Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3b1e3e6a-4f3c-3e46-9dbb-cd20617e8fa1.roa
File:                     3b1e3e6a-4f3c-3e46-9dbb-cd20617e8fa1.roa (raw, json)
Hash identifier:          zmbanfqr0C8oQ1TQnG3SDX4HCMr+yr+XLcTbpmyiCJU=
Subject key identifier:   B5:7D:81:91:90:48:10:70:C5:DD:B2:96:29:A9:5A:7E:5D:F8:B3:BA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584093E45476586B3506F56E3400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3b1e3e6a-4f3c-3e46-9dbb-cd20617e8fa1.roa
Signing time:             Sat 14 Jan 2023 12:00:00 +0000
ROA not before:           Sat 14 Jan 2023 12:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        65.0.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:93:e4:54:76:58:6b:35:06:f5:6e:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 14 12:00:00 2023 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=e79f7904-7a65-4740-b468-0dbc5ffaa097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8f:bd:5c:e4:88:f4:1d:77:aa:89:96:21:a8:
                    9f:a9:24:5f:59:d3:0d:19:cd:98:75:06:e5:8d:f7:
                    33:7d:8b:10:c8:91:71:3a:1a:d5:41:89:59:a5:bf:
                    8a:75:92:4f:1c:70:a4:fe:be:c0:e1:ec:98:34:b9:
                    ce:fc:35:60:66:da:dd:13:86:d1:50:28:95:18:d9:
                    4a:95:02:6c:e5:55:76:3c:74:6e:9b:1b:33:41:43:
                    02:a0:fc:97:16:f7:b1:cb:76:da:05:29:65:19:ca:
                    0d:d5:d5:43:f0:2c:c4:7b:12:aa:f7:f9:91:8f:5d:
                    a9:2a:86:b2:af:fa:0a:d9:d8:90:42:f8:e1:91:e9:
                    95:15:3c:d4:93:e5:d6:59:58:66:b0:f5:15:c4:d2:
                    fb:1c:4f:0f:bd:ed:53:aa:56:4c:28:14:ee:f6:51:
                    a2:dc:1c:b5:ff:32:f0:4e:2e:6d:eb:07:07:27:60:
                    07:75:7a:33:86:ad:44:d0:96:68:c1:8d:c6:58:47:
                    be:4f:03:58:07:8a:bb:d3:7d:d0:17:5f:13:c8:41:
                    51:8f:49:29:09:1b:0f:3d:9c:75:a3:98:ca:fb:1f:
                    1c:20:c5:fd:4a:59:92:26:a6:5c:c9:50:3d:e7:86:
                    6d:fb:e9:38:06:df:61:86:56:fb:9f:b5:c9:d4:63:
                    e8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7D:81:91:90:48:10:70:C5:DD:B2:96:29:A9:5A:7E:5D:F8:B3:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3b1e3e6a-4f3c-3e46-9dbb-cd20617e8fa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.0.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:69:85:db:ed:33:6b:b9:f0:03:25:dd:17:21:76:27:39:cf:
         45:33:6f:85:fb:ef:29:df:5c:b5:8a:b8:30:d2:56:69:70:be:
         de:94:80:bd:93:0c:d3:95:cd:84:c4:7d:ba:58:89:5e:8e:58:
         ff:92:fb:6f:55:d3:84:a8:0c:2f:7f:63:8d:13:fc:a7:23:25:
         9e:c4:9a:8c:c2:78:c1:be:a6:cc:8e:d3:2f:81:90:69:7c:7f:
         6b:81:d3:fd:38:76:37:ec:b3:ca:fa:a8:48:a9:73:7c:b3:2c:
         ea:3e:e3:68:76:49:59:d4:a6:be:0f:48:b3:b7:8c:e3:a5:ea:
         4d:d4:5b:1f:c7:dd:87:6e:b1:8e:29:9c:6e:d8:98:b8:94:10:
         31:80:85:17:0d:b8:8f:75:82:9e:a1:3b:d5:38:91:73:a3:a6:
         47:ec:9c:67:89:08:ab:8a:bc:cc:c9:cb:b2:17:1f:9f:22:82:
         b7:87:99:1c:61:ee:09:83:65:12:92:d9:4b:72:ba:07:99:ad:
         fa:df:b5:22:a3:3b:35:3d:94:64:f1:1f:0c:50:a3:ee:22:ec:
         6c:21:c8:ab:23:37:73:54:00:ce:d6:2d:31:64:19:9f:27:cb:
         78:38:68:3f:7e:86:8e:c4:e9:20:a4:a0:23:3b:df:74:bc:20:
         6a:80:df:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----