Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0df97186-6188-31a6-91fd-8bf3463954f5.roa
File:                     0df97186-6188-31a6-91fd-8bf3463954f5.roa (raw, json)
Hash identifier:          bkfIQsYvIBsaEBYvL8yR3NVKB+fhkGygmIniLS690nU=
Subject key identifier:   4F:6A:E3:99:E8:24:91:9B:F1:51:5A:6B:1C:10:0D:4E:95:50:FD:FB
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858409C8E8C64645F182DF9BCC9D0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0df97186-6188-31a6-91fd-8bf3463954f5.roa
Signing time:             Tue 17 Jan 2023 12:00:00 +0000
ROA not before:           Tue 17 Jan 2023 12:00:00 +0000
ROA not after:            Wed 22 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        56.43.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:9c:8e:8c:64:64:5f:18:2d:f9:bc:c9:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 17 12:00:00 2023 GMT
            Not After : Feb 22 05:00:00 2023 GMT
        Subject: CN=b51556be-e45c-4be1-97a0-d2294291dda5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:30:04:0e:d8:81:a0:8a:a7:c9:43:63:bd:b8:
                    f1:f5:bd:85:0c:82:09:51:5d:80:12:26:74:45:de:
                    14:dc:18:d3:a0:ff:2d:7c:d4:35:8a:bb:5f:0f:d6:
                    6c:25:c8:c0:65:48:40:07:2c:d4:f3:db:cf:b9:79:
                    fb:e6:74:44:27:1c:6d:7d:86:19:7e:68:20:0d:2c:
                    ff:07:ba:80:ce:15:c9:2c:9c:b2:65:47:c2:31:6c:
                    9d:4f:29:f1:14:50:c7:a5:c2:d8:fb:4d:43:a0:49:
                    f8:c6:1c:d5:26:03:e9:8b:92:b0:50:be:f6:91:fb:
                    23:50:19:be:c3:bd:b3:a0:e4:bf:e5:09:2b:ff:bf:
                    dc:aa:68:6c:09:c6:0c:24:d8:c3:0f:eb:5b:3d:8a:
                    2c:9a:a7:66:63:04:33:22:d4:72:64:40:1a:7e:ff:
                    3c:44:44:b0:d2:1a:98:75:b7:39:c1:de:68:8c:94:
                    68:91:a3:df:ba:34:63:be:1f:e5:d0:c5:be:d2:8b:
                    98:bc:64:38:43:bf:23:da:80:8e:12:15:ca:e5:de:
                    4a:10:68:7a:4c:34:d4:d7:3c:10:e4:5a:64:ff:89:
                    8b:da:2b:7c:a0:f0:69:34:a3:21:f6:1e:df:bc:a2:
                    f0:d3:68:25:81:45:82:19:f1:0b:ac:fc:7d:06:39:
                    92:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6A:E3:99:E8:24:91:9B:F1:51:5A:6B:1C:10:0D:4E:95:50:FD:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0df97186-6188-31a6-91fd-8bf3463954f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.43.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:32:8c:83:b7:33:64:dd:0c:ea:eb:8e:c0:36:01:db:03:f0:
         dd:61:dc:b0:b2:45:d7:2d:c9:e5:b6:7c:e0:7b:2c:77:d5:a3:
         10:51:43:15:7d:3b:11:97:95:99:54:05:b7:d2:7a:8e:f6:d6:
         bb:b1:b2:8e:c9:6a:49:8b:d2:c6:59:3e:95:87:f1:82:8d:ad:
         e1:af:8b:0c:df:79:61:85:6a:82:05:2b:86:dc:2d:c4:3a:d7:
         a7:66:08:57:9e:1b:22:37:7a:dc:a0:0a:80:92:e7:9c:74:e3:
         46:4e:a2:19:e4:29:65:af:64:4c:bc:6f:f7:44:f2:9b:da:1c:
         36:46:8b:cb:f1:3e:b3:a7:f3:ce:2d:31:41:1b:8e:95:e1:3e:
         b9:d8:c5:a3:d4:9c:26:39:f4:fc:60:63:e9:d0:1a:2f:4f:85:
         36:ce:6b:3e:b1:74:17:c1:4a:84:43:09:a3:93:5e:88:7a:41:
         20:c0:5e:ad:37:ba:eb:e6:4f:bf:06:3d:58:47:2f:d3:17:3d:
         a0:31:98:95:96:3e:b4:b2:0f:8a:47:5e:e1:25:86:9f:ea:4f:
         11:1b:47:ab:56:cf:18:74:61:25:b5:a3:b2:a2:c2:9e:04:e9:
         5a:a6:6a:5f:35:77:c5:ea:db:e9:bc:99:40:a0:87:b8:9b:84:
         1a:04:40:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----