Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/10b04cea-c2cd-3d21-8aab-7167bfbc810f.roa
File:                     10b04cea-c2cd-3d21-8aab-7167bfbc810f.roa (raw, json)
Hash identifier:          geUkMIcBUr0+oCWoSx8XARyx5HPJN9jwzY5Pl9NMb6w=
Subject key identifier:   19:29:20:F9:3D:E4:E3:D6:03:CA:C5:BD:5E:B3:29:1A:8F:BA:8B:82
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840D1A13C43CEAF52406CA59C00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/10b04cea-c2cd-3d21-8aab-7167bfbc810f.roa
Signing time:             Sun 05 Feb 2023 12:00:00 +0000
ROA not before:           Sun 05 Feb 2023 12:00:00 +0000
ROA not after:            Mon 13 Mar 2023 04:00:00 +0000
asID:                     14618
IP address blocks:        192.157.72.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:d1:a1:3c:43:ce:af:52:40:6c:a5:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  5 12:00:00 2023 GMT
            Not After : Mar 13 04:00:00 2023 GMT
        Subject: CN=e5a68d7b-e5be-468c-b244-9fdb44be0ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c7:91:6f:d4:c1:d7:8f:09:ff:9e:35:0a:82:
                    3a:a0:75:09:58:57:1d:71:41:5e:f6:03:d9:6b:42:
                    74:d9:e2:38:19:54:48:22:1f:a2:a4:9e:0a:cf:ad:
                    9d:3a:82:35:d8:13:e5:1c:4b:e6:78:fa:bc:08:8b:
                    23:53:6c:18:39:55:33:56:d8:c9:3d:62:63:80:68:
                    26:87:45:e5:19:c2:d3:cb:f1:a0:4b:4a:0b:5a:e9:
                    55:62:94:c1:8f:8e:f3:35:41:58:2f:fe:e9:a2:22:
                    ef:1d:3f:1f:63:55:8d:79:c4:26:e7:ce:77:b1:3e:
                    d6:c9:1e:c6:ac:a2:43:c7:d3:0d:b4:21:da:58:60:
                    13:9e:a9:83:c9:ff:0b:c3:99:d7:c4:6b:8d:ae:a2:
                    75:12:ef:92:e8:9f:ae:2d:42:30:b9:d5:40:50:df:
                    2d:d7:d9:cb:27:df:ec:53:ef:5d:23:80:6c:4b:34:
                    01:b6:74:64:1e:14:46:07:66:3b:d9:f8:5d:d1:04:
                    bf:46:ba:78:1e:df:de:72:f7:6d:c2:a3:8f:b2:6b:
                    13:03:0f:bd:b5:89:dd:f3:d6:60:6f:d9:bd:48:62:
                    3d:28:f1:48:45:77:86:96:8c:84:f8:84:a0:52:7f:
                    a3:bc:5e:37:65:96:26:64:1d:84:70:de:bf:67:f0:
                    16:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:29:20:F9:3D:E4:E3:D6:03:CA:C5:BD:5E:B3:29:1A:8F:BA:8B:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/10b04cea-c2cd-3d21-8aab-7167bfbc810f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:65:b3:24:4a:65:bd:0f:3c:1c:2f:cc:0b:16:d0:b1:18:12:
         68:89:d8:e7:4d:f4:0a:ab:c6:0d:9c:5d:25:af:c6:da:18:f6:
         73:15:bc:64:36:f8:50:39:1e:c9:24:d8:59:39:a0:ef:41:00:
         5f:19:33:a5:10:5b:f3:7a:c8:4d:05:6d:39:60:41:0f:f5:5b:
         f4:ca:52:50:0e:6c:d7:f2:63:af:c1:39:42:d6:23:bf:57:ad:
         36:a5:a8:08:43:ce:b4:3d:bc:e4:78:45:3a:34:f1:3f:48:c8:
         56:56:a6:5f:ec:a7:53:81:4f:97:21:16:d3:4a:b8:0f:1d:25:
         ec:a6:45:fa:7d:d6:28:1d:83:ec:fc:17:9c:3b:d2:70:19:3c:
         4a:a5:2a:38:6b:ba:62:c8:e4:53:8a:80:08:52:e4:8f:3a:ec:
         9f:f4:b0:a7:aa:1d:e6:ba:a4:b7:b5:d7:cb:a3:d0:28:82:a5:
         ca:62:4b:a0:80:a8:2f:ee:bb:2b:10:df:8e:7e:1b:89:4c:55:
         60:d8:9d:13:b2:da:46:d6:78:e0:6b:ab:49:11:69:48:3a:c2:
         e2:39:e5:97:a4:27:1c:e3:c5:4e:83:4e:d2:e0:79:21:ad:8e:
         58:0e:e7:87:ed:6e:27:15:3b:58:0f:9c:44:81:b0:32:7e:18:
         fe:87:d3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----