Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/355166c2-dfc7-3ac8-b67d-e6342f13aaeb.roa
File:                     355166c2-dfc7-3ac8-b67d-e6342f13aaeb.roa (raw, json)
Hash identifier:          6yjqi4O/YbmK1XTGrwwDiN+lNaMotTYDEdF8nzkqOhs=
Subject key identifier:   02:5F:34:11:8A:6F:6A:47:EC:3D:95:AB:39:67:5E:CE:E5:B1:41:F9
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858409CC2D822ADBE76B79FC011C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/355166c2-dfc7-3ac8-b67d-e6342f13aaeb.roa
Signing time:             Tue 17 Jan 2023 12:00:00 +0000
ROA not before:           Tue 17 Jan 2023 12:00:00 +0000
ROA not after:            Wed 22 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        56.98.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:9c:c2:d8:22:ad:be:76:b7:9f:c0:11:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 17 12:00:00 2023 GMT
            Not After : Feb 22 05:00:00 2023 GMT
        Subject: CN=0bc920b8-5728-485c-bc1b-034e6acf0df1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:46:41:bc:57:d9:ec:04:42:95:4f:a0:6d:66:
                    08:82:ae:96:ee:8c:d3:2d:3b:f6:77:49:13:e6:b6:
                    80:be:b9:58:b0:38:54:f1:d8:a1:ec:64:ef:f9:53:
                    61:9e:8c:d7:c9:a6:b7:cb:db:26:d1:be:51:2a:da:
                    3d:5f:62:23:57:d9:56:7d:86:b1:99:47:ee:ea:35:
                    96:b3:bf:e7:c0:af:5b:82:9f:0f:ab:38:21:b9:2f:
                    cb:c7:09:59:1d:56:37:93:69:47:94:52:39:e4:5a:
                    8f:1d:6e:e0:df:0a:f4:47:3b:6d:ea:d7:8a:3e:16:
                    d5:8b:dc:95:3e:91:e5:b9:7c:1c:b6:a3:e1:db:2e:
                    cc:e3:cc:b3:28:e4:74:88:6f:a9:71:30:9b:41:23:
                    e3:8d:57:83:4f:af:05:6c:2c:6f:c6:0f:3d:77:b7:
                    23:60:92:99:3f:57:6a:ef:db:e1:ea:80:c3:45:94:
                    b5:33:67:11:eb:da:bd:13:41:7e:18:68:ef:7b:14:
                    4e:81:17:7b:a8:68:17:68:b9:bf:eb:c6:fb:de:68:
                    23:ab:b0:31:88:7a:fb:e1:25:63:36:fd:4b:50:f1:
                    cf:1e:70:73:96:9b:22:ec:76:dc:14:3d:c2:4d:b3:
                    21:72:5f:62:d5:fb:c8:c4:17:b0:4c:f9:57:2e:dd:
                    78:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:5F:34:11:8A:6F:6A:47:EC:3D:95:AB:39:67:5E:CE:E5:B1:41:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/355166c2-dfc7-3ac8-b67d-e6342f13aaeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.98.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:29:88:93:e5:f5:8f:c7:1d:a7:6c:5b:db:b9:64:82:ca:d4:
         d5:b8:a8:e7:b5:cb:8c:36:6d:35:42:46:b7:8b:67:24:8b:ce:
         e2:9d:dc:83:bf:23:7b:2e:2d:bf:63:ea:0e:09:5d:36:5d:4b:
         f3:12:55:60:b7:ba:1d:8d:5a:b1:ea:19:eb:ac:d3:36:7e:a8:
         97:3d:9a:f4:1b:cf:2f:e9:e0:9a:0d:36:56:02:95:97:85:b8:
         61:ac:ca:bb:a1:e7:d7:4e:89:eb:f4:c5:58:46:dd:64:e4:0c:
         16:2c:ff:db:05:b0:7d:33:85:22:80:d9:66:c5:24:3a:40:a3:
         18:37:19:73:e9:01:94:9f:88:53:ae:63:86:56:97:4b:f4:ea:
         bd:ec:5d:1a:67:44:f1:b2:b3:07:e0:9c:0e:9c:d9:4e:83:9a:
         09:c4:42:68:9a:74:7e:1c:88:87:8d:89:68:aa:a8:bd:dd:b4:
         3d:e6:6a:68:c1:3f:11:59:2a:fb:62:bc:14:4e:e4:72:44:46:
         a7:9c:db:2a:77:1b:39:21:8f:da:11:d4:76:f4:d6:b9:15:b7:
         61:34:c9:68:c5:86:0b:e4:91:bb:3b:62:7b:3c:09:dc:05:57:
         70:70:27:f5:98:66:a6:90:19:a5:c3:14:1c:40:17:fc:7f:35:
         a8:34:78:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----