Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/29a2e78e-5e56-3f2f-8187-ded61023ddf7.roa
File:                     29a2e78e-5e56-3f2f-8187-ded61023ddf7.roa (raw, json)
Hash identifier:          IbzVW6o+m85OVc3o9LV4V0KVVLCToEO4HMe1p+s+Igo=
Subject key identifier:   FE:34:B7:75:93:5A:CD:78:03:EC:62:2C:11:E2:AC:26:BF:F4:08:86
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840D4C55B1E403470E1A99E2900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/29a2e78e-5e56-3f2f-8187-ded61023ddf7.roa
Signing time:             Mon 06 Feb 2023 12:00:00 +0000
ROA not before:           Mon 06 Feb 2023 12:00:00 +0000
ROA not after:            Tue 14 Mar 2023 04:00:00 +0000
asID:                     16509
IP address blocks:        162.219.224.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:d4:c5:5b:1e:40:34:70:e1:a9:9e:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  6 12:00:00 2023 GMT
            Not After : Mar 14 04:00:00 2023 GMT
        Subject: CN=918fceb5-8002-4fdd-b080-e5794edd42b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:74:67:25:d3:b4:b5:bb:58:e4:50:5a:10:e6:
                    32:e0:3e:f4:53:d3:33:c2:d8:16:b5:73:c2:c3:04:
                    09:79:63:0f:a6:fb:61:8c:b2:98:cc:78:4c:c1:91:
                    1c:f2:2a:e7:42:eb:81:a3:5e:5c:e1:fc:89:d6:21:
                    09:18:1b:c1:99:ab:fb:c2:b8:a9:36:a0:56:4b:6a:
                    aa:00:c3:93:99:43:ee:80:16:df:3f:50:c4:0a:79:
                    09:40:73:48:ed:73:8f:8f:d3:0a:8e:a1:59:8c:27:
                    30:79:5b:58:02:e9:52:13:dc:6a:78:76:4c:63:c4:
                    8b:55:45:2d:b4:fc:6f:67:9f:2d:7a:7c:bd:50:53:
                    2d:ec:26:39:55:db:a7:9e:fb:fb:c2:10:dc:da:bb:
                    66:61:7d:09:da:33:66:2d:b3:de:0a:5b:07:83:00:
                    85:cd:53:48:c1:5f:53:f7:48:b9:be:ec:c8:69:f1:
                    86:30:43:a3:70:e5:07:3a:6b:30:34:c5:ae:a4:16:
                    d0:51:40:62:0b:f4:94:ec:37:e6:df:ab:4b:5a:2e:
                    40:24:ee:3c:42:b0:78:07:31:2e:34:1a:68:da:66:
                    83:7e:bb:ba:66:54:ab:3a:0f:e2:1d:34:9a:b1:17:
                    49:7a:b5:86:0f:e1:35:0b:ee:8c:bf:97:8c:c7:a5:
                    08:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:34:B7:75:93:5A:CD:78:03:EC:62:2C:11:E2:AC:26:BF:F4:08:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/29a2e78e-5e56-3f2f-8187-ded61023ddf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.219.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:3c:fe:e1:10:d0:bf:21:7d:4a:44:17:bc:87:93:ab:0a:62:
         90:c4:eb:9d:0e:f1:19:e7:13:6f:ff:61:87:da:fa:f2:89:0e:
         a7:48:30:a7:12:6c:71:2a:af:89:a8:90:7e:d0:bf:52:fd:4f:
         37:74:95:29:93:5f:e7:56:33:81:48:36:34:70:04:71:5c:7f:
         c3:58:b6:c3:55:63:7c:97:1e:cc:5f:ef:9f:a7:74:49:c8:f0:
         ba:e7:63:d3:2c:a1:73:c3:d5:41:05:47:79:15:4e:95:56:7c:
         f6:3b:16:e8:12:7e:ec:df:4c:6a:c0:d5:16:72:3c:c8:1f:3b:
         6a:87:ce:52:9a:51:fc:bb:a8:87:c3:53:c3:64:0f:50:fb:8c:
         80:70:8c:e3:a2:38:c7:c8:c9:b3:18:12:a4:1a:9a:34:ab:02:
         1e:52:39:eb:62:b6:fa:6d:1e:98:f8:65:4d:f2:2c:bc:2e:bf:
         0e:63:a2:3d:82:90:8e:23:b2:89:f3:dd:6d:6e:40:66:b6:ea:
         84:b9:ef:70:58:a0:6d:e5:39:87:4c:e6:37:61:c5:75:ae:70:
         8f:58:ea:09:22:55:46:61:52:15:73:e6:e2:6d:82:99:86:6e:
         0d:4f:91:f1:b0:f0:54:79:8d:cd:8e:7c:a2:69:c8:4b:31:fd:
         d0:82:57:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----