Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20d3640d-5524-4670-b91f-54721072e0fd/09f10a88-4484-39fe-a34c-98c18f9843de.roa
File:                     09f10a88-4484-39fe-a34c-98c18f9843de.roa (raw, json)
Hash identifier:          BcXPjXDms73idZa2ebrGgCU2FYB2iINk5f6L1S52Yqk=
Subject key identifier:   48:1F:6F:3F:2A:6D:21:33:8F:3F:42:E1:27:F8:EC:ED:FE:55:2F:BB
Certificate issuer:       /CN=20d3640d-5524-4670-b91f-54721072e0fd
Certificate serial:       010D0C9F4328583AB9A131BB751CBC7F88FA3400
Authority key identifier: C6:29:82:26:52:04:78:B6:4B:C9:06:E6:86:6B:C0:55:65:2A:9E:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20d3640d-5524-4670-b91f-54721072e0fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20d3640d-5524-4670-b91f-54721072e0fd/09f10a88-4484-39fe-a34c-98c18f9843de.roa
Signing time:             Tue 27 Jul 2021 04:00:00 +0000
ROA not before:           Tue 27 Jul 2021 04:00:00 +0000
ROA not after:            Tue 01 Jul 2031 04:00:00 +0000
asID:                     1234
IP address blocks:        141.193.71.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:b9:a1:31:bb:75:1c:bc:7f:88:fa:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20d3640d-5524-4670-b91f-54721072e0fd
        Validity
            Not Before: Jul 27 04:00:00 2021 GMT
            Not After : Jul  1 04:00:00 2031 GMT
        Subject: CN=bff2d0c7-a507-44b4-a9b9-28f0a751ae90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d7:92:c1:08:08:a6:3b:49:6a:d7:09:45:bf:
                    17:7e:4a:91:46:56:d2:24:47:c7:45:ae:fb:60:6e:
                    5c:65:34:25:73:39:04:29:50:50:25:03:f5:57:fb:
                    e5:a7:3c:32:18:c7:93:cf:79:c4:e2:62:68:df:09:
                    f6:dc:eb:9a:02:3e:fc:d3:89:a5:7a:d5:28:5d:0d:
                    7c:4a:f6:4c:0e:0f:87:06:bc:9c:96:44:83:b1:bd:
                    15:13:46:e4:90:05:a8:0e:5f:09:78:ed:f3:7e:c3:
                    4b:34:55:1d:19:cb:5f:27:87:4d:c9:b2:e9:dd:31:
                    35:a7:e6:72:d2:7f:cc:a8:ad:92:b0:98:6a:38:9e:
                    74:c0:0d:11:88:8c:3f:a9:aa:9c:96:cf:45:fc:15:
                    bd:4c:a5:a5:6e:ce:e2:c1:ef:a3:a0:a0:f6:d3:88:
                    5c:40:e5:12:20:39:83:cf:33:aa:52:84:af:fc:e4:
                    df:0e:36:4d:c6:f0:4e:a1:0d:a8:91:17:c7:87:d1:
                    5d:f0:ec:7e:b0:a6:e5:8a:f3:2c:83:dd:a4:3f:30:
                    6a:b6:e6:7e:a0:ae:8b:1e:74:78:f1:50:86:ab:5e:
                    db:d1:d5:d6:82:6e:50:6f:d3:76:f3:98:68:93:0b:
                    2b:94:a8:4a:d2:06:7d:ae:0a:61:14:11:4b:42:e9:
                    4a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1F:6F:3F:2A:6D:21:33:8F:3F:42:E1:27:F8:EC:ED:FE:55:2F:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20d3640d-5524-4670-b91f-54721072e0fd/09f10a88-4484-39fe-a34c-98c18f9843de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20d3640d-5524-4670-b91f-54721072e0fd/20d3640d-5524-4670-b91f-54721072e0fd.crl

            X509v3 Authority Key Identifier:
                keyid:C6:29:82:26:52:04:78:B6:4B:C9:06:E6:86:6B:C0:55:65:2A:9E:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20d3640d-5524-4670-b91f-54721072e0fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:31:ca:8e:58:1a:03:63:54:e7:5a:77:bf:ee:aa:de:79:a1:
         22:de:4a:09:06:44:8f:b0:48:d3:b7:98:45:68:96:c0:b9:2c:
         33:c8:b2:97:fc:ee:33:83:41:83:b3:a3:a9:70:b8:bc:55:47:
         22:42:e1:6a:96:bc:d6:2c:b5:07:9f:70:7d:a6:05:b6:f0:b6:
         e2:c9:0f:16:4e:53:96:5d:61:3f:67:af:69:57:f2:36:1b:95:
         c0:04:ad:ee:cc:29:b7:22:ec:3f:93:62:a6:bb:86:ed:45:b0:
         11:f1:31:3d:0b:e1:91:3b:94:8d:b4:a8:64:f3:c3:21:51:2c:
         41:3c:d2:81:33:89:8a:ec:fb:ec:5f:05:20:bd:56:f7:23:0c:
         bd:6c:98:1e:cd:69:a1:86:43:53:4a:1c:3d:6b:da:22:91:f7:
         a5:a5:2e:89:26:88:d7:76:5b:46:a0:39:d9:a6:35:92:8a:ae:
         62:0c:e4:46:e4:70:72:9f:a8:03:25:f5:f6:4c:9b:0c:3c:88:
         37:62:71:cc:d3:a1:4b:22:46:a4:23:e3:3e:2a:26:3f:0a:4c:
         73:f9:0f:15:26:13:59:ea:94:f1:4a:eb:30:f7:ef:7c:86:ff:
         0a:86:d5:5e:ce:0d:c6:e9:2f:2f:41:6b:83:40:e0:0f:e4:2b:
         f2:0f:5b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----