Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a2b164b-1085-360d-b5d9-ac257613c1d0.roa
File:                     2a2b164b-1085-360d-b5d9-ac257613c1d0.roa (raw, json)
Hash identifier:          o1ZaUS3zAo8u7VrgJMPI0es3Lco63uXCbVqfdzlY9yM=
Subject key identifier:   8C:F3:DB:8D:F5:F1:31:2D:9E:0C:EF:80:58:CF:D5:55:08:7A:49:8C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840B8F7E4C5395A5C6CBF32A080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a2b164b-1085-360d-b5d9-ac257613c1d0.roa
Signing time:             Fri 27 Jan 2023 12:00:00 +0000
ROA not before:           Fri 27 Jan 2023 12:00:00 +0000
ROA not after:            Sat 04 Mar 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        67.202.0.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b8:f7:e4:c5:39:5a:5c:6c:bf:32:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 27 12:00:00 2023 GMT
            Not After : Mar  4 05:00:00 2023 GMT
        Subject: CN=21300007-e792-40a2-8a85-5f10622dde4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:be:c4:d7:bb:b8:d2:7e:c8:89:bc:7b:e1:39:
                    48:8c:de:8a:7a:1c:9d:e8:b8:a3:3f:04:40:14:ab:
                    d0:66:8f:a3:f9:8f:36:23:c3:c2:23:1f:f0:50:f9:
                    c7:8c:b0:6d:9b:9d:62:b2:cb:89:73:0f:2f:26:ba:
                    9a:e2:5e:55:55:b0:7b:4a:8d:e7:bc:61:e3:b9:8e:
                    f0:b4:ad:58:b1:33:59:5f:5a:dc:0c:b1:6a:49:b9:
                    da:9c:c3:54:b6:22:ed:0b:32:bc:9e:92:48:81:d6:
                    35:47:3b:99:9b:e8:65:d8:df:5c:71:3d:bf:bf:25:
                    3e:6c:87:f8:5c:dd:ca:6f:6c:13:b4:cb:31:66:e9:
                    87:f1:46:39:c9:96:a6:c9:87:1d:ec:6e:02:22:e1:
                    bc:43:70:31:a8:b1:9f:fa:ae:47:d2:ec:0d:47:cd:
                    79:67:17:3b:82:d6:74:18:a4:bf:aa:f9:a1:1c:3b:
                    8a:df:fc:6f:a4:c4:87:10:a2:bc:c0:dd:ba:33:a2:
                    53:f1:26:c1:55:50:2a:dc:e4:38:03:aa:69:15:9a:
                    54:59:c9:48:27:8c:98:06:0c:0b:8a:0d:fe:ea:da:
                    ab:da:b4:e7:78:cf:c9:dd:5a:9a:00:df:f8:86:e8:
                    09:66:f0:16:f9:42:51:f8:94:b3:c9:24:8a:eb:80:
                    fe:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F3:DB:8D:F5:F1:31:2D:9E:0C:EF:80:58:CF:D5:55:08:7A:49:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a2b164b-1085-360d-b5d9-ac257613c1d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.202.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:71:b6:de:f2:36:f4:63:df:47:1a:2c:a4:c2:56:c5:dc:80:
         5b:54:bd:f7:03:19:73:7e:5d:f6:c6:7a:46:91:73:c9:db:2b:
         43:da:60:15:77:7d:d4:9d:07:a4:ff:a0:26:16:58:bc:75:c2:
         72:2b:7e:0b:e6:be:39:51:2e:8d:cb:9f:48:32:5e:a6:09:a2:
         c4:51:9b:87:c1:bc:52:01:9a:13:46:79:0e:8a:13:23:ce:bd:
         ca:9c:ff:7f:54:b4:de:e5:50:ef:20:61:17:d2:55:f5:20:46:
         0a:45:f6:aa:c8:5f:ff:69:e3:d7:1d:67:aa:61:f5:17:55:b8:
         5d:81:8d:d1:71:35:f2:83:0a:6a:ad:05:e9:70:63:a3:ad:0a:
         5c:d9:5e:83:53:d1:7d:8d:ba:57:e4:86:ad:c0:17:34:13:1b:
         a9:91:60:0a:65:7e:57:28:41:68:86:45:c2:31:c2:00:16:ee:
         fe:60:46:10:4d:ea:1e:63:13:5e:b3:c8:9d:2f:0c:8b:ed:bb:
         65:71:a0:7b:b1:8e:a0:88:60:f9:6f:ad:86:6a:9c:36:76:cd:
         f5:29:85:07:84:6b:34:24:e9:f9:4d:5d:95:2d:56:73:19:09:
         a3:a4:35:e4:89:1e:79:4a:97:7d:74:f4:88:ba:18:fc:cc:82:
         84:bf:00:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----