Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b54df042-8c4f-4c87-a636-3e7b23156997/c202eb0d-114b-3bc9-9a88-7ede21567c29.roa
File:                     c202eb0d-114b-3bc9-9a88-7ede21567c29.roa (raw, json)
Hash identifier:          Zt1UayDhdFvy0CVQdqjO02Y8SNvu6ib2uMDqdTjV+pM=
Subject key identifier:   0E:AB:B4:97:D4:9F:A1:FD:9D:FB:A4:C0:8C:CE:F6:EE:8E:1A:42:19
Certificate issuer:       /CN=b54df042-8c4f-4c87-a636-3e7b23156997
Certificate serial:       010D0C9F43285839C2F5C41E35C3A7F46D130400
Authority key identifier: 9B:B5:95:25:6F:B8:82:5A:14:D2:93:F1:E3:DF:32:4E:2B:97:BA:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b54df042-8c4f-4c87-a636-3e7b23156997.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b54df042-8c4f-4c87-a636-3e7b23156997/c202eb0d-114b-3bc9-9a88-7ede21567c29.roa
Signing time:             Mon 26 Apr 2021 04:00:00 +0000
ROA not before:           Mon 26 Apr 2021 04:00:00 +0000
ROA not after:            Thu 03 Aug 2023 04:00:00 +0000
asID:                     399517
IP address blocks:        23.178.240.0/24 maxlen: 24
                          2602:fc89::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:c2:f5:c4:1e:35:c3:a7:f4:6d:13:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b54df042-8c4f-4c87-a636-3e7b23156997
        Validity
            Not Before: Apr 26 04:00:00 2021 GMT
            Not After : Aug  3 04:00:00 2023 GMT
        Subject: CN=7d71cb0e-afbe-481d-b10f-d268fbc6166c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:85:4e:39:12:10:df:e0:2f:46:9c:cf:c6:0b:
                    bd:cf:8c:30:78:46:87:f7:27:db:da:f6:93:ae:9a:
                    0f:7b:8b:21:da:62:30:44:a5:be:76:c1:01:2a:bb:
                    2b:7f:c2:48:aa:19:be:6b:1c:ba:3b:b8:2a:db:34:
                    43:34:d3:96:b7:02:cf:43:83:51:1d:21:29:3f:ad:
                    67:03:8f:dc:1f:8b:60:99:28:f7:8e:3f:1a:14:be:
                    76:71:b2:e6:63:5a:63:ea:1c:7b:6d:17:e0:bf:39:
                    e3:12:13:53:2e:b0:51:80:85:06:c2:59:18:12:d4:
                    ed:bc:82:84:f2:6a:97:08:84:b4:e1:39:4f:65:1e:
                    c9:aa:be:46:f6:45:1a:11:c6:b0:02:28:5f:93:ee:
                    f5:fa:7d:94:08:d7:ba:38:a5:72:45:be:51:29:9f:
                    ef:c8:32:1a:e8:7c:b0:ca:9f:44:c9:31:0b:b4:34:
                    ed:4e:b2:81:a0:a1:b2:d0:ec:27:08:81:19:30:81:
                    1c:a1:c7:15:e6:28:cb:d4:e8:e7:a0:1e:58:0d:f5:
                    53:a8:bd:92:1a:36:98:76:1d:e7:ff:57:5b:e3:5e:
                    b9:cc:0b:14:79:eb:3e:76:47:22:e0:22:39:1b:07:
                    98:cd:d4:c9:09:e0:b1:5b:7d:32:fd:d9:f5:c9:91:
                    b9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:AB:B4:97:D4:9F:A1:FD:9D:FB:A4:C0:8C:CE:F6:EE:8E:1A:42:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b54df042-8c4f-4c87-a636-3e7b23156997/c202eb0d-114b-3bc9-9a88-7ede21567c29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b54df042-8c4f-4c87-a636-3e7b23156997/b54df042-8c4f-4c87-a636-3e7b23156997.crl

            X509v3 Authority Key Identifier:
                keyid:9B:B5:95:25:6F:B8:82:5A:14:D2:93:F1:E3:DF:32:4E:2B:97:BA:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b54df042-8c4f-4c87-a636-3e7b23156997.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.178.240.0/24
                IPv6:
                  2602:fc89::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:89:56:89:49:4e:a9:65:d6:93:85:2b:92:25:da:cf:28:61:
         e2:ac:c5:71:07:d9:f5:69:07:c5:90:32:75:6b:82:55:c2:29:
         37:0a:ff:c1:99:cf:3a:06:8d:1b:a7:42:91:fb:79:c9:78:62:
         eb:5f:4e:5c:31:d7:f3:47:53:3d:57:43:30:48:98:61:fe:3a:
         b8:30:f1:06:88:65:84:83:2b:71:23:0b:7d:68:3a:f6:45:ac:
         cf:95:68:51:b2:16:60:d8:88:7a:93:08:4e:2a:c5:b4:67:83:
         73:00:8f:39:93:ce:94:a1:49:e2:2c:77:01:f5:03:9c:f8:ea:
         16:71:25:31:41:d7:ce:5f:73:c5:93:bd:8e:b4:62:e9:6a:a4:
         c2:10:cb:75:b9:b2:ae:da:63:75:ec:b3:ab:2b:a1:c8:31:f2:
         a3:19:70:97:72:b1:e3:b8:39:49:f3:a3:7f:7b:70:95:c6:13:
         f2:72:f5:50:c1:c8:61:41:76:a9:a9:e5:ca:fd:43:54:67:63:
         19:dc:58:5e:71:a8:97:c3:e6:47:16:93:58:26:55:55:af:50:
         c0:fa:03:0d:f3:78:51:04:37:ef:44:59:f8:da:d9:92:10:72:
         7a:91:3f:35:75:ec:74:05:68:4e:7c:c6:ba:51:8d:10:fe:54:
         30:eb:da:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----