Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25d2dc62-ea25-3f32-a7b2-65e9fb84904c.roa
File:                     25d2dc62-ea25-3f32-a7b2-65e9fb84904c.roa (raw, json)
Hash identifier:          F36DyIlndX034UOUI5JSJ2bR3E+BLIrfMSmscOCEAa4=
Subject key identifier:   FC:98:0C:1B:87:3F:3F:99:B4:92:98:9F:51:0C:D6:4A:7C:0E:DE:81
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DCB54787E354C4F1D1B841880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25d2dc62-ea25-3f32-a7b2-65e9fb84904c.roa
Signing time:             Tue 03 May 2022 12:00:00 +0000
ROA not before:           Tue 03 May 2022 12:00:00 +0000
ROA not after:            Wed 08 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        136.18.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cb:54:78:7e:35:4c:4f:1d:1b:84:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  3 12:00:00 2022 GMT
            Not After : Jun  8 04:00:00 2022 GMT
        Subject: CN=af1973df-d64e-4a10-8a1f-b93470e19bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:20:9e:28:43:e3:cd:95:01:69:9a:a0:e2:12:
                    45:bd:8a:d5:26:ad:5b:fd:74:07:94:0f:d9:4b:20:
                    4e:3b:bb:74:16:13:9f:a6:8d:a0:48:de:94:fe:56:
                    d4:12:38:67:bd:c8:9b:b4:b9:b4:66:21:91:ed:5a:
                    58:0f:3f:05:91:46:ab:b4:8e:d9:90:e1:73:3a:10:
                    72:8f:e3:06:2c:8b:60:67:a9:c9:57:92:7e:e3:0e:
                    0f:ee:cd:54:a4:29:08:38:39:5c:e9:b1:f5:89:72:
                    6f:54:a3:4e:19:1b:c7:51:27:97:5d:67:d0:51:76:
                    af:62:f0:c9:36:d7:f6:94:ac:59:bf:02:9a:0b:05:
                    96:76:0b:b8:c6:9a:ea:0c:2e:4b:99:d3:3a:b5:48:
                    24:11:20:f7:9e:5a:e5:42:44:a1:00:c2:ee:b5:54:
                    63:05:47:7f:20:6f:80:94:b7:08:93:95:26:93:81:
                    24:7b:fa:c2:cb:93:6f:60:96:04:c5:fa:72:7c:b0:
                    3f:99:42:5a:ba:34:da:0a:ff:06:60:43:37:ac:8e:
                    ee:dd:9c:85:7d:4f:0b:e1:f9:c6:f2:82:c3:d2:7b:
                    51:af:c2:0f:76:ba:04:0a:93:d9:46:06:25:0f:0e:
                    51:b0:44:b4:be:d3:70:5a:c4:06:5f:49:30:3b:19:
                    8d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:98:0C:1B:87:3F:3F:99:B4:92:98:9F:51:0C:D6:4A:7C:0E:DE:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25d2dc62-ea25-3f32-a7b2-65e9fb84904c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:cb:87:d4:a6:bb:02:e3:9b:a6:2c:f6:b7:50:a2:47:8e:7c:
         fb:c3:30:7c:19:64:44:57:63:ee:96:3c:a6:ad:19:57:ca:bc:
         23:3d:e4:27:fd:d3:7c:0b:76:5b:0d:de:2d:d5:68:7a:8c:9c:
         35:e9:04:68:4f:23:51:45:90:45:d7:4a:74:99:4f:20:83:42:
         b5:5e:1d:ff:f2:72:c4:55:12:89:49:3b:91:de:62:46:a0:01:
         86:37:2d:79:bf:1f:4a:eb:39:69:e2:9e:79:2e:4b:da:8c:4b:
         cd:86:be:c4:18:dc:fc:52:c8:f8:1b:97:93:1b:b6:61:dc:f8:
         d2:8b:f1:49:62:1d:27:48:62:dd:37:79:b2:e9:3b:7a:d5:c9:
         17:eb:9e:41:d0:57:82:86:e5:ec:f0:fc:93:5a:6f:06:35:e9:
         78:a7:54:7d:6f:a0:d0:cb:18:f3:93:7c:62:63:1d:6a:ba:3c:
         76:a1:cb:58:f5:67:74:27:a5:34:06:f7:47:2e:da:a0:b3:5b:
         5e:e3:67:8f:08:71:7a:36:91:5c:ae:8f:3b:0f:ca:72:f7:ed:
         6a:48:88:fa:09:2c:ec:14:d3:4a:e4:0a:46:83:e6:28:b6:31:
         77:00:35:d4:7d:43:b5:64:06:42:c0:3b:5c:1a:76:35:ec:ce:
         a9:89:a3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----