Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1e2b97fd-82c3-3069-98d0-fd147384d95c.roa
File:                     1e2b97fd-82c3-3069-98d0-fd147384d95c.roa (raw, json)
Hash identifier:          AwsuB9Pw3wnmk+cJ++fVu0+qHofCdPSjebFBuN07gJw=
Subject key identifier:   CF:FD:11:F2:28:C5:4A:A3:AD:21:C0:57:D3:FD:84:C3:59:8D:AF:6A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840AA9A4B724BAB4252FF991928
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1e2b97fd-82c3-3069-98d0-fd147384d95c.roa
Signing time:             Sun 22 Jan 2023 12:00:00 +0000
ROA not before:           Sun 22 Jan 2023 12:00:00 +0000
ROA not after:            Mon 27 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        207.9.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:aa:9a:4b:72:4b:ab:42:52:ff:99:19:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 22 12:00:00 2023 GMT
            Not After : Feb 27 05:00:00 2023 GMT
        Subject: CN=5d95b481-41fc-4b4b-9599-b0fdd177f57a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ea:cf:fb:1a:26:14:bc:d9:c5:95:1f:ec:bf:
                    ad:85:98:e9:10:8a:27:9e:6a:a3:70:73:70:78:64:
                    42:b6:f2:d9:66:04:e3:fc:25:2e:cf:62:c6:55:54:
                    b2:e5:ca:d9:a5:0a:ca:bf:99:d7:a3:67:07:df:9a:
                    76:64:97:8a:37:f3:af:7a:28:93:4f:0e:b5:16:2d:
                    c3:ce:73:1e:7d:1f:e2:9b:3b:ba:f6:73:4c:ad:4e:
                    86:20:58:e9:fa:d1:70:dd:c6:4c:a7:5f:eb:ca:8f:
                    36:9e:82:e3:84:f8:ee:98:88:b4:0a:f8:b5:61:55:
                    89:37:6b:36:ee:fa:5a:3d:f8:b4:b5:23:6c:a9:d2:
                    b8:84:40:f9:e4:8e:3b:1b:58:69:d5:87:6e:6a:92:
                    a3:7e:73:04:35:d5:28:f1:f1:49:8a:93:f6:e1:40:
                    c0:51:0c:68:d9:d5:13:c0:69:82:19:cc:e0:29:bc:
                    c1:a7:e8:c4:89:73:db:f1:4c:eb:bf:01:f6:1c:53:
                    55:41:70:56:33:be:dd:e2:26:ac:cd:8f:34:69:d3:
                    b7:49:85:e3:c0:7e:d6:3d:ff:e7:0a:3e:f1:6d:fc:
                    f6:5c:79:69:02:4f:f5:37:94:68:04:27:9e:1b:13:
                    3b:a7:66:72:8b:d2:ed:59:36:6b:8a:bb:f1:75:a1:
                    b9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:FD:11:F2:28:C5:4A:A3:AD:21:C0:57:D3:FD:84:C3:59:8D:AF:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1e2b97fd-82c3-3069-98d0-fd147384d95c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.9.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:2a:85:bb:87:ac:dc:ec:0b:06:87:33:d2:c0:66:c5:e8:44:
         a4:28:c6:01:7b:fc:59:ef:ff:d8:8a:49:b0:f4:7a:86:f2:26:
         8e:d5:b1:e6:82:34:90:be:67:f6:3d:2d:3b:8d:c2:c2:99:cd:
         bd:b3:5c:1b:43:fe:27:f7:c0:0f:2e:5c:c6:af:c0:88:96:80:
         d9:b5:72:1b:16:d3:f4:67:d5:f2:0b:ab:db:f8:56:98:83:22:
         c5:78:92:1c:23:7f:f3:fe:37:13:25:a2:5c:10:d0:1d:1b:40:
         a6:8f:8d:64:56:30:d3:8e:0e:ff:77:d0:43:06:9c:06:61:58:
         8b:b8:a1:aa:55:71:fa:bc:b3:ad:0b:b1:b5:af:4e:08:66:16:
         50:d6:8d:39:a3:eb:6f:fe:c8:c4:e7:4a:4d:50:ea:d4:09:47:
         6e:89:77:94:6b:38:18:60:f1:00:9f:b1:cb:8c:cc:c8:5e:76:
         b4:4c:b6:d4:22:73:c1:2a:ac:ed:a9:45:9f:b1:c6:9a:a1:57:
         07:e4:ec:26:3b:8e:a8:54:d1:d9:41:b2:88:ae:76:47:2f:55:
         c5:8b:e3:41:d1:a1:3b:0d:53:8b:ed:16:74:24:b7:98:84:5d:
         ab:ba:1c:7d:47:ce:c3:aa:cf:37:8d:f4:9d:69:e5:f3:e9:9f:
         fa:05:23:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----