Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/09b5aa5c-7ae2-3c2d-bee0-4a9e746ab9ae.roa
File:                     09b5aa5c-7ae2-3c2d-bee0-4a9e746ab9ae.roa (raw, json)
Hash identifier:          io0ygfWerLVzycILfmGhguEz3p95j2XXmGSdRhueGBw=
Subject key identifier:   92:79:25:A9:6E:3C:85:B3:C5:AE:CC:79:BD:93:0B:A4:80:AD:EE:82
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858408674C39E3F32BD36D96B2BC8
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/09b5aa5c-7ae2-3c2d-bee0-4a9e746ab9ae.roa
Signing time:             Mon 09 Jan 2023 12:00:00 +0000
ROA not before:           Mon 09 Jan 2023 12:00:00 +0000
ROA not after:            Tue 14 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        173.83.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:86:74:c3:9e:3f:32:bd:36:d9:6b:2b:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  9 12:00:00 2023 GMT
            Not After : Feb 14 05:00:00 2023 GMT
        Subject: CN=0976c4d1-a681-40a1-8252-6e5687ec1f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1f:59:dd:0a:db:71:30:87:99:09:dd:18:cd:
                    0a:27:4e:a6:04:b2:cd:cb:65:7b:60:d3:12:a9:eb:
                    ea:67:a7:c9:45:ef:38:b1:cd:08:42:42:c5:9c:25:
                    d5:f2:48:7e:93:dd:86:63:2c:f5:8c:3b:b9:b2:09:
                    d4:36:88:07:5c:d5:60:e6:83:64:cb:10:e6:f3:54:
                    0c:54:bf:58:5b:2a:ed:3d:76:b7:b7:10:db:a5:fb:
                    ba:62:27:7c:19:1f:20:a8:7a:20:ae:f0:7d:dd:e1:
                    31:1c:ce:36:e5:9c:3c:49:0c:fc:00:70:37:e7:f4:
                    01:72:6b:02:f0:32:af:d6:98:49:34:df:f2:89:03:
                    c4:f6:62:f6:6a:5f:b0:e6:e6:43:ae:df:84:2d:5a:
                    6a:64:21:74:3d:64:fa:a2:3b:f3:6b:f4:bf:06:0c:
                    e7:b8:bf:5e:73:b4:83:40:f0:08:5f:18:2f:24:1d:
                    ea:ed:d4:75:3e:eb:5e:e4:f2:35:7f:f1:3a:80:4d:
                    a5:08:50:59:1a:06:b2:7b:b7:b3:a8:5c:a2:40:45:
                    60:42:01:6a:50:e4:44:39:72:71:38:2a:d6:25:f6:
                    c0:e7:8b:67:f6:ac:f7:5a:ba:9a:77:08:ca:d5:ff:
                    13:c2:b9:68:45:00:87:07:a7:61:73:57:98:e1:1b:
                    2b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:79:25:A9:6E:3C:85:B3:C5:AE:CC:79:BD:93:0B:A4:80:AD:EE:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/09b5aa5c-7ae2-3c2d-bee0-4a9e746ab9ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.83.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:cd:5d:40:3e:6f:85:70:a2:b0:bd:b0:08:e8:75:00:4a:46:
         a6:eb:c1:c9:41:b6:f0:22:b0:46:bd:85:dc:cb:fd:5a:a4:4c:
         d1:a1:78:2a:42:18:b3:2f:e6:36:be:29:3d:30:13:ea:80:1e:
         2f:e4:c1:02:66:26:9f:0d:f6:56:0d:c1:f1:8b:0a:fd:89:8d:
         80:9d:31:36:4a:2b:64:56:b9:38:b3:66:76:2b:1b:2b:17:14:
         47:94:c5:8f:93:c1:13:b9:65:a2:a7:56:c8:25:4f:94:59:a0:
         94:2f:c0:83:45:cc:88:2f:5b:88:d5:ca:93:65:40:10:ae:97:
         02:88:13:6d:22:2b:ab:99:ef:86:b8:fe:20:0a:93:b4:c6:fd:
         69:8c:ee:88:a4:45:11:da:c6:46:fa:e3:47:e3:dd:dc:e0:3e:
         8c:93:37:34:73:b1:e2:9e:66:1e:cb:8c:5c:70:e6:dc:50:5b:
         7d:0f:81:15:c9:01:e3:a7:a7:a1:70:f6:af:95:17:13:29:84:
         8e:fc:8b:bc:0d:67:8d:03:35:7a:df:3c:ba:fb:5a:16:a2:79:
         9b:68:c0:4e:e3:6e:7c:47:94:49:43:57:76:0a:2c:f0:1c:86:
         cf:2a:e8:62:0a:2e:91:e5:bb:55:68:32:d6:4d:5b:9e:02:95:
         e8:5e:a8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----