Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c5525e23-f1ca-401c-b4da-8ce197d10fc8/9c1479ff-71dd-3605-8c4c-fa3b8c28b60e.roa
File:                     9c1479ff-71dd-3605-8c4c-fa3b8c28b60e.roa (raw, json)
Hash identifier:          sSqNXKB4EPlJNnDe+rsO+29vU28puZR9WFr6Dpr293Q=
Subject key identifier:   73:9E:38:98:71:56:AA:3C:05:F2:0E:57:3A:AB:52:C0:AA:B7:9D:02
Certificate issuer:       /CN=c5525e23-f1ca-401c-b4da-8ce197d10fc8
Certificate serial:       010D0C9F4328583C8DA2F96A61514EB37ECF3B80
Authority key identifier: A5:AC:8C:60:36:92:9B:7B:7B:3A:03:62:5B:A7:0C:DC:F1:AB:3E:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c5525e23-f1ca-401c-b4da-8ce197d10fc8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c5525e23-f1ca-401c-b4da-8ce197d10fc8/9c1479ff-71dd-3605-8c4c-fa3b8c28b60e.roa
Signing time:             Wed 04 Aug 2021 04:00:00 +0000
ROA not before:           Wed 04 Aug 2021 04:00:00 +0000
ROA not after:            Sat 14 Apr 2029 04:00:00 +0000
asID:                     3257
IP address blocks:        63.133.212.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:8d:a2:f9:6a:61:51:4e:b3:7e:cf:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5525e23-f1ca-401c-b4da-8ce197d10fc8
        Validity
            Not Before: Aug  4 04:00:00 2021 GMT
            Not After : Apr 14 04:00:00 2029 GMT
        Subject: CN=e9e82fa5-c98b-46fe-b3e8-641e32edc4bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2f:f2:ea:70:ed:cd:3e:ad:c8:f3:0a:ad:4c:
                    ed:e1:fe:76:f6:92:39:da:66:5f:4a:17:7c:02:f2:
                    15:e0:85:31:0b:8e:24:b0:01:da:18:15:b3:07:03:
                    2f:93:0e:0f:95:37:3e:52:a6:36:55:5f:bb:d0:c1:
                    71:53:2e:41:e6:2c:bf:bd:67:6b:98:9e:46:c0:65:
                    02:af:8e:76:2d:bb:e3:a3:2a:70:78:37:d9:c9:70:
                    15:58:15:75:2f:9e:b1:8a:93:8a:8c:a0:f0:99:0b:
                    29:1e:33:07:67:08:9a:8f:de:31:c1:5a:91:ab:06:
                    60:44:fc:fd:46:1d:6d:a8:66:47:2d:b3:ff:a0:ad:
                    95:80:a1:88:7d:d0:90:7b:b2:ac:3d:55:b7:94:04:
                    a3:58:94:b8:2c:a8:ec:7f:07:3b:6c:0a:72:c3:09:
                    5d:d4:a0:d6:b5:51:68:59:2a:4e:7a:e6:65:98:77:
                    09:80:7b:51:af:51:a1:4d:e3:ed:4a:1e:6c:f6:c4:
                    68:b1:2c:e6:9b:3e:54:07:7a:c3:11:ca:92:82:0b:
                    11:74:35:e2:49:ca:c5:cb:87:c3:b7:c9:6a:75:7d:
                    52:fd:fa:77:9c:dc:9e:bf:74:4c:a8:f4:2e:8f:03:
                    1b:4d:43:92:a0:fe:81:be:44:1f:82:cc:21:73:03:
                    e5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:9E:38:98:71:56:AA:3C:05:F2:0E:57:3A:AB:52:C0:AA:B7:9D:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c5525e23-f1ca-401c-b4da-8ce197d10fc8/9c1479ff-71dd-3605-8c4c-fa3b8c28b60e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c5525e23-f1ca-401c-b4da-8ce197d10fc8/c5525e23-f1ca-401c-b4da-8ce197d10fc8.crl

            X509v3 Authority Key Identifier:
                keyid:A5:AC:8C:60:36:92:9B:7B:7B:3A:03:62:5B:A7:0C:DC:F1:AB:3E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c5525e23-f1ca-401c-b4da-8ce197d10fc8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.133.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:10:64:a6:5b:f8:97:43:5b:14:14:84:70:50:f3:07:32:44:
         c9:4d:40:ea:28:fa:9a:fd:27:9a:fa:b6:33:51:9e:c3:37:95:
         b7:70:de:0f:eb:6c:67:25:24:2b:b3:3e:31:a1:a3:b1:c3:03:
         e8:a9:e8:0a:96:1a:f1:4f:02:93:83:fd:be:f2:ae:f8:af:6d:
         a3:6d:ff:0f:0e:29:94:d1:b8:e1:80:7e:9e:42:6b:1f:92:a2:
         88:c8:b8:2b:dc:5f:22:7c:2c:60:ba:23:d4:71:38:59:8d:58:
         b7:51:51:67:10:90:66:07:7b:95:7b:15:d2:3d:d2:29:22:a7:
         5b:b0:fc:28:4f:8c:68:a8:8b:b2:1d:42:a4:b9:36:4f:79:15:
         76:fb:c0:07:a5:e2:01:2f:ea:af:23:9e:f8:91:9f:c8:43:fb:
         bc:a5:a6:75:be:3e:6c:34:6f:6b:79:23:fc:b2:d5:11:00:45:
         24:6e:b1:78:aa:ab:c7:23:43:48:06:77:ea:a9:5a:c5:a2:cb:
         96:5b:6b:5f:85:0a:aa:f5:90:f5:6e:df:67:fb:07:1b:a7:cd:
         05:45:3f:96:25:77:49:2e:4b:c5:07:dc:4b:92:ff:d3:e3:0b:
         a6:de:c5:aa:4b:43:04:44:3a:2e:91:5e:2f:1d:10:86:fb:fe:
         5c:a6:a7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----