Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc969dfb-52db-45b6-9244-62c3f7ddf514/e3a7a918-6eb7-30e5-b514-0e8b9171d55c.roa
File:                     e3a7a918-6eb7-30e5-b514-0e8b9171d55c.roa (raw, json)
Hash identifier:          AxCGFuvOFpbJ5fX8KFNsacwDNJrwhqUWWuZCi/a6Bfw=
Subject key identifier:   B4:09:4C:3E:1C:84:DC:D0:88:07:0C:2B:B8:C3:B1:89:09:D4:98:6B
Certificate issuer:       /CN=dc969dfb-52db-45b6-9244-62c3f7ddf514
Certificate serial:       010D0C9F4328583FBE938667F0690D7FD5AE9E74
Authority key identifier: CA:DC:79:A9:69:34:E9:AF:17:2E:50:66:00:0A:A1:30:0D:EC:61:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc969dfb-52db-45b6-9244-62c3f7ddf514.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc969dfb-52db-45b6-9244-62c3f7ddf514/e3a7a918-6eb7-30e5-b514-0e8b9171d55c.roa
Signing time:             Mon 03 Oct 2022 15:03:08 +0000
ROA not before:           Mon 03 Oct 2022 15:03:08 +0000
ROA not after:            Mon 01 Jan 2029 05:00:00 +0000
asID:                     834
IP address blocks:        128.254.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:be:93:86:67:f0:69:0d:7f:d5:ae:9e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc969dfb-52db-45b6-9244-62c3f7ddf514
        Validity
            Not Before: Oct  3 15:03:08 2022 GMT
            Not After : Jan  1 05:00:00 2029 GMT
        Subject: CN=12da13d7-bbb8-462a-a415-f5411cbaea86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fe:8f:3e:56:61:bc:ac:19:88:b4:68:8b:d5:
                    c7:2c:f0:03:d6:0c:32:b8:fd:36:7e:49:0f:6b:75:
                    b1:a8:40:40:30:ac:64:7d:17:70:b1:de:2c:69:a1:
                    40:18:83:f8:5a:d8:16:58:37:8b:2d:5f:8a:e3:0f:
                    e9:d1:14:3c:87:aa:b2:b1:17:4c:5c:7b:8d:41:52:
                    f6:24:4a:3b:76:e4:e5:1c:51:69:0b:a3:b7:6f:b9:
                    53:1c:48:73:ac:91:7b:c6:a7:61:2d:04:de:83:46:
                    41:5c:5e:e6:99:db:95:75:73:96:3a:35:7e:ab:54:
                    b8:bb:24:18:34:48:12:d1:0e:31:83:56:e1:e3:60:
                    48:e6:e7:df:79:1f:df:87:69:5e:23:d1:5f:df:7b:
                    0c:f1:e4:c6:9b:d8:73:b0:77:67:3e:81:3d:4f:1c:
                    c9:fa:46:50:86:f9:e3:e0:56:04:7f:c6:b6:71:78:
                    22:1a:7f:9c:9e:19:3c:db:43:89:25:6c:65:6d:52:
                    67:2c:d0:10:6f:91:49:8e:4b:c2:bd:6a:0b:05:cd:
                    e9:bf:3f:dc:00:6a:db:68:36:b9:88:8d:4c:5b:20:
                    28:73:28:2f:ff:ea:0c:ae:3b:6a:1b:35:0c:90:ee:
                    87:41:46:61:5c:fc:20:a9:0e:7b:f8:92:20:16:39:
                    06:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:09:4C:3E:1C:84:DC:D0:88:07:0C:2B:B8:C3:B1:89:09:D4:98:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc969dfb-52db-45b6-9244-62c3f7ddf514/e3a7a918-6eb7-30e5-b514-0e8b9171d55c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc969dfb-52db-45b6-9244-62c3f7ddf514/dc969dfb-52db-45b6-9244-62c3f7ddf514.crl

            X509v3 Authority Key Identifier:
                keyid:CA:DC:79:A9:69:34:E9:AF:17:2E:50:66:00:0A:A1:30:0D:EC:61:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc969dfb-52db-45b6-9244-62c3f7ddf514.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:76:1a:53:49:a5:03:3a:23:d0:39:30:c8:11:9f:8a:20:62:
         ed:1a:76:6b:38:95:f1:a1:f9:10:c4:16:1e:02:7b:b3:48:03:
         39:db:31:ee:68:61:8c:e4:ab:74:4e:1b:41:18:11:ff:70:97:
         f0:1c:16:19:94:7a:6a:6a:9b:db:78:17:c4:60:de:ce:4c:e2:
         f7:bd:92:ee:07:cd:24:1a:14:22:11:cd:ab:65:18:b6:72:c6:
         6f:e9:80:0d:f5:74:54:87:71:64:81:7f:72:cc:b6:ef:3f:44:
         d7:b7:a6:68:07:00:85:17:19:b0:9f:54:13:28:94:31:ee:9d:
         89:68:c9:2b:c5:69:52:0a:d4:99:bf:53:85:d8:e2:43:09:c9:
         ee:e1:d3:14:ca:05:9b:78:30:84:11:57:9c:c7:ed:90:f6:ed:
         f6:43:73:32:3e:07:4d:25:49:ca:37:92:9c:55:e7:cc:4a:72:
         74:bc:20:d3:72:53:b8:55:29:53:d6:8b:85:20:35:24:81:55:
         25:d4:b9:91:14:d2:14:3b:d6:1b:f0:a3:40:de:a8:3f:5a:03:
         85:72:62:35:6d:6f:71:12:c2:85:7e:e5:0f:77:cb:b5:fd:5e:
         18:7c:ab:d2:7b:fe:50:fa:16:bd:f6:c0:a3:46:dc:8e:22:29:
         c4:58:63:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----