Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/39538570-c63e-338b-aedd-126960081b75.roa
File:                     39538570-c63e-338b-aedd-126960081b75.roa (raw, json)
Hash identifier:          9zGAIDz/ffWtvkR3DLsDHHPkSRXHTNmYo2IPnoE2/xs=
Subject key identifier:   30:36:33:62:DF:D0:54:6D:AD:B1:80:CA:BA:A0:03:97:36:8D:A5:65
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858406BD924DDE21695FF9194C060
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/39538570-c63e-338b-aedd-126960081b75.roa
Signing time:             Fri 30 Dec 2022 19:54:08 +0000
ROA not before:           Fri 30 Dec 2022 19:54:08 +0000
ROA not after:            Sat 04 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        108.136.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:6b:d9:24:dd:e2:16:95:ff:91:94:c0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 30 19:54:08 2022 GMT
            Not After : Feb  4 05:00:00 2023 GMT
        Subject: CN=179c1178-f779-4c99-834f-a5a60c4ae7c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1f:84:72:76:20:87:2d:be:69:2c:57:42:b4:
                    eb:e0:64:d0:8c:47:78:40:31:13:eb:05:9a:bf:c0:
                    bb:52:96:87:7a:67:f2:9b:91:40:ef:23:ec:b5:2c:
                    bb:81:f5:79:b9:74:43:1c:f4:27:de:36:2f:cd:4c:
                    46:77:e1:eb:a9:07:da:3b:a3:43:d6:f5:e6:dc:93:
                    41:00:c1:32:ab:e3:37:be:fe:32:68:3a:5b:45:2c:
                    e9:ab:1c:be:72:a6:45:d0:ee:55:3c:89:46:da:d9:
                    63:78:81:69:dc:15:7b:a7:a7:c8:05:37:02:01:fd:
                    d2:ef:5b:35:18:9b:92:e0:5c:b2:8d:2e:04:fe:28:
                    20:4b:cb:44:1c:65:46:ed:b8:dc:63:89:f5:e2:d7:
                    43:e9:cf:a4:12:a4:6c:64:3f:05:27:24:9f:6f:9b:
                    78:39:f0:5b:a8:1d:d6:b8:23:5e:aa:30:e2:4e:5e:
                    b5:7e:8e:f9:44:2f:45:1e:5e:5d:2e:40:d2:45:cd:
                    d5:2f:b2:68:c8:96:b2:f4:4b:6c:a8:0b:40:ce:76:
                    3c:39:74:06:e3:77:65:96:06:ec:b3:9b:2c:61:de:
                    56:23:ad:7d:1a:3b:48:75:e7:c0:ad:2d:f7:82:ae:
                    48:ac:45:42:f4:cf:75:74:c2:f8:39:b4:ff:da:ad:
                    0b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:36:33:62:DF:D0:54:6D:AD:B1:80:CA:BA:A0:03:97:36:8D:A5:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/39538570-c63e-338b-aedd-126960081b75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.136.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:2a:00:89:ba:4e:26:ec:80:78:58:c3:8a:e0:d4:13:f6:47:
         1a:8f:be:18:5b:9c:2d:aa:7b:1e:df:0d:e1:6f:2f:70:2f:80:
         87:83:dd:7e:3d:5f:c7:dd:15:ba:30:1b:f7:e6:d1:5b:26:de:
         ed:d2:df:19:cb:b1:8c:f7:52:10:05:d7:27:55:53:c0:8a:8e:
         5c:9d:ac:82:7e:fa:c7:01:38:b7:9d:46:97:0b:64:f0:02:5a:
         74:da:c6:b9:7c:9e:9d:e5:88:68:8d:a4:26:eb:1a:92:10:d5:
         cb:1e:01:6b:c7:9b:85:49:0e:a1:61:96:4d:02:80:68:85:12:
         10:08:fb:fb:de:c7:02:59:65:46:cc:2f:00:f3:b8:60:18:5b:
         bb:0b:f6:75:7c:21:43:1f:87:b9:d9:36:87:0d:b2:56:11:6e:
         16:70:a9:43:93:36:f9:c5:6b:ee:15:0d:cc:e1:2e:d2:7e:11:
         6c:d5:d5:46:23:b8:a4:99:66:39:0e:51:05:27:d9:62:48:de:
         81:98:a4:f0:47:ab:a0:e7:3a:b5:2f:04:46:ea:c7:37:e1:6c:
         35:7e:3b:44:b5:56:3b:ff:05:28:fa:09:f5:78:69:dc:db:30:
         64:fb:54:1a:55:e7:2a:40:d0:12:4d:b8:6f:4f:14:79:07:c9:
         6c:48:d9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----