Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349/e9bb18ff-9213-331f-8130-1986e1d0f44e.roa
File:                     e9bb18ff-9213-331f-8130-1986e1d0f44e.roa (raw, json)
Hash identifier:          e5seKoJcPmoRQiJEV1u+lYQPcExqp+8ArNBJP3t8gdg=
Subject key identifier:   55:00:F4:F6:F5:3A:50:2E:12:5F:1C:A7:62:B5:42:2C:10:1C:89:26
Certificate issuer:       /CN=9389c3cd-af8c-44d4-ae71-4e8073846349
Certificate serial:       010D0C9F4328583D9F9F53C229CB3F5A59882D00
Authority key identifier: 42:D6:AD:13:6E:C7:EA:DF:FD:F6:D1:B3:56:21:BA:A9:89:BD:96:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349/e9bb18ff-9213-331f-8130-1986e1d0f44e.roa
Signing time:             Tue 19 Apr 2022 04:00:00 +0000
ROA not before:           Tue 19 Apr 2022 04:00:00 +0000
ROA not after:            Tue 24 May 2022 04:00:00 +0000
asID:                     62785
IP address blocks:        172.96.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:9f:9f:53:c2:29:cb:3f:5a:59:88:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9389c3cd-af8c-44d4-ae71-4e8073846349
        Validity
            Not Before: Apr 19 04:00:00 2022 GMT
            Not After : May 24 04:00:00 2022 GMT
        Subject: CN=3523baab-e7f5-4af4-87f0-5e8da01e78f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9d:92:fa:12:cb:d4:6c:97:80:75:25:e6:84:
                    86:99:a7:02:3f:c7:64:ab:9b:ed:07:b8:4e:64:b9:
                    6e:24:72:8b:28:c3:4a:3c:d6:ee:35:56:6f:a9:7c:
                    ce:17:95:08:a8:fc:f5:ad:85:d4:0a:62:82:b1:a0:
                    31:6a:f6:57:fa:b0:ae:76:e1:2e:1c:f7:a5:79:db:
                    86:c8:5a:a9:4a:ce:4f:24:99:c2:ad:b8:37:77:d3:
                    c2:2c:01:a3:09:42:a2:4d:bb:9a:5a:be:d0:27:7d:
                    f7:c8:9e:0a:92:07:d8:c9:ad:8e:6b:b5:b6:d1:d1:
                    d7:25:9b:42:b9:94:ad:9e:a9:54:02:f9:dd:40:6d:
                    a3:a1:dd:68:39:de:9d:a1:66:f5:2f:bc:0d:0c:2c:
                    e4:e2:db:eb:a9:b1:54:38:3f:cc:65:58:ff:08:32:
                    13:2f:a9:7a:bd:57:c4:5a:70:6f:e3:e7:2f:bc:19:
                    04:00:6d:de:99:23:f1:ab:6f:c2:78:91:6d:0b:e3:
                    15:5d:48:24:85:1b:18:17:83:79:f5:12:43:7a:4e:
                    6a:df:63:4a:0a:c2:b7:5a:1e:35:99:05:2c:e7:ac:
                    70:14:85:87:25:cf:32:ec:90:63:28:03:41:ec:b2:
                    07:9f:92:a2:44:5e:f6:78:bd:e6:b6:93:63:ed:0d:
                    7d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:00:F4:F6:F5:3A:50:2E:12:5F:1C:A7:62:B5:42:2C:10:1C:89:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349/e9bb18ff-9213-331f-8130-1986e1d0f44e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349/9389c3cd-af8c-44d4-ae71-4e8073846349.crl

            X509v3 Authority Key Identifier:
                keyid:42:D6:AD:13:6E:C7:EA:DF:FD:F6:D1:B3:56:21:BA:A9:89:BD:96:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.96.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:a7:1c:ce:8c:a5:90:5c:5a:45:6b:7b:43:4c:7a:c7:ee:c7:
         10:da:3a:df:5f:d2:55:99:21:9a:b6:58:5c:d2:12:c7:84:d6:
         59:da:7f:b6:d9:59:6e:58:a8:29:cf:36:6d:09:95:d5:36:f7:
         dc:d1:e0:c1:7f:79:77:92:90:bf:d9:fb:20:85:a9:00:07:77:
         93:c3:80:21:3d:32:b1:75:5b:69:ac:be:76:95:33:e6:fd:62:
         db:7f:5a:a5:61:e4:07:3f:c9:7d:89:4e:35:e1:76:7b:e8:2b:
         6a:bc:77:ff:db:e0:ed:48:b7:d9:ed:88:95:94:74:0a:14:48:
         d5:d7:c6:68:95:18:65:f6:5a:c3:e1:94:1b:3a:21:16:63:2f:
         29:8b:99:81:87:50:ed:09:cb:43:48:73:ba:44:a3:5e:97:8a:
         6e:39:a2:2e:11:8c:98:ed:5b:25:13:15:8e:4c:ed:77:1f:bf:
         e4:8e:63:72:b5:f1:65:0d:fe:cc:bd:da:2e:13:61:6e:61:2b:
         c3:5d:f1:84:6a:f9:a7:a8:af:f7:12:25:26:ed:6c:a1:b4:c2:
         b5:c3:27:88:d3:16:6e:9e:4d:49:e8:53:bc:93:16:d6:dc:08:
         62:2c:b9:46:36:3e:0d:10:2f:3f:86:ee:5e:d3:5e:04:98:1f:
         fa:1a:84:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----