Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1b3159e1-cd05-38f3-beda-c31e4fc69cce.roa
File:                     1b3159e1-cd05-38f3-beda-c31e4fc69cce.roa (raw, json)
Hash identifier:          LtX/aa3KHhMNi50tP3qVg/VnfPGItgZo2Bjm5RxUT4w=
Subject key identifier:   B5:D2:93:3D:F9:3F:B9:24:03:13:49:17:D1:C7:01:AE:E3:B1:0D:76
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584092D09DAE5A6BD24A790AF780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1b3159e1-cd05-38f3-beda-c31e4fc69cce.roa
Signing time:             Fri 13 Jan 2023 12:00:00 +0000
ROA not before:           Fri 13 Jan 2023 12:00:00 +0000
ROA not after:            Sat 18 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        172.103.40.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:92:d0:9d:ae:5a:6b:d2:4a:79:0a:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 13 12:00:00 2023 GMT
            Not After : Feb 18 05:00:00 2023 GMT
        Subject: CN=64c153a6-4242-450e-b0e2-1c0864c1e287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:da:38:42:95:f9:38:b8:bd:5f:d2:f5:ed:f4:
                    32:93:37:19:56:10:e5:57:4f:64:38:61:22:56:51:
                    a5:05:bd:ca:bc:bd:32:fb:00:b1:25:dc:b7:82:d4:
                    1f:dd:3e:52:96:b9:1e:fe:09:c5:3f:58:d2:88:53:
                    75:37:81:16:90:a6:e5:d6:cc:30:37:61:b8:b2:8c:
                    ce:0f:7d:5a:a3:56:a6:c1:1b:1e:fa:9a:fd:9e:36:
                    35:f6:8f:aa:41:03:95:ed:e2:ad:ce:67:cc:bf:a2:
                    e7:9c:d0:6f:da:b0:ae:30:4b:4a:f4:9f:a8:03:80:
                    f9:c2:85:3e:74:7d:81:57:f4:04:d9:52:ea:f5:ea:
                    fe:9c:a2:4a:4a:1d:f6:a4:f0:de:66:b8:b1:92:b7:
                    67:bb:21:25:39:35:b2:7f:eb:09:36:b2:8b:35:12:
                    c8:66:7e:ad:57:1a:b4:c9:e5:96:f2:95:1b:18:3f:
                    1f:02:65:59:b4:28:bb:ad:ac:b4:c6:fd:32:49:50:
                    28:be:97:4a:95:75:de:35:59:e1:38:3e:25:e1:86:
                    1e:45:58:18:9d:9f:74:1f:51:3d:01:36:d0:a4:5c:
                    68:31:f4:5a:b8:8d:8e:4b:80:26:45:19:3a:1c:3b:
                    35:a7:b5:65:43:ff:2b:ae:6b:e0:91:fe:61:1b:89:
                    f7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D2:93:3D:F9:3F:B9:24:03:13:49:17:D1:C7:01:AE:E3:B1:0D:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1b3159e1-cd05-38f3-beda-c31e4fc69cce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.103.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:4f:f8:8e:81:f0:fe:d5:6b:63:07:58:47:cc:75:a4:04:4a:
         19:73:54:58:3a:12:b2:cd:b2:66:9d:65:13:2b:52:d8:fa:92:
         e3:c7:cc:bc:65:46:c1:fb:e2:c3:b1:cb:6b:f1:6e:48:90:d7:
         95:d3:f9:69:b4:24:5f:c3:3e:86:30:95:47:b4:6a:a1:04:ec:
         eb:53:00:6a:90:20:a6:c4:e1:9c:ed:66:60:62:64:e2:1c:98:
         2c:19:64:83:72:be:a6:9f:74:9a:36:f5:6d:f1:b3:9d:36:a6:
         e3:e7:85:e2:7c:d2:83:fb:f9:59:89:e8:6d:c8:0b:54:6a:2e:
         7d:6f:0d:b2:8c:9c:2f:b5:4a:48:be:56:35:a9:e7:14:ef:ba:
         2e:46:a9:48:6a:0a:a2:de:b7:06:9d:15:ce:e8:c6:b7:ab:04:
         30:66:7b:79:cd:f9:8c:20:21:ac:dd:2d:80:57:bf:f6:45:33:
         e4:4a:88:dd:31:f9:a9:62:83:be:bc:cc:97:1d:79:72:a1:57:
         34:99:83:4d:c7:60:d9:f6:dc:42:ce:53:f3:94:07:a8:b3:c1:
         94:3f:4e:06:ca:49:9d:e0:96:88:d2:b0:64:9d:71:f7:00:89:
         62:02:da:d9:38:52:10:31:89:57:d8:de:43:3f:d9:55:7a:c5:
         bb:61:7f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----