Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9dc4cde-d1b1-4729-8474-a74b1a098f8a/d8079455-5767-36fb-bf96-bc68e30cddba.roa
File:                     d8079455-5767-36fb-bf96-bc68e30cddba.roa (raw, json)
Hash identifier:          aCjpB9Grt+1VIjjGyom8Y/Tw+AXlofP+RaSKzx4Pq4o=
Subject key identifier:   6A:57:B6:52:B8:25:5E:54:E0:F8:93:44:AA:03:84:71:4B:B5:EC:49
Certificate issuer:       /CN=f9dc4cde-d1b1-4729-8474-a74b1a098f8a
Certificate serial:       010D0C9F432858395CE6B7B19DEB07F2955CC740
Authority key identifier: E8:88:8A:77:C7:C1:34:DF:00:9B:0C:76:8F:5F:AE:24:A9:0D:60:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9dc4cde-d1b1-4729-8474-a74b1a098f8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9dc4cde-d1b1-4729-8474-a74b1a098f8a/d8079455-5767-36fb-bf96-bc68e30cddba.roa
Signing time:             Wed 24 Mar 2021 04:00:00 +0000
ROA not before:           Wed 24 Mar 2021 04:00:00 +0000
ROA not after:            Thu 27 Jun 2030 04:00:00 +0000
asID:                     6643
IP address blocks:        162.250.60.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:5c:e6:b7:b1:9d:eb:07:f2:95:5c:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9dc4cde-d1b1-4729-8474-a74b1a098f8a
        Validity
            Not Before: Mar 24 04:00:00 2021 GMT
            Not After : Jun 27 04:00:00 2030 GMT
        Subject: CN=68158408-8428-4574-8852-6a3477d5d9a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9c:6a:79:6a:73:cf:8e:2a:7a:39:99:f6:43:
                    3a:ef:06:d4:17:4a:8f:b1:d2:ea:31:2f:6b:4a:0c:
                    9a:e6:72:16:61:7c:70:7c:4b:99:15:25:1d:ed:62:
                    a4:ae:08:8a:9f:75:9b:5c:4f:a2:e8:19:38:14:d2:
                    28:71:34:20:06:cc:5e:6e:92:56:cf:b2:ed:e0:b7:
                    24:1c:22:6c:05:43:02:55:1b:28:65:96:49:4e:32:
                    1e:56:5a:86:92:c1:f9:fe:02:16:c9:5e:be:8d:1b:
                    c0:d8:74:de:c2:77:c6:29:1d:61:fd:fa:10:ae:5c:
                    47:04:f9:88:aa:51:90:d9:ce:05:8b:67:60:6f:b8:
                    ed:5b:00:29:a5:b9:34:28:f7:01:8b:70:5e:cb:62:
                    3b:73:0a:7c:a7:05:97:19:ef:c8:f5:fe:8b:f2:0f:
                    5e:10:f4:a0:5f:ee:ef:86:26:b1:21:37:5e:24:ec:
                    c8:40:f8:73:1f:01:35:60:02:4c:2f:4d:ad:5e:d0:
                    89:12:f2:f4:6c:d6:55:98:24:d4:a1:4d:97:73:9b:
                    e5:d3:5f:e5:0e:a6:ab:04:01:d6:c5:ac:e1:57:30:
                    59:c5:4c:e9:f4:1d:cf:3e:cf:7a:06:d3:c5:69:36:
                    1d:c0:71:1b:6c:90:be:d0:72:70:84:59:6d:ab:90:
                    a7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:57:B6:52:B8:25:5E:54:E0:F8:93:44:AA:03:84:71:4B:B5:EC:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9dc4cde-d1b1-4729-8474-a74b1a098f8a/d8079455-5767-36fb-bf96-bc68e30cddba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9dc4cde-d1b1-4729-8474-a74b1a098f8a/f9dc4cde-d1b1-4729-8474-a74b1a098f8a.crl

            X509v3 Authority Key Identifier:
                keyid:E8:88:8A:77:C7:C1:34:DF:00:9B:0C:76:8F:5F:AE:24:A9:0D:60:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9dc4cde-d1b1-4729-8474-a74b1a098f8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:7d:57:5b:58:37:e9:72:e2:13:3a:35:c3:90:df:8e:16:1e:
         74:fe:77:ba:c8:3a:a1:1c:5c:f5:ef:32:1e:9f:e4:da:b3:99:
         70:51:3d:35:ad:e3:54:37:7f:e4:e3:f7:75:45:0b:59:fd:9d:
         a8:87:28:b9:4f:fb:4d:23:34:b2:b2:4f:08:0f:0e:ea:b0:43:
         a4:56:98:66:13:38:f1:23:4f:54:17:be:57:c3:19:1f:28:97:
         5a:c9:cb:bc:ef:cc:a1:b9:85:98:aa:ee:fb:ff:33:9b:b9:4b:
         fc:7f:0a:5a:7c:68:5a:b7:9f:bc:a6:95:59:f1:26:04:63:db:
         af:6e:6e:3e:7d:18:ed:0b:f2:51:34:1a:13:06:41:78:f5:62:
         da:ea:06:bb:f4:72:8d:50:f8:45:09:69:62:96:72:ed:b5:c4:
         ec:8d:dd:e1:87:f2:04:77:bc:48:ea:e4:ab:6a:28:3a:ab:74:
         0b:ac:43:ea:76:4e:b8:5b:90:33:3e:af:8d:8a:ac:f1:a6:98:
         08:8d:19:25:04:74:c5:8a:1f:6d:a7:0b:30:88:77:ae:26:98:
         23:d8:f4:af:62:e0:f2:10:e7:76:c5:ff:8d:78:9e:00:61:03:
         40:d6:ce:1f:ea:2f:26:85:f1:e0:5b:54:48:b5:02:7a:6f:78:
         9d:1d:aa:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----