Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/178cdb6b-f60d-307d-8e4f-1f7153a9266e.roa
File:                     178cdb6b-f60d-307d-8e4f-1f7153a9266e.roa (raw, json)
Hash identifier:          eSnclJfpN0luLeIntR9GGN49Rkctg/nsBXYzHiYnYHE=
Subject key identifier:   89:30:93:4B:CD:E8:77:1C:FB:0E:C4:93:08:8C:83:BE:4A:1A:4E:99
Certificate issuer:       /CN=a4994aff-79e3-4800-875a-f4a951d7af28
Certificate serial:       010D0C9F43285843903DE73CE84A25CA20908E00
Authority key identifier: 4A:41:44:C2:37:55:32:9B:82:E2:88:2B:51:8A:93:7E:E6:74:AF:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/178cdb6b-f60d-307d-8e4f-1f7153a9266e.roa
Signing time:             Mon 16 Oct 2023 00:13:20 +0000
ROA not before:           Mon 16 Oct 2023 00:13:20 +0000
ROA not after:            Sun 14 Jan 2024 01:13:20 +0000
asID:                     19039
IP address blocks:        162.217.30.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:90:3d:e7:3c:e8:4a:25:ca:20:90:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4994aff-79e3-4800-875a-f4a951d7af28
        Validity
            Not Before: Oct 16 00:13:20 2023 GMT
            Not After : Jan 14 01:13:20 2024 GMT
        Subject: CN=fc452f25-6ccb-4910-abbb-3310bd328b94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e4:de:6b:2c:1a:28:36:ad:0c:95:05:78:5c:
                    8a:00:39:a6:a9:8e:4f:ac:36:8b:8e:40:b2:69:44:
                    fe:70:80:77:27:bf:5d:f4:20:36:a9:69:f4:3d:0a:
                    f2:1a:76:61:db:87:74:10:cd:4d:57:83:91:82:14:
                    20:9a:ca:de:5d:a3:18:18:81:55:42:38:c3:89:a9:
                    05:39:4e:41:53:60:25:7a:42:34:c5:90:34:59:12:
                    be:db:d8:89:e7:6f:e8:d4:4c:a1:41:4e:27:c4:4c:
                    d3:09:2d:d3:bf:c2:24:93:0e:12:03:c8:d6:95:4e:
                    de:1d:f2:c5:9d:bc:97:78:08:d8:01:7f:cf:cb:c8:
                    d0:33:2e:16:ca:55:47:e8:2c:3e:1f:8f:2d:a7:3d:
                    b5:1c:3e:d1:e8:ff:36:52:aa:c1:e8:4e:a5:81:6a:
                    d9:f2:c0:f9:50:42:0b:39:b0:6e:0f:5f:6f:bf:d0:
                    e0:b1:6b:3d:00:85:14:ad:53:2e:7b:1b:4e:01:d0:
                    9b:42:20:02:3c:7b:79:01:03:9b:86:1a:65:ed:34:
                    fd:ad:97:d7:22:d9:36:46:da:6d:25:a0:66:7a:d0:
                    02:76:97:3a:32:c3:97:86:35:7d:ea:39:4c:f2:34:
                    42:79:9a:ac:d9:02:5c:04:7a:cb:80:97:08:8f:80:
                    36:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:30:93:4B:CD:E8:77:1C:FB:0E:C4:93:08:8C:83:BE:4A:1A:4E:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/178cdb6b-f60d-307d-8e4f-1f7153a9266e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/a4994aff-79e3-4800-875a-f4a951d7af28.crl

            X509v3 Authority Key Identifier:
                keyid:4A:41:44:C2:37:55:32:9B:82:E2:88:2B:51:8A:93:7E:E6:74:AF:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:12:20:9b:10:32:95:3d:cf:68:50:e0:ba:3c:d4:69:60:1f:
         9f:ac:ac:cb:00:e4:87:8f:6e:da:78:6c:88:9f:65:b3:76:a7:
         c5:8e:35:ec:bf:a4:2b:a6:c0:fc:3b:56:89:f1:0f:9c:94:3c:
         56:d5:49:d6:96:82:a8:d2:1e:bb:f2:1e:37:bf:f3:b3:27:76:
         f3:e1:14:5c:b2:42:76:1c:55:c4:96:9c:0e:fd:a9:c3:9a:35:
         eb:dc:0a:aa:e3:0f:d9:cc:f5:bb:40:a0:61:df:9e:6f:93:eb:
         80:6e:23:5a:a8:3b:16:1d:0d:c0:f7:20:f7:e5:97:18:b6:27:
         85:57:d7:bc:ce:56:a6:dc:44:6c:17:b2:8b:3b:d2:bd:2e:73:
         07:88:90:c9:50:b0:b4:2b:e7:16:9e:e3:14:d3:95:c9:b6:ce:
         9f:bc:04:ed:fa:b9:d8:d0:ac:2e:16:f3:67:51:c9:d0:26:ff:
         d6:c3:b7:75:1d:9f:15:cd:19:bf:39:26:8e:fe:06:b9:3c:4a:
         50:55:a3:1a:2a:ed:cc:cb:dd:a8:ae:6b:f1:3a:cf:28:0d:a9:
         c2:93:00:64:c1:e6:65:74:dd:36:ee:8a:32:e9:b1:01:ea:8c:
         53:a4:bb:0c:c2:68:61:d7:1c:a3:90:b7:f3:9f:e9:fb:9c:44:
         da:b9:d0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----