Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/29228c53-79fc-31c2-8be1-75cbf41ed422.roa
File:                     29228c53-79fc-31c2-8be1-75cbf41ed422.roa (raw, json)
Hash identifier:          e3v7Pp+apnJAVKpZvatLmmqltZRCmwECFcbonnIBNU0=
Subject key identifier:   06:DC:E3:17:B2:91:95:0B:50:ED:43:F1:C0:0B:84:8D:11:D5:18:C4
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858407AFFA22E71D0B9C2CFAFD980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/29228c53-79fc-31c2-8be1-75cbf41ed422.roa
Signing time:             Thu 05 Jan 2023 12:00:00 +0000
ROA not before:           Thu 05 Jan 2023 12:00:00 +0000
ROA not after:            Fri 10 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        138.70.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:7a:ff:a2:2e:71:d0:b9:c2:cf:af:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  5 12:00:00 2023 GMT
            Not After : Feb 10 05:00:00 2023 GMT
        Subject: CN=779fc878-a99b-41b8-a0c3-f161d93ae8a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:bf:0b:81:7e:9b:bb:27:3d:b7:28:bd:80:fe:
                    cf:94:15:ec:d5:45:bc:ad:5a:48:dd:c8:ac:57:45:
                    a5:17:d3:75:d2:b4:64:2a:50:31:cc:fd:d2:30:59:
                    bc:f7:af:3d:40:3d:fc:af:01:35:43:09:92:19:53:
                    0e:9a:b5:c3:8a:84:6b:a6:10:9d:af:ac:d7:b5:f2:
                    47:c1:5f:c6:79:1e:a5:62:f1:36:54:e0:dd:e0:23:
                    27:e2:a9:f5:04:c3:53:72:9c:3c:39:cd:4a:c3:3d:
                    3f:04:76:a5:bc:0f:d6:29:fe:c7:05:6b:56:6f:88:
                    a3:86:52:ab:da:fa:00:5f:8b:0e:bc:a1:85:6b:a7:
                    dc:9d:16:28:ee:75:8c:3a:44:8d:f3:f7:7f:23:15:
                    aa:63:61:7d:99:0e:a7:5d:b1:52:94:68:f4:ed:39:
                    57:66:6a:3b:a3:0f:76:e9:f8:93:bb:fd:ef:75:28:
                    9d:9d:be:94:23:e6:fd:d8:c1:d5:e3:cc:c5:2b:f4:
                    35:3f:58:43:b9:17:c9:29:96:c4:50:77:38:29:92:
                    81:72:72:f2:d4:61:74:70:41:97:57:39:1a:f8:02:
                    bd:ca:05:b5:fc:d9:b6:67:e8:da:bc:6a:81:10:61:
                    2f:6b:6c:ba:21:7b:be:60:04:93:af:e5:4d:1c:86:
                    36:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:DC:E3:17:B2:91:95:0B:50:ED:43:F1:C0:0B:84:8D:11:D5:18:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/29228c53-79fc-31c2-8be1-75cbf41ed422.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.70.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:cc:66:1d:e5:86:a4:23:be:44:7e:79:49:df:95:72:6d:b6:
         13:c6:f8:85:ce:a9:21:1d:eb:51:e0:09:e3:7b:fc:7a:f0:ee:
         55:49:21:86:95:0b:a8:11:51:e8:56:e5:df:18:b7:5e:77:d7:
         36:b5:75:10:a5:b8:13:37:37:8f:4a:91:ca:63:fa:40:c3:1b:
         5d:b8:24:84:b8:37:78:d0:42:1e:bd:dd:6a:ef:b2:b3:26:d0:
         19:14:07:77:82:54:c3:a1:0a:73:41:6d:ee:e3:9e:d4:b9:09:
         a1:e1:27:01:01:b1:c8:9e:67:c2:20:15:f9:d3:46:6e:67:6f:
         0c:bd:29:36:a3:27:94:93:53:07:d3:1b:ea:0e:7f:02:5b:f5:
         5b:97:c9:b9:94:50:8c:7f:a3:9b:aa:0c:82:04:58:89:8c:4d:
         a0:b7:46:d3:c0:21:69:48:43:18:7b:b3:84:8d:10:b5:93:2f:
         1e:03:75:fe:4d:0a:ee:42:20:56:b7:b0:f2:c9:48:72:ea:bd:
         24:6a:15:e7:b3:4a:c9:c0:ce:61:36:c7:7a:59:f2:5a:16:38:
         8e:7d:4f:f9:af:42:41:64:ef:a0:92:32:39:8f:5d:dc:7c:55:
         2c:fb:6c:a6:7d:af:0a:24:7a:b4:c6:4f:c1:79:e3:7b:ee:f7:
         54:00:ae:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----