Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2ca82031-43b0-33c0-94fa-83e742eeb2c1.roa
File:                     2ca82031-43b0-33c0-94fa-83e742eeb2c1.roa (raw, json)
Hash identifier:          DAExfAOl0zUtuDuo3ykNVbG3K6LadIRLWbai4b9i18c=
Subject key identifier:   6B:95:F8:E6:1F:7E:53:6F:52:2F:75:EB:B8:5A:88:DA:B0:AF:21:82
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840431AE20C6200DAD681F3D700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2ca82031-43b0-33c0-94fa-83e742eeb2c1.roa
Signing time:             Fri 16 Dec 2022 12:00:00 +0000
ROA not before:           Fri 16 Dec 2022 12:00:00 +0000
ROA not after:            Sat 21 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        71.145.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:43:1a:e2:0c:62:00:da:d6:81:f3:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 16 12:00:00 2022 GMT
            Not After : Jan 21 05:00:00 2023 GMT
        Subject: CN=efc609df-1827-4239-9a83-33e13c44c295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b0:bb:ee:fc:60:d1:9e:1e:2f:ef:0d:b8:50:
                    79:5c:f1:01:7c:23:9b:d1:5a:04:5d:5d:d5:fa:15:
                    28:a8:54:95:31:c5:66:4d:4e:df:b4:4b:e7:6c:bc:
                    72:c6:bb:5f:19:fa:55:21:0d:e8:d4:18:27:e6:3c:
                    d2:85:d4:69:51:6d:e0:46:e1:3e:b2:98:c9:46:6d:
                    63:9a:c5:c0:0d:a1:1a:ea:1f:6d:61:e4:32:b2:e3:
                    d7:56:37:e2:4b:f4:be:33:f2:2c:a6:c9:87:08:5a:
                    a1:9a:93:71:ef:18:b9:2e:22:52:bd:8c:d3:8b:12:
                    d6:99:c2:39:36:59:15:48:07:0b:33:88:30:06:73:
                    52:bf:ce:e1:50:5c:2b:31:c2:a0:c6:91:ef:74:1e:
                    0b:ff:ce:b3:58:d1:13:dc:70:9d:4f:07:da:66:0c:
                    c1:06:21:18:b4:19:16:4c:47:c8:c7:5d:1a:8c:81:
                    21:7b:61:40:02:88:5e:03:04:84:f1:48:4c:93:af:
                    9b:17:1a:12:d3:a8:9b:31:8c:74:8f:32:99:bc:d9:
                    3a:c8:f6:e3:44:84:4f:2c:f7:f4:41:40:3f:7c:67:
                    dd:ca:03:1f:16:e9:f8:10:de:65:8b:ed:fc:27:58:
                    bb:1f:b1:30:ab:4b:1a:56:88:02:f7:cd:42:d7:8c:
                    f1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:95:F8:E6:1F:7E:53:6F:52:2F:75:EB:B8:5A:88:DA:B0:AF:21:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2ca82031-43b0-33c0-94fa-83e742eeb2c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.145.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:82:59:38:7d:f9:8f:06:1e:cd:a6:10:b7:fd:6f:83:3c:b8:
         38:0c:bd:b2:c9:e0:a3:7a:b7:21:00:27:da:40:7c:4e:ad:da:
         ea:50:0b:b2:43:b9:d8:c1:ed:dd:18:36:40:4b:05:dc:b1:4b:
         bc:2e:48:e6:55:d6:21:8a:91:c4:4b:04:a5:85:3c:cc:39:9f:
         94:15:e0:83:60:25:c4:ea:bd:17:44:a2:58:ca:82:d2:b1:68:
         f9:ac:f6:1a:e5:23:8c:c8:ca:ec:90:b0:0b:2c:a3:91:60:84:
         6e:ee:7f:48:fb:cd:bd:36:2a:2c:3e:2f:d6:43:1a:41:d3:20:
         7d:fe:d8:81:11:25:93:72:a5:89:ba:bc:46:05:ab:f3:51:c2:
         6d:df:9a:34:45:54:6b:81:2f:55:4f:f0:f5:12:56:ea:f8:b6:
         d0:57:ba:45:1f:88:e6:64:5c:fd:18:c2:24:25:1d:3f:fd:5d:
         2f:1c:5d:6d:58:8a:1d:93:6c:bb:c9:4d:89:13:6a:57:30:c3:
         2e:16:4a:b2:60:70:e2:47:22:1d:0c:c6:da:f2:3b:69:27:d0:
         ec:db:95:a5:de:87:1b:c2:25:3b:aa:2b:d2:f9:ec:dc:8a:57:
         f1:fc:12:ae:6e:a2:2d:e0:82:24:7f:e0:46:54:9c:4d:e3:84:
         6e:a7:ee:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----