Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/01047e03-f37e-3c74-8d1f-dfead5957f26.roa
File:                     01047e03-f37e-3c74-8d1f-dfead5957f26.roa (raw, json)
Hash identifier:          kXFbz90XP7CPgPZ8HDSeyRpVOBraYi9CX5gxP7tUL4U=
Subject key identifier:   41:06:CC:96:32:B4:29:72:7C:39:3A:13:E0:27:3B:03:2B:43:42:BC
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840B84587CFD217A9EA7DA49860
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/01047e03-f37e-3c74-8d1f-dfead5957f26.roa
Signing time:             Fri 27 Jan 2023 12:00:00 +0000
ROA not before:           Fri 27 Jan 2023 12:00:00 +0000
ROA not after:            Sat 04 Mar 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        64.187.128.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b8:45:87:cf:d2:17:a9:ea:7d:a4:98:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 27 12:00:00 2023 GMT
            Not After : Mar  4 05:00:00 2023 GMT
        Subject: CN=127fe544-8221-4379-bfd4-aa4056c82e0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4d:0c:34:84:1a:1f:66:76:a4:79:2f:f2:01:
                    ab:82:87:6c:cd:58:73:af:8d:fd:b2:cb:8f:4b:d9:
                    57:60:71:33:30:63:bd:8b:3f:44:9d:0e:36:a5:b2:
                    33:18:d7:4e:9f:60:44:eb:d5:5d:e7:50:aa:ab:46:
                    c2:2a:ae:ee:de:f0:2c:36:fe:ce:e2:b9:0a:08:60:
                    0f:e0:5a:57:8a:c8:e8:93:86:d6:dc:f3:7d:ad:37:
                    3c:13:2d:4b:45:3d:19:8c:7f:50:68:c6:3e:56:a3:
                    6e:61:c2:f5:07:89:a0:40:ef:21:f5:27:09:83:4a:
                    34:61:37:21:58:e1:fd:9b:be:a1:82:3a:16:18:0f:
                    0e:a4:e3:5f:84:da:46:04:6a:76:32:de:fb:38:f2:
                    1d:37:55:15:4a:6d:0a:08:5f:ac:3c:73:2f:1d:94:
                    12:61:5a:e0:f7:e2:c6:4b:62:89:35:85:ba:85:52:
                    b2:ce:cf:a4:5a:01:26:75:44:8e:5f:ae:3e:39:95:
                    1a:ab:1d:ff:02:0e:16:1b:d3:9f:64:be:3f:8c:75:
                    b4:b8:98:d7:e2:25:51:24:33:8e:5d:fa:f0:7f:7d:
                    bc:1d:f6:0c:13:a9:a5:2f:15:53:5a:32:80:b9:6b:
                    59:86:dd:ef:7f:12:09:f4:ba:40:ca:38:a2:f3:d9:
                    06:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:06:CC:96:32:B4:29:72:7C:39:3A:13:E0:27:3B:03:2B:43:42:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/01047e03-f37e-3c74-8d1f-dfead5957f26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.187.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:4f:53:99:c1:3a:c5:a7:0d:62:2f:ec:f2:be:89:c5:6b:79:
         e6:26:49:2c:55:0b:97:6e:2f:8d:44:7d:68:f1:be:13:8b:6f:
         a7:be:22:6b:84:7e:41:9e:f9:c7:38:8b:f2:29:6f:7f:1e:85:
         75:fb:2f:70:b1:79:71:53:13:a0:05:41:76:6c:b5:1e:a9:de:
         22:fc:72:3a:6a:7c:79:95:6b:d5:43:67:17:e8:36:aa:e0:b4:
         79:3e:f3:55:e1:1e:67:0c:a6:19:94:de:34:c7:f3:db:b5:6a:
         4b:ca:c0:41:38:f5:20:08:1f:18:b9:d8:bf:2f:d8:bb:08:f5:
         09:98:96:54:a0:10:86:e4:de:af:ef:2f:22:f6:75:2c:a8:b0:
         fe:3c:46:8e:db:92:13:e7:f7:c5:cf:1d:ab:52:a3:c0:27:67:
         e9:d5:61:06:75:38:b4:5a:91:d5:ad:e9:83:b8:15:04:5c:7d:
         3f:82:bc:dc:1e:4d:e6:b0:78:cf:cd:e0:aa:15:b9:d8:cb:fe:
         a7:09:2c:6f:86:d9:65:7b:23:b2:38:d8:81:0b:7a:01:ed:d1:
         65:74:d7:a4:11:16:e2:c5:a2:e8:74:0c:2f:94:10:f5:eb:5f:
         60:7b:49:98:d1:a1:5b:2a:60:0a:f2:14:e1:dd:bf:70:89:29:
         73:7e:7e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----