Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/376e3d72-5918-3dbf-921c-f86998bf499d.roa
File:                     376e3d72-5918-3dbf-921c-f86998bf499d.roa (raw, json)
Hash identifier:          JQpsOqNciktRUDwcu4Y7wJpFhYH5FOn40rHHWYsQ3jI=
Subject key identifier:   2E:CE:C8:4D:FB:05:8A:97:E5:5B:FB:98:A1:06:84:C1:76:17:7F:04
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858406C05765D6861E2A8AD731100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/376e3d72-5918-3dbf-921c-f86998bf499d.roa
Signing time:             Fri 30 Dec 2022 19:54:08 +0000
ROA not before:           Fri 30 Dec 2022 19:54:08 +0000
ROA not after:            Sat 04 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        184.32.0.0/12 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:6c:05:76:5d:68:61:e2:a8:ad:73:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 30 19:54:08 2022 GMT
            Not After : Feb  4 05:00:00 2023 GMT
        Subject: CN=ab340412-8338-46de-8abb-15abc2ca337d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9c:21:4c:34:0f:35:25:c5:3a:06:54:f2:f7:
                    0f:5d:48:03:1e:f4:c8:c4:5b:1a:d8:00:a5:21:e6:
                    30:8c:6f:e8:0a:a4:89:e7:c8:9d:ff:1d:cd:bc:fb:
                    95:3a:db:dc:16:1c:1b:14:82:46:6f:8c:0f:54:0e:
                    b3:2e:f5:3e:04:a1:d8:31:80:64:78:d5:ac:7e:4d:
                    8c:f1:3c:8f:39:0a:e3:8d:3a:2c:07:95:03:6b:6b:
                    3d:ea:4a:1a:ab:2a:56:60:92:50:84:35:56:28:f0:
                    b6:50:91:f0:2c:49:49:fc:09:f6:da:e4:54:4f:88:
                    7e:8e:87:2c:85:a3:93:88:d8:93:81:a6:a3:6d:51:
                    e3:0a:d1:95:3a:43:c2:cf:a7:83:b2:c5:2f:c5:34:
                    d0:d7:e8:cc:43:0f:ff:74:53:9b:55:ee:3e:7b:df:
                    77:0e:14:c8:43:6e:59:41:95:a7:e2:d4:47:5a:17:
                    09:ed:77:55:09:4b:6e:c0:21:1b:56:10:d5:0b:2e:
                    7b:1e:b3:fc:d3:39:50:63:f1:e8:fd:e8:88:14:59:
                    de:f3:96:05:3d:96:3e:49:d5:21:f2:0f:5a:36:22:
                    40:ae:ef:4a:6a:78:d5:6f:22:a1:85:7b:56:c9:2c:
                    91:84:bd:09:9e:29:1f:c7:b4:3f:ca:42:97:e5:fa:
                    0c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:CE:C8:4D:FB:05:8A:97:E5:5B:FB:98:A1:06:84:C1:76:17:7F:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/376e3d72-5918-3dbf-921c-f86998bf499d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.32.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:a7:71:d1:44:b7:f6:10:59:36:a9:3a:d8:90:dd:05:d7:5f:
         5c:7e:be:d0:ca:13:7b:cc:6e:ad:70:e1:5c:31:a9:e8:49:21:
         7c:28:3d:c9:b6:72:ce:d9:83:04:b2:57:ab:1c:99:d5:c5:88:
         5d:fc:59:45:ff:94:f1:52:46:27:8e:7f:9c:a4:8a:d1:3a:1e:
         2d:c0:c6:b7:92:a4:4c:a2:da:a0:67:b4:72:ab:fd:42:51:74:
         10:da:b6:1d:da:61:85:a4:10:c6:ac:9c:7c:ef:bf:8e:e7:d9:
         da:91:b8:1e:6a:32:ce:ef:7e:96:73:96:50:10:15:dc:07:ed:
         89:42:85:22:ce:58:6a:e6:66:84:b9:ad:ef:32:dc:33:c0:ef:
         da:a6:18:43:e9:79:75:cc:f5:ce:7d:8a:85:1d:d1:53:0e:9a:
         67:04:40:38:ea:82:40:ab:a0:b2:a5:8d:ec:71:34:68:20:d6:
         b2:6c:1c:31:c7:cd:5e:37:a8:36:ea:91:31:27:e9:ac:04:74:
         1b:44:d2:3c:48:ee:d3:33:a6:52:68:90:66:43:8b:9c:b5:8f:
         57:b9:13:3a:15:4e:72:11:59:e1:52:df:01:1c:75:8c:81:95:
         dc:40:67:b6:ec:c1:bf:e1:5e:ab:30:27:b4:42:16:6b:68:4b:
         1a:51:44:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----