Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d9eb36e-200e-332f-8ce9-85272d5a22f9.roa
File:                     3d9eb36e-200e-332f-8ce9-85272d5a22f9.roa (raw, json)
Hash identifier:          ZMU8mSg0494ysg04ZWU+zEc94hDfz//29pX9GRpNgIU=
Subject key identifier:   CD:B6:8A:01:F6:79:BD:D6:0C:E5:FF:0E:27:EC:83:CD:2C:7C:C6:1E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840B96F481A7F81E89021A0DEC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d9eb36e-200e-332f-8ce9-85272d5a22f9.roa
Signing time:             Fri 27 Jan 2023 12:00:00 +0000
ROA not before:           Fri 27 Jan 2023 12:00:00 +0000
ROA not after:            Sat 04 Mar 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        208.86.88.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b9:6f:48:1a:7f:81:e8:90:21:a0:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 27 12:00:00 2023 GMT
            Not After : Mar  4 05:00:00 2023 GMT
        Subject: CN=82e1044f-4ae6-4bc5-8281-2559c90bef6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:bf:cd:f7:15:a5:19:a0:6f:6f:18:9b:fc:43:
                    44:62:1d:c3:90:db:76:6a:a8:4c:0f:1b:5f:db:9d:
                    85:2c:18:5e:23:42:4f:95:6b:34:7e:f9:2c:7b:64:
                    00:40:04:be:ed:86:54:58:0e:0f:68:d8:78:1b:26:
                    60:b8:12:67:0b:f6:07:c2:96:14:75:3f:32:c5:e2:
                    d2:8a:be:46:ef:03:8f:d5:18:86:7c:75:d1:c5:5f:
                    e6:e8:fe:e6:2c:53:58:54:96:cb:77:ef:bf:0f:7d:
                    09:b7:d9:15:a5:45:f5:92:99:72:5c:3c:76:1a:13:
                    3a:52:f0:05:5d:be:f0:46:5a:c1:51:49:b8:9e:f5:
                    fe:29:07:44:4c:15:43:cc:23:80:0f:3e:62:91:6b:
                    49:25:e2:69:a0:b6:34:66:24:ad:e4:bf:3e:23:de:
                    06:ac:11:61:97:8b:d0:e9:35:42:2d:78:44:86:6b:
                    e1:1b:01:bb:07:c4:0f:15:ea:22:3a:30:a2:41:93:
                    30:06:17:8a:4a:31:5a:df:8f:eb:b6:41:63:ff:a4:
                    98:28:06:b8:eb:14:ed:a2:b8:7c:e6:c2:98:64:54:
                    ac:b3:08:01:0a:63:35:03:7f:79:e9:e2:01:bb:4c:
                    06:e0:47:28:4e:54:fb:c7:79:cf:26:3c:52:94:77:
                    98:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B6:8A:01:F6:79:BD:D6:0C:E5:FF:0E:27:EC:83:CD:2C:7C:C6:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d9eb36e-200e-332f-8ce9-85272d5a22f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.86.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:fc:0b:c6:30:8b:d7:7b:74:d4:fc:5b:97:8c:be:04:a0:e8:
         8b:a1:82:ec:1b:91:75:6a:db:22:d7:02:f0:1d:ca:95:df:93:
         61:be:25:75:c2:5c:18:e1:f3:5c:15:80:03:18:5f:6f:75:9a:
         80:3d:b7:e6:d7:2b:ae:09:ec:94:bd:72:39:9b:a7:be:8a:80:
         84:0d:ca:29:32:d0:7f:7a:85:ba:53:8b:76:3c:64:0b:63:29:
         b0:a7:8d:f9:be:7d:30:1e:59:3e:06:6b:07:6f:79:cd:59:c6:
         bb:ab:35:3d:85:78:88:1e:86:d7:22:5c:85:ec:48:c6:6d:0a:
         73:b2:97:c2:6e:54:a0:a4:69:c9:ef:e3:1b:1c:30:94:a3:e1:
         29:16:c9:f9:26:5f:ce:78:18:07:49:c2:ce:46:6f:e1:d3:f0:
         25:80:d4:15:51:16:a7:19:38:63:cb:c3:2a:72:0b:10:17:14:
         2f:54:f0:9f:43:5b:10:95:c3:68:88:fb:b4:bb:f0:8e:0f:b0:
         81:38:f5:fb:ea:ac:3b:91:50:d6:da:36:93:2f:12:bf:8b:75:
         67:f5:d4:3f:44:e1:db:43:4b:de:7a:49:0e:a9:3b:e3:52:86:
         ab:40:1a:6f:d6:ba:3d:25:da:d9:43:6c:26:ce:93:b7:e7:71:
         24:07:3b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----