Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3436e4dc-b63f-370b-af52-148694657ed9.roa
File:                     3436e4dc-b63f-370b-af52-148694657ed9.roa (raw, json)
Hash identifier:          oNfpwbtaE3uFLkXW6X2t4uc0y4QhBxGI3JO4nIXDwiY=
Subject key identifier:   FE:D8:31:3B:5C:26:58:E1:E2:00:C7:2A:F6:AF:57:81:28:F2:BC:0B
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858406AC562317525DE36A286D470
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3436e4dc-b63f-370b-af52-148694657ed9.roa
Signing time:             Fri 30 Dec 2022 19:54:08 +0000
ROA not before:           Fri 30 Dec 2022 19:54:08 +0000
ROA not after:            Sat 04 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        204.236.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:6a:c5:62:31:75:25:de:36:a2:86:d4:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 30 19:54:08 2022 GMT
            Not After : Feb  4 05:00:00 2023 GMT
        Subject: CN=7cb4a2d3-1c41-4d6d-afbd-18506adc6a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:29:44:8a:e1:0d:3a:f9:45:26:93:ba:2f:ff:
                    a2:11:9f:60:f5:85:42:2f:11:0a:ca:c7:db:dd:a3:
                    00:b7:80:0c:29:de:c6:60:8e:7d:66:3d:4b:a9:ad:
                    cc:63:74:5a:f0:ac:05:f7:88:eb:58:69:c7:e7:28:
                    5c:e8:3b:22:f1:ca:a9:1a:bc:68:33:c5:d2:e9:e0:
                    94:78:fd:38:4c:3d:12:6e:21:71:40:2b:54:49:1a:
                    d9:cc:22:03:18:6e:0e:1f:4b:79:e9:0f:8f:6d:3a:
                    75:7b:8e:96:f4:74:62:5a:9b:86:90:a4:11:b8:21:
                    63:5c:e8:db:11:a4:17:52:c5:90:52:b3:eb:e2:a7:
                    5e:7b:db:d2:a5:ed:9f:38:bb:1b:47:c9:a0:38:78:
                    8e:84:f4:f4:d1:25:e7:f0:76:83:78:87:0f:b8:aa:
                    27:07:65:8e:a0:78:10:9f:86:45:3b:07:62:4a:9b:
                    49:9c:8d:65:07:32:a8:54:bb:d5:37:96:97:80:16:
                    2b:5a:5b:47:67:70:2b:0a:af:ec:f2:69:f0:52:bc:
                    40:0a:82:86:3e:85:73:73:8e:35:16:d2:99:48:76:
                    2a:da:05:17:5f:ab:20:1c:28:d5:13:69:33:29:b0:
                    3e:f1:ca:f2:6e:e7:4f:d0:f4:da:69:27:aa:91:60:
                    a5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D8:31:3B:5C:26:58:E1:E2:00:C7:2A:F6:AF:57:81:28:F2:BC:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3436e4dc-b63f-370b-af52-148694657ed9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.236.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:13:ad:87:1e:1d:a6:e1:b9:98:ec:5d:16:89:8b:3f:9a:fc:
         c7:cc:d0:73:e1:12:7b:46:9f:db:12:08:b1:29:d0:b1:ea:70:
         24:fa:80:bb:8f:4d:be:20:ce:30:c3:c4:c9:da:0b:c7:8b:8f:
         31:5d:ea:0c:70:85:a3:d1:fe:87:06:ea:2f:28:70:51:c7:5b:
         c3:b1:6b:a6:a2:19:5c:9b:51:5d:1e:f2:f1:74:fb:41:af:5f:
         fa:07:c5:4d:c7:d6:2e:d3:74:b9:51:7a:57:6f:44:f5:d1:6f:
         ec:85:f1:23:24:e3:95:8f:1c:34:b4:28:1f:aa:77:86:5d:ed:
         fe:a2:2a:95:bd:57:2d:a8:cb:e3:75:29:ee:01:3c:c9:56:da:
         ab:84:d5:66:54:6e:85:3f:61:7c:55:e4:c1:94:28:ea:4d:f3:
         8c:86:fc:17:9e:2a:5f:6d:0d:d0:d1:91:b9:b9:a8:44:30:62:
         85:41:8f:73:be:1a:b0:5a:49:f7:38:3e:07:38:f5:6f:19:23:
         ba:37:da:8e:5c:61:41:72:c6:b5:f1:dd:e9:55:e3:b7:57:83:
         f3:86:68:71:d0:c9:06:1c:3b:2d:76:de:35:44:7c:6d:25:7a:
         ae:14:48:17:4b:3f:65:8f:9e:41:c4:e3:fa:8c:be:bf:bb:f1:
         7a:02:68:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----