Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57d2127e-1193-4665-90cc-e23ccd6ab321/92a3fe60-674d-3d2e-8fa0-1c08b2dba6c5.roa
File:                     92a3fe60-674d-3d2e-8fa0-1c08b2dba6c5.roa (raw, json)
Hash identifier:          dkDcVHjug2QinV5gk1R+J+RdQD0m/CYBparECHO1xPc=
Subject key identifier:   B2:B1:73:1A:6F:F2:0D:E4:7C:09:5A:0D:73:4B:59:77:B4:8D:79:D3
Certificate issuer:       /CN=57d2127e-1193-4665-90cc-e23ccd6ab321
Certificate serial:       010D0C9F43285841ED929E3F3BB1265463247740
Authority key identifier: B9:04:7E:2A:F5:CC:22:F2:64:98:A6:90:38:17:75:46:84:A3:F1:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57d2127e-1193-4665-90cc-e23ccd6ab321.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57d2127e-1193-4665-90cc-e23ccd6ab321/92a3fe60-674d-3d2e-8fa0-1c08b2dba6c5.roa
Signing time:             Fri 19 May 2023 01:00:16 +0000
ROA not before:           Fri 19 May 2023 01:00:16 +0000
ROA not after:            Thu 17 Aug 2023 01:00:16 +0000
asID:                     1828
IP address blocks:        209.251.78.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:ed:92:9e:3f:3b:b1:26:54:63:24:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57d2127e-1193-4665-90cc-e23ccd6ab321
        Validity
            Not Before: May 19 01:00:16 2023 GMT
            Not After : Aug 17 01:00:16 2023 GMT
        Subject: CN=596fdd5c-318d-4eb0-8913-19e5f4de986f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:de:3a:ca:38:6e:65:f2:55:ce:bb:9e:35:53:
                    f1:98:eb:14:4a:7e:16:ba:cc:ee:b0:7b:b5:06:41:
                    de:16:df:14:cd:b8:62:84:d7:b8:40:56:4b:1c:02:
                    ab:d9:47:dd:20:30:ed:dd:dc:a2:cb:ae:53:5a:13:
                    2c:4a:ab:b9:8f:91:9b:a0:6a:e0:b4:26:03:40:2a:
                    96:ae:5f:5f:63:e4:ec:56:b3:50:55:28:68:5b:73:
                    33:3d:1f:bb:f5:b1:43:94:5a:5c:af:d4:61:52:15:
                    4f:1b:ea:f7:cb:be:7f:3f:91:c6:1e:7c:15:0e:71:
                    25:98:63:7d:f2:87:6a:a6:74:54:fb:45:a9:53:c9:
                    7b:e7:36:5c:93:ea:cc:10:ab:49:e5:aa:0b:2d:9a:
                    e5:1d:99:50:89:dc:b8:23:8d:5d:79:d1:3f:e3:c7:
                    37:85:4f:46:b5:d2:de:15:8a:75:34:5e:4e:58:1e:
                    b1:4a:bd:f0:e4:43:3a:1b:c5:b5:37:79:28:a8:c0:
                    da:b7:85:9e:64:d2:0d:4a:55:91:2b:ed:4b:ed:6f:
                    f1:a6:82:f5:2e:7e:e9:c7:bf:48:80:40:b0:08:ce:
                    e2:28:13:c2:05:03:01:47:fa:44:dc:2f:b5:4a:67:
                    74:5e:9a:c9:9a:3a:89:60:d9:6e:f5:61:f6:07:60:
                    5e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B1:73:1A:6F:F2:0D:E4:7C:09:5A:0D:73:4B:59:77:B4:8D:79:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57d2127e-1193-4665-90cc-e23ccd6ab321/92a3fe60-674d-3d2e-8fa0-1c08b2dba6c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57d2127e-1193-4665-90cc-e23ccd6ab321/57d2127e-1193-4665-90cc-e23ccd6ab321.crl

            X509v3 Authority Key Identifier:
                keyid:B9:04:7E:2A:F5:CC:22:F2:64:98:A6:90:38:17:75:46:84:A3:F1:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57d2127e-1193-4665-90cc-e23ccd6ab321.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.251.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:20:2c:ca:cc:ee:7a:67:2b:7f:b1:81:5d:a5:b1:35:e2:10:
         24:74:d0:5b:c2:8a:5e:a8:b5:d3:c8:6a:75:5f:93:f3:90:1b:
         fd:45:35:4c:74:2d:67:d7:57:60:c5:45:5b:3c:a5:fe:35:ff:
         aa:f2:40:4a:75:f9:83:c9:17:c7:5e:44:f7:55:5a:b9:51:8b:
         42:a3:c3:da:c5:7b:0a:c4:0a:c2:e5:05:86:e0:12:23:16:fa:
         3f:64:0a:44:05:c5:96:2b:dd:30:af:c4:14:65:1c:ac:e9:9d:
         57:2a:33:ed:49:a4:07:e4:0a:f5:3a:48:42:72:e2:cc:51:c8:
         64:d3:ac:a1:32:a9:14:2e:5d:b4:7c:04:72:2d:1f:5e:65:b4:
         c3:f5:15:fc:24:88:15:17:e3:21:f6:e0:69:51:52:1a:9a:3f:
         c4:45:19:ca:73:e0:3c:da:3c:1c:2d:45:1f:0c:6a:5e:a3:20:
         c5:94:48:0e:99:02:f5:a3:22:38:ea:af:e5:53:06:32:f8:d5:
         2a:c3:89:ae:92:92:9d:28:2b:2d:bf:cc:dd:86:25:a5:eb:a5:
         b3:00:92:c0:9b:2d:32:56:9f:26:76:2b:81:cc:2c:3b:2f:84:
         49:c0:0d:ae:35:ef:10:92:60:54:f1:ab:1b:36:b0:73:7e:5e:
         b1:7a:38:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----