Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/35bdcc6a-6d4c-3ee4-bf31-9dc6a4e09ec4.roa
File:                     35bdcc6a-6d4c-3ee4-bf31-9dc6a4e09ec4.roa (raw, json)
Hash identifier:          VPWqdRWb37qkW/7p3ySKx1cwlds5S95N/jlqJHybkYk=
Subject key identifier:   3A:B8:A1:3B:B7:81:9E:A7:0B:D4:46:B0:75:AE:1B:80:F4:FD:56:96
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840B7570C84CC64799994B21E44
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/35bdcc6a-6d4c-3ee4-bf31-9dc6a4e09ec4.roa
Signing time:             Thu 26 Jan 2023 15:12:07 +0000
ROA not before:           Thu 26 Jan 2023 15:12:07 +0000
ROA not after:            Fri 03 Mar 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        54.115.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b7:57:0c:84:cc:64:79:99:94:b2:1e:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 26 15:12:07 2023 GMT
            Not After : Mar  3 05:00:00 2023 GMT
        Subject: CN=955ee268-552c-42a5-9d73-4d02b8724542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:50:ef:25:f3:dd:e6:2d:a4:17:64:1f:56:8f:
                    fd:1f:27:bc:59:1c:33:15:92:bf:b3:8c:32:74:fa:
                    23:38:01:70:3a:5d:7a:32:4e:dd:53:ee:bf:be:64:
                    17:72:6b:cc:11:29:72:92:91:30:24:5f:c1:e7:1a:
                    6a:e3:f5:c7:6f:f6:53:c7:f5:29:5b:bb:63:50:ae:
                    a3:e4:3f:3c:92:2b:7a:eb:cc:63:8c:e4:46:aa:eb:
                    2d:6e:d3:3c:39:0b:0e:12:42:3e:c5:eb:28:1d:e3:
                    78:fd:6d:81:41:ec:fc:ef:57:aa:e2:64:ba:28:9a:
                    38:6b:5e:85:c6:a9:bd:04:31:2e:66:38:84:8b:9d:
                    43:cf:0c:71:63:fc:91:ee:a0:b3:13:a0:1d:06:34:
                    5f:3f:3b:2a:97:94:80:b9:93:29:89:2f:1b:95:cd:
                    16:33:ae:d1:d5:fe:d4:e1:bc:12:5c:00:4e:53:97:
                    0f:2b:30:aa:24:b3:4b:c3:22:34:10:e4:86:c8:c9:
                    10:df:bd:2d:51:a3:84:68:84:e6:05:86:49:66:3c:
                    0c:6f:66:a5:46:c7:71:17:31:80:55:f1:65:33:99:
                    90:52:c5:14:1e:c8:12:08:63:18:fe:79:ad:81:bf:
                    7e:02:7c:7e:57:25:60:94:73:53:7c:04:05:49:fd:
                    f4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B8:A1:3B:B7:81:9E:A7:0B:D4:46:B0:75:AE:1B:80:F4:FD:56:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/35bdcc6a-6d4c-3ee4-bf31-9dc6a4e09ec4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.115.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:31:50:a3:9d:94:4b:14:60:2f:26:a0:06:40:b6:88:6f:c6:
         c7:2f:cf:aa:be:b9:0c:e8:44:73:49:dc:92:33:99:7c:2c:17:
         9f:84:5f:14:17:45:e1:f5:ab:48:a4:df:89:8e:6a:5b:8b:27:
         17:4e:45:ca:3c:4d:8b:59:36:ab:19:51:9b:03:31:fe:3b:42:
         c5:89:be:e0:c0:f3:ea:03:e7:52:7d:be:f5:9c:69:cb:8b:3f:
         de:e1:35:07:3f:3e:9f:11:50:f2:8a:ed:5b:59:21:d1:13:aa:
         27:f4:35:9b:93:3d:15:7a:b6:45:70:bc:05:d9:e6:59:4c:6a:
         c4:35:32:ce:0a:b6:b5:d8:2b:b5:97:52:fb:f5:82:3e:dd:fd:
         11:3d:71:23:fb:0c:30:c7:57:8e:ad:eb:bf:19:84:28:e5:59:
         c7:b4:06:fc:69:b4:ad:ec:07:2a:3c:f5:e3:10:9a:f8:88:32:
         51:07:9e:e2:95:4f:d0:93:93:b6:9a:11:7a:17:69:d7:8f:5d:
         64:b6:9e:3e:09:04:55:82:6f:f7:0f:db:9f:c3:52:42:b8:4f:
         4f:32:a6:80:82:bd:b6:c5:50:18:bf:48:5b:e0:2f:ba:8d:03:
         ef:a9:61:c6:70:e6:02:c0:2b:3f:9d:d1:05:7d:b7:fd:2d:d6:
         8a:6f:d9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----