Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/327bc706-f525-3238-adaf-9e4590a37198.roa
File:                     327bc706-f525-3238-adaf-9e4590a37198.roa (raw, json)
Hash identifier:          TgdiFmWK/tRCdJkIx+Eyg+hnchxIod+dDpEspngqoao=
Subject key identifier:   56:C8:3F:97:B5:EE:DA:EF:C9:27:76:78:07:BE:79:55:64:CE:AC:96
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840D490E4F75200CDF4E6806400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/327bc706-f525-3238-adaf-9e4590a37198.roa
Signing time:             Mon 06 Feb 2023 12:00:00 +0000
ROA not before:           Mon 06 Feb 2023 12:00:00 +0000
ROA not after:            Tue 14 Mar 2023 04:00:00 +0000
asID:                     16509
IP address blocks:        66.157.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:d4:90:e4:f7:52:00:cd:f4:e6:80:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  6 12:00:00 2023 GMT
            Not After : Mar 14 04:00:00 2023 GMT
        Subject: CN=4e57430e-e256-4465-bee0-d63513f1f029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e9:20:c8:93:40:3c:b3:59:3d:8d:4a:4f:e7:
                    ea:c2:1a:c6:a5:a1:fd:21:02:eb:0c:bd:83:50:0c:
                    14:23:d0:1c:f4:06:07:55:a0:c8:30:d1:2a:31:db:
                    e1:f7:7d:76:37:bb:f0:52:1a:4d:da:24:f0:04:7e:
                    d1:b5:1f:29:47:b7:64:35:e7:01:ba:68:85:07:51:
                    c2:44:88:b1:ee:41:8d:2e:c9:fb:21:f2:c9:94:a7:
                    09:74:01:41:f7:7f:c1:ba:76:80:1b:aa:af:89:75:
                    80:bc:e4:fb:ae:66:b2:40:a4:b3:4d:b1:ef:29:ef:
                    d6:92:4d:83:e4:17:a3:a6:68:6f:0a:56:e6:a8:e3:
                    d9:8b:f6:5a:af:cb:8b:74:91:bd:2b:0e:ac:36:ef:
                    0d:8b:16:3f:79:61:99:b5:f4:68:8a:ce:59:e4:0a:
                    1c:2d:3b:ae:3f:27:25:44:a7:1c:bd:99:c6:88:a7:
                    28:6f:bf:f7:35:62:d2:bb:bd:99:a9:32:81:99:2a:
                    e4:b8:b8:97:e6:6d:3f:56:01:7d:af:4f:8a:95:08:
                    87:28:ca:75:40:01:ea:f4:bb:0b:7b:3e:79:cf:a6:
                    c8:b8:68:9b:f4:f3:9f:ff:fb:43:a8:13:c6:2a:60:
                    d6:86:f2:43:a0:c1:38:a3:76:ef:c1:96:31:8b:9b:
                    3b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C8:3F:97:B5:EE:DA:EF:C9:27:76:78:07:BE:79:55:64:CE:AC:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/327bc706-f525-3238-adaf-9e4590a37198.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.157.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:89:27:c1:d5:88:00:9f:76:b5:3d:92:33:82:85:66:fb:da:
         3e:e1:86:27:8b:31:e0:26:29:cb:e3:7b:0b:e3:26:4e:40:c4:
         46:02:5a:3c:62:c0:69:a9:c0:bf:3c:98:cc:10:e6:1a:5d:c9:
         cf:47:a5:cb:52:35:ab:ab:96:19:da:ea:52:dc:7d:23:57:12:
         55:d5:79:d9:1c:b3:43:f5:16:65:1d:95:80:3c:f7:83:ae:ee:
         c6:7d:05:6c:af:45:48:9c:b4:b5:c5:c5:6f:a7:04:c1:4d:5d:
         6d:53:d3:ac:35:3d:72:5e:32:02:5a:97:e3:a4:ca:d5:07:c2:
         88:f3:d5:95:2a:5e:a2:ac:c0:7b:31:b9:2e:07:a5:20:b4:e0:
         db:43:f8:52:2e:0b:38:e2:ef:8d:59:09:ff:9e:d3:a4:0a:6d:
         d3:bf:11:ea:6c:54:1f:da:6b:3b:b0:71:93:56:e6:48:a5:91:
         1c:9b:42:5e:23:f2:8d:57:4a:e7:55:43:a5:36:57:96:c5:70:
         e0:46:60:76:6e:57:7e:78:69:37:19:bc:93:03:51:d9:87:be:
         cc:8f:cb:90:c7:69:4d:4d:fd:34:60:22:6e:7c:e2:da:28:18:
         48:bc:02:2a:c9:f5:2b:69:16:94:62:85:eb:8c:3e:a7:6a:38:
         8f:85:93:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----