f:a6:1a:aa:4d:c9:4c:2c:56:11:c7:88:d7:10:
                    52:31:9f:f1:7f:a5:ce:d8:e5:85:17:d7:0a:da:bd:
                    3e:92:07:20:58:2a:ce:3f:a5:13:67:a6:a4:81:75:
                    5f:be:15:27:af:1d:f1:2c:fb:4c:6a:df:4f:42:57:
                    de:a6:a7:fc:bd:d3:9e:2c:cb:66:3d:48:e8:46:fc:
                    ab:9d:ad:df:a9:06:d2:eb:8c:5f:b8:48:93:0c:db:
                    38:de:14:88:7f:ce:3d:29:7f:2f:5f:b4:09:54:ee:
                    25:74:4c:23:1a:17:f8:87:58:21:f7:01:00:b0:fe:
                    c2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:9E:89:1C:62:B6:BA:31:72:29:EC:B4:30:20:6E:0B:8C:BC:4D:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5169c4df-ab74-4824-b98e-799ebbbde9f3/fb0bdf02-e984-3a97-b3c7-ca118a9acda3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5169c4df-ab74-4824-b98e-799ebbbde9f3/5169c4df-ab74-4824-b98e-799ebbbde9f3.crl

            X509v3 Authority Key Identifier:
                keyid:29:D2:8C:54:EB:65:0D:67:B6:A4:0A:D6:55:12:75:E9:58:9D:FF:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5169c4df-ab74-4824-b98e-799ebbbde9f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:a5:f3:fb:69:16:ba:b2:45:84:10:41:2c:60:b2:37:76:00:
         d5:88:ad:f8:44:60:8c:4a:0e:e2:19:26:a8:5e:dc:ca:ac:9b:
         bf:44:73:e5:28:0e:4b:07:3c:37:b0:63:52:f4:5c:e2:6b:b6:
         6f:25:33:05:3a:96:24:1a:30:ce:e7:9f:76:7d:75:9e:59:e0:
         0c:66:87:ce:c7:b4:a4:7e:3e:4f:f6:12:98:cf:04:ce:6c:e8:
         cf:1c:4e:e0:25:6b:ae:d8:5d:a0:34:e8:dc:32:5b:4d:18:cf:
         47:76:55:18:8f:e7:ed:35:1c:da:40:32:8a:da:d6:3e:cf:dd:
         ad:36:b9:89:e7:21:11:82:04:6b:bd:58:b3:09:16:7b:8c:6f:
         7f:8d:37:bc:dc:e0:10:c1:d1:57:e8:7e:3e:f7:72:48:f9:a0:
         98:26:f6:5b:77:ac:4a:c9:20:fc:9f:b7:c1:1e:d7:fb:eb:6d:
         e5:b3:28:de:94:04:cb:8c:e8:d7:8d:35:27:d7:f3:ee:d0:f7:
         dd:5d:da:ad:4c:c5:2e:24:61:9c:3a:1f:b6:af:4d:42:04:d0:
         0a:39:ad:f9:d2:0e:c4:4e:c8:23:f5:5c:f6:de:db:5c:ea:2e:
         db:c2:0e:07:b6:17:de:0f:a3:29:c0:5a:65:57:32:37:37:4b:
         84:2f:12:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----