Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/134c4279-f8fc-35d8-b8e1-1e8e9f7d91b2.roa
File:                     134c4279-f8fc-35d8-b8e1-1e8e9f7d91b2.roa (raw, json)
Hash identifier:          yCgyTyPDT7WUQoMF40hSKDBVO/ylrl5RwFil54ueBH8=
Subject key identifier:   4B:DD:0B:55:5C:D9:A2:53:BE:41:DF:2F:73:17:38:F8:41:5D:49:85
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840AD472A574B4F01BA39EB8F00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/134c4279-f8fc-35d8-b8e1-1e8e9f7d91b2.roa
Signing time:             Mon 23 Jan 2023 12:00:00 +0000
ROA not before:           Mon 23 Jan 2023 12:00:00 +0000
ROA not after:            Tue 28 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        114.56.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:ad:47:2a:57:4b:4f:01:ba:39:eb:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 23 12:00:00 2023 GMT
            Not After : Feb 28 05:00:00 2023 GMT
        Subject: CN=c11e0c55-bb22-4d4f-a8f4-3f64dd761b54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:57:a5:d1:08:ee:e2:69:bf:b8:ef:48:e3:5c:
                    65:a9:6a:d7:d1:dc:60:66:51:fd:ca:42:ce:3c:c7:
                    3e:a9:a9:39:a9:9f:fe:56:e2:17:88:ce:00:b9:c4:
                    b2:72:8a:0c:37:83:02:16:03:da:03:5a:82:12:18:
                    4d:53:19:b4:50:91:95:b2:be:4a:a7:6f:7d:6c:58:
                    80:df:9d:0a:61:6c:9b:50:ec:b9:1c:9a:f0:9c:e1:
                    21:5b:15:0d:c7:04:59:04:f1:6d:3f:b0:df:82:c0:
                    e0:b5:65:8d:6c:42:d2:15:62:11:19:a1:fa:74:af:
                    42:13:81:e4:e0:0c:82:bb:bb:ec:2c:a5:e1:a7:46:
                    4f:36:e4:ea:98:e7:89:ad:af:82:c4:52:19:62:64:
                    66:d7:42:62:17:d0:ef:be:d2:1c:9f:6b:6a:86:32:
                    f1:dc:bf:39:50:18:9e:14:92:13:5b:82:aa:bc:21:
                    82:46:6d:a3:ce:c6:09:1f:be:54:5e:8d:c2:03:45:
                    0a:d1:c0:c1:f6:9b:f2:86:36:aa:ed:8d:9e:5f:fd:
                    4b:6b:34:4d:99:cc:de:a0:a2:6f:f3:3f:f8:1b:9d:
                    53:d6:74:94:1c:26:16:7a:57:bd:63:59:6d:3d:43:
                    ba:8b:9b:16:9e:7e:db:55:11:8d:65:03:dd:d9:ed:
                    a6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DD:0B:55:5C:D9:A2:53:BE:41:DF:2F:73:17:38:F8:41:5D:49:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/134c4279-f8fc-35d8-b8e1-1e8e9f7d91b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.56.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:fe:b5:39:69:45:e6:44:94:aa:96:14:19:74:91:0d:c1:c8:
         8e:dc:fb:5f:d3:80:ed:8d:b5:55:88:ac:ea:da:49:67:17:35:
         20:17:81:89:d0:2a:2d:ca:41:7b:3b:a6:19:d5:65:44:a3:42:
         50:85:f5:d1:29:d7:1a:72:16:7d:54:62:58:d4:86:ce:42:19:
         1b:28:bf:e4:96:0a:dd:e1:de:d2:50:ff:be:d6:40:ab:c9:65:
         55:b8:da:32:83:d2:5b:39:f9:bb:b5:18:c7:8f:70:b1:97:a7:
         bd:31:29:9f:92:e1:55:ca:ea:97:a4:24:ca:c4:13:62:2d:4b:
         0f:f9:46:14:3e:33:08:29:e3:d5:78:35:86:df:74:2c:f9:a4:
         0c:51:3a:fb:9e:f4:89:fa:6b:8a:91:2e:ea:b6:33:5a:02:ff:
         12:46:6d:02:c8:37:5e:af:a6:1e:96:06:53:e8:98:ce:b2:e4:
         06:32:a1:dc:0e:a6:9c:88:0c:77:8e:24:cf:7c:23:71:4f:a3:
         49:18:af:ce:05:a8:aa:14:e9:b4:ac:9c:ed:0f:7c:95:5a:6a:
         59:67:f8:fb:51:6c:55:78:4a:7b:6a:02:0d:68:8a:3a:eb:f3:
         71:51:94:ab:71:f0:55:49:1e:65:48:aa:7e:12:1f:ae:7b:3e:
         fd:50:2c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----