Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6533ffb7-119e-44e8-bcb9-54961e2eb1b8/bf4c4a3d-a430-3c4f-ad61-30b869ad0a6c.roa
File:                     bf4c4a3d-a430-3c4f-ad61-30b869ad0a6c.roa (raw, json)
Hash identifier:          lbXpeWzhHmUGIcnw/516o0KsHe5S+6PEEkOfbh8oUgM=
Subject key identifier:   D8:43:C3:95:C3:B0:DC:E5:4E:46:90:B7:18:D8:96:5C:BA:2C:75:80
Certificate issuer:       /CN=6533ffb7-119e-44e8-bcb9-54961e2eb1b8
Certificate serial:       010D0C9F4328583A2E9ADA7A2ED80B1DB4FC9340
Authority key identifier: C6:21:7A:89:F1:30:14:43:15:1C:31:C1:49:CD:05:5F:F6:38:A3:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6533ffb7-119e-44e8-bcb9-54961e2eb1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6533ffb7-119e-44e8-bcb9-54961e2eb1b8/bf4c4a3d-a430-3c4f-ad61-30b869ad0a6c.roa
Signing time:             Fri 04 Jun 2021 04:00:00 +0000
ROA not before:           Fri 04 Jun 2021 04:00:00 +0000
ROA not after:            Wed 04 Jun 2031 04:00:00 +0000
asID:                     54238
IP address blocks:        206.124.162.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:2e:9a:da:7a:2e:d8:0b:1d:b4:fc:93:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6533ffb7-119e-44e8-bcb9-54961e2eb1b8
        Validity
            Not Before: Jun  4 04:00:00 2021 GMT
            Not After : Jun  4 04:00:00 2031 GMT
        Subject: CN=ebccf177-5832-4836-807e-56d9ce2159a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c1:ad:8d:e7:17:e1:02:05:17:ae:24:2e:d8:
                    25:6f:88:fc:e7:b3:df:e8:35:92:2a:8e:3b:b6:b0:
                    c7:b6:a8:75:fa:75:6f:15:0d:9b:79:2a:8f:6e:2c:
                    38:6b:c6:44:2e:b0:21:06:25:9a:79:2d:be:05:da:
                    97:b0:50:53:31:88:03:de:3e:ff:9e:1e:83:87:3a:
                    c5:a5:b7:14:27:1a:5f:e8:77:f9:af:62:7c:bd:3a:
                    54:6b:83:71:70:76:80:dd:de:72:2a:56:a5:fc:65:
                    94:3e:d1:74:c0:78:61:a4:f0:80:d8:5b:1d:18:41:
                    5a:43:96:f2:13:57:16:19:b1:85:63:96:4d:2f:fc:
                    de:65:74:b6:2a:52:44:bf:53:66:4e:63:03:fa:c6:
                    ce:90:25:ba:3e:8d:f2:ee:82:30:80:a0:9a:04:c8:
                    46:74:7d:81:bb:35:79:48:84:55:74:a7:7f:1f:7f:
                    6c:51:e6:cf:bb:e1:ba:a6:62:f9:19:f6:a7:17:d5:
                    d2:71:f4:8d:1a:84:7a:bf:27:cb:86:0e:e8:19:5e:
                    b1:6a:1c:52:41:72:e6:85:00:4f:b7:7f:3b:a7:fc:
                    b0:70:1c:69:fd:ea:a3:31:be:8c:af:f5:b3:68:47:
                    d8:9b:17:63:86:a0:2f:bc:4d:84:78:63:f7:be:61:
                    f6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:43:C3:95:C3:B0:DC:E5:4E:46:90:B7:18:D8:96:5C:BA:2C:75:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6533ffb7-119e-44e8-bcb9-54961e2eb1b8/bf4c4a3d-a430-3c4f-ad61-30b869ad0a6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6533ffb7-119e-44e8-bcb9-54961e2eb1b8/6533ffb7-119e-44e8-bcb9-54961e2eb1b8.crl

            X509v3 Authority Key Identifier:
                keyid:C6:21:7A:89:F1:30:14:43:15:1C:31:C1:49:CD:05:5F:F6:38:A3:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6533ffb7-119e-44e8-bcb9-54961e2eb1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.124.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:fb:30:f7:49:72:ae:94:99:ce:a4:9d:1e:d1:d2:d9:5a:3e:
         5e:b7:10:64:11:92:13:01:d6:94:b0:d7:1f:7c:42:45:0f:16:
         f0:5f:7b:d1:e4:3b:4a:54:71:9e:89:19:38:64:57:b9:28:44:
         1f:2a:3c:59:06:27:cb:ba:7c:af:0c:b2:ab:cd:2e:86:ec:aa:
         f0:56:79:a7:d1:31:a5:bd:c2:58:bc:69:09:96:03:0c:05:45:
         1c:48:d5:bc:d6:30:de:26:fc:49:8d:1a:90:e8:61:ba:90:40:
         b8:31:27:e6:fa:85:6e:55:a9:74:4d:16:d3:0b:e9:74:ba:4b:
         8d:b9:f2:89:04:38:4b:b1:6b:ed:25:0a:0f:7f:c4:c3:04:96:
         a0:4a:7c:60:a1:2a:f1:57:7c:ed:c8:62:01:0b:f7:04:b8:ec:
         0c:40:02:51:6f:89:66:57:7e:53:37:9e:ce:90:b3:23:3d:15:
         2a:bf:69:96:b4:e3:b4:34:8a:3a:f9:5a:8e:3d:5c:b6:7a:7e:
         d1:68:62:5c:85:29:e8:ba:d0:fb:19:d5:c5:e8:c0:ea:b3:cd:
         c2:1d:55:71:f0:8f:4f:5b:1f:0f:74:1a:5a:d5:cb:3c:73:be:
         8b:5b:ce:05:e2:eb:89:5c:c3:68:b2:c3:47:0e:2b:de:7a:08:
         49:c2:a1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----