Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/06cff188-1f42-3026-a16f-47af7e0520d2.roa
File:                     06cff188-1f42-3026-a16f-47af7e0520d2.roa (raw, json)
Hash identifier:          9uSYqT/SqoFYlUIqR8XYXtSNhnqllSLJY5lw3t+P9dI=
Subject key identifier:   B1:5D:3B:D8:44:ED:4A:0B:7D:EA:6E:8A:7F:55:B3:FE:5A:8E:2C:40
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840D4F1AA319B3A8A1D28559A40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/06cff188-1f42-3026-a16f-47af7e0520d2.roa
Signing time:             Mon 06 Feb 2023 12:00:00 +0000
ROA not before:           Mon 06 Feb 2023 12:00:00 +0000
ROA not after:            Tue 14 Mar 2023 04:00:00 +0000
asID:                     16509
IP address blocks:        161.46.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:d4:f1:aa:31:9b:3a:8a:1d:28:55:9a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  6 12:00:00 2023 GMT
            Not After : Mar 14 04:00:00 2023 GMT
        Subject: CN=2c37e2ad-9c53-47a3-b64d-11378aed9a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:88:b6:a3:89:19:7f:e1:5c:85:79:87:e8:79:
                    0e:02:24:dc:f9:d2:31:f2:04:42:41:09:d1:3f:e5:
                    80:5a:2f:e8:6b:ec:4c:8c:90:46:dd:40:b8:c9:ee:
                    6b:a7:ee:fe:59:bb:51:fa:0a:21:b3:1d:97:7b:7e:
                    54:08:e9:7e:85:33:d0:c0:37:92:9e:78:6b:01:1c:
                    32:e7:8c:30:24:84:9b:e6:16:73:49:91:67:fc:67:
                    a7:ec:f3:bb:3f:5f:a2:09:24:fe:88:cc:4a:89:9e:
                    06:51:3c:e1:ee:f4:66:11:6f:34:15:d4:93:86:73:
                    ef:cf:68:58:78:15:46:ea:f1:f5:79:67:87:a1:5b:
                    46:77:30:00:cd:30:4e:e6:49:a3:ad:50:92:6c:b5:
                    a6:c2:62:23:5d:b2:45:ba:02:9b:d7:b6:dc:4a:e2:
                    0d:9c:4c:88:b8:a2:59:05:dd:a8:aa:29:c9:89:2b:
                    f7:88:57:90:28:b9:50:7f:b6:d3:db:e8:e0:55:da:
                    39:8b:ac:70:87:85:67:98:d1:91:1b:53:c9:a7:3a:
                    da:87:a3:9c:4f:53:f5:f2:15:42:bc:c5:4b:40:93:
                    23:dd:14:54:95:f4:c0:3c:e4:71:ae:b0:3b:0c:ea:
                    ff:bc:37:b7:96:a0:cb:31:ba:78:2f:1d:d3:f0:9c:
                    2b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:5D:3B:D8:44:ED:4A:0B:7D:EA:6E:8A:7F:55:B3:FE:5A:8E:2C:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/06cff188-1f42-3026-a16f-47af7e0520d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.46.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:84:ed:ee:5b:6c:5f:d6:35:c8:dc:67:d3:61:3d:f2:26:47:
         be:3c:7d:d2:bf:82:5f:7c:01:a3:21:11:a2:7d:e0:5e:f5:79:
         5b:99:21:67:bf:08:a1:80:d4:ae:b4:bb:fb:17:80:99:36:f3:
         ab:98:c9:e8:db:ed:74:45:7c:23:88:ff:e5:97:54:2c:4e:86:
         ad:5a:10:ff:fc:00:a1:d0:94:5d:4a:54:ba:55:37:b2:1c:7b:
         6b:2a:c3:43:87:9f:b9:0d:c8:e2:5b:00:67:87:fd:f6:94:ab:
         75:98:ce:a9:e7:77:e0:ab:84:d8:8d:46:3c:57:a0:cf:f4:f8:
         fa:12:91:82:c4:b8:28:2f:52:84:7e:eb:3a:38:e2:e1:41:83:
         e5:5a:29:fb:88:05:03:f4:11:7e:53:56:c9:39:80:7d:95:21:
         a7:de:68:d2:fa:91:72:be:80:d8:5e:de:71:e8:05:63:c7:fe:
         07:2f:3e:5d:b1:2e:27:9f:5d:0f:9d:12:f7:c4:78:9d:4c:9f:
         b3:05:75:8a:a6:54:82:3c:0e:64:62:3c:d7:9a:69:45:b0:69:
         f5:32:51:b6:69:e7:0d:dd:0f:87:7d:98:1a:b4:cc:09:55:02:
         d3:ad:6c:be:1c:45:dd:1f:c3:46:59:53:24:aa:63:67:97:6b:
         56:4a:ee:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----