Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/370ee77c-a0b1-310f-9888-320b6e0fee59.roa
File:                     370ee77c-a0b1-310f-9888-320b6e0fee59.roa (raw, json)
Hash identifier:          q2+QVyxTnOZP9V0ODfeVA0nDy2leRLt704PS+Ex8kic=
Subject key identifier:   3F:2E:F6:47:11:85:A3:6D:1C:8D:E7:81:BA:F8:10:CB:EE:61:B2:D0
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858409ADEF418EE5F8CD4C7AEAD60
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/370ee77c-a0b1-310f-9888-320b6e0fee59.roa
Signing time:             Mon 16 Jan 2023 12:00:00 +0000
ROA not before:           Mon 16 Jan 2023 12:00:00 +0000
ROA not after:            Tue 21 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        56.229.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:9a:de:f4:18:ee:5f:8c:d4:c7:ae:ad:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 16 12:00:00 2023 GMT
            Not After : Feb 21 05:00:00 2023 GMT
        Subject: CN=d82ee533-2ffd-4d4e-91a0-e48f7380c975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0d:3d:c5:43:52:5c:f1:1f:f6:57:77:81:a7:
                    9c:38:99:6a:f1:b8:7c:24:fd:65:97:92:ae:f3:2c:
                    87:8b:9b:53:ff:0f:a1:12:50:52:78:4d:93:e1:98:
                    e2:ce:e4:9d:9b:8f:f9:73:b8:84:72:9c:b7:42:4f:
                    b6:46:22:44:1e:f2:75:d2:84:d1:84:15:1b:55:62:
                    03:7c:b4:fc:f4:6d:8d:8e:a5:21:3b:97:2a:0e:13:
                    80:dd:e2:e1:95:72:b1:b0:28:fa:ca:c4:b5:e6:8a:
                    9c:81:35:1c:7e:7f:16:1e:1d:39:77:82:df:80:ff:
                    c2:75:66:89:4a:53:51:36:cf:3b:ff:c1:49:2b:29:
                    69:a7:08:2b:79:8b:ac:97:a0:6c:50:8e:79:16:01:
                    bc:ab:45:bc:a6:51:67:c7:2e:04:3f:b9:ea:e4:cd:
                    a4:82:da:b4:f6:a7:ad:07:16:4d:29:32:5b:89:27:
                    85:a9:79:90:bf:71:b0:29:cb:68:68:8e:82:6d:4d:
                    c8:5b:55:af:7b:1a:2e:ab:66:ca:8c:59:1c:5c:12:
                    a7:86:8a:b5:e3:a5:78:13:b1:e5:57:ad:48:97:ab:
                    8b:b2:90:26:63:26:da:ea:65:60:b8:26:61:b9:ee:
                    73:a0:79:3d:8a:e9:fd:81:ad:b8:f4:6b:2c:79:2b:
                    d7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2E:F6:47:11:85:A3:6D:1C:8D:E7:81:BA:F8:10:CB:EE:61:B2:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/370ee77c-a0b1-310f-9888-320b6e0fee59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.229.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:e1:78:6b:49:0a:f9:d4:26:f0:71:ce:ef:0f:46:67:fd:1e:
         8d:46:1f:19:9a:46:fa:00:ce:d4:fa:ea:e1:8e:9d:e0:ca:6c:
         ae:44:c5:3c:ce:88:53:fc:78:0d:8f:54:c3:21:4c:70:24:f0:
         5b:9e:f0:65:17:94:5e:94:e6:fc:13:70:ab:b4:76:96:5a:f6:
         35:36:ba:5d:4c:05:11:2e:16:c5:62:b2:34:bd:9f:a9:e0:19:
         a3:bb:29:4e:2b:37:ff:6d:fc:d2:a0:66:ef:12:40:79:d7:0f:
         10:6d:e6:3b:d1:0a:4f:24:7f:0d:fe:89:1e:37:08:53:ff:e8:
         83:40:1a:86:b7:d8:da:e8:6b:a5:6c:f2:47:bd:52:22:53:46:
         12:9a:1a:b4:dc:9f:6e:07:05:24:97:1b:05:18:af:3f:b5:a9:
         f2:fc:00:cd:dc:9e:34:04:30:f2:d8:2c:2d:0a:d2:b3:3f:30:
         82:2f:47:fa:6b:95:0e:b2:6d:98:a6:d3:fc:fd:85:40:58:47:
         7b:74:be:04:6d:f4:28:ac:76:74:d5:f2:3b:f4:04:0c:a4:90:
         ac:9b:f6:9f:fe:e2:6d:fb:03:10:eb:88:81:c0:c3:69:68:07:
         80:cb:1b:f5:37:c2:16:90:f0:72:44:82:5e:70:5d:80:12:dd:
         63:2d:ac:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----