Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3e0678ac-62e0-360d-a291-24373d0e8dd8.roa
File:                     3e0678ac-62e0-360d-a291-24373d0e8dd8.roa (raw, json)
Hash identifier:          l3ySAUrFov1owt2in+PgBGnxCEgpAm7qrUgR0CfMAcs=
Subject key identifier:   45:E0:29:68:AD:DE:A7:F2:9A:C4:2F:79:73:BA:02:F1:39:4A:7E:B0
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584048928618D9E76D564EFA7200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3e0678ac-62e0-360d-a291-24373d0e8dd8.roa
Signing time:             Sun 18 Dec 2022 12:00:00 +0000
ROA not before:           Sun 18 Dec 2022 12:00:00 +0000
ROA not after:            Mon 23 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        194.21.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:48:92:86:18:d9:e7:6d:56:4e:fa:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 18 12:00:00 2022 GMT
            Not After : Jan 23 05:00:00 2023 GMT
        Subject: CN=3717a18f-621b-4bc2-83c6-57533cd008e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2f:2a:35:dd:65:5f:a4:00:91:ef:d4:67:ab:
                    5e:35:50:59:81:42:5f:23:90:2d:9c:c8:54:64:35:
                    7f:1e:b9:3c:82:7b:3d:0a:90:78:26:5c:ee:44:6e:
                    7f:e5:58:ed:d7:ab:97:94:45:1b:93:bf:45:73:3c:
                    9c:9a:f7:a5:9e:ad:b1:b8:3f:84:63:15:62:20:dd:
                    e4:42:20:fe:f1:f5:33:b6:c3:7e:d8:05:7e:39:68:
                    fe:78:a1:e3:f3:26:ce:c7:10:67:71:cc:36:43:57:
                    b3:a6:12:11:ce:03:3a:49:c2:07:66:c6:b9:cb:b0:
                    cb:2a:c4:c5:cc:da:17:0a:dc:94:e2:39:d3:1e:6a:
                    55:5d:57:ee:37:1c:bd:a5:8d:6f:ca:f8:37:e3:ab:
                    a1:2a:0b:01:82:f3:c8:82:44:54:ce:7f:6c:c7:bf:
                    40:ec:84:48:c7:3d:b2:3f:ad:a3:0a:cb:4b:f9:8b:
                    5d:78:ef:4c:b2:99:07:94:35:df:ae:c3:1c:a4:bf:
                    9b:a9:d2:8c:7a:2e:36:ea:7b:76:26:8e:43:43:73:
                    e5:4b:88:b1:17:a5:ca:82:b6:59:0c:50:65:28:46:
                    f7:41:ad:dd:59:d0:09:5c:34:c5:3a:6d:1d:06:04:
                    fe:30:04:80:d1:52:69:2f:a1:95:0b:96:c4:ed:ba:
                    78:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E0:29:68:AD:DE:A7:F2:9A:C4:2F:79:73:BA:02:F1:39:4A:7E:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3e0678ac-62e0-360d-a291-24373d0e8dd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.21.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:68:33:22:dc:2b:86:76:f9:01:24:e2:d4:31:47:e5:eb:1c:
         7a:73:4f:9b:68:02:5a:79:ea:c5:da:85:8d:28:da:6f:82:d3:
         3c:ac:8f:db:ec:0b:65:2e:d8:8b:5e:fd:c1:95:83:0b:ad:fc:
         f7:37:3a:bb:e6:2a:01:60:76:3a:1c:dd:ff:12:5e:1a:3e:65:
         50:48:8a:43:41:2e:4d:d7:8b:35:14:be:2c:8f:f9:99:e4:a7:
         4e:ce:b8:6b:45:dc:80:7d:2b:18:3c:31:17:00:7f:90:06:c9:
         53:e2:7c:5c:6b:7e:d7:21:61:6c:ff:37:88:23:24:69:61:c0:
         e1:25:d6:2d:37:03:40:ad:69:09:78:a8:56:47:ab:e3:6e:ca:
         28:46:e9:d5:19:f8:2c:fe:dd:e3:bb:9d:ec:eb:fb:d9:28:55:
         07:31:43:8d:9b:03:76:c6:0a:ea:0d:50:c4:20:e9:dc:76:e8:
         0c:df:6b:03:6d:f4:b1:f1:83:47:7c:de:25:80:0c:c3:e7:16:
         3c:43:c8:d3:01:f5:30:c3:f6:2c:f8:0c:f1:4b:0c:3d:d3:47:
         5a:73:f2:ea:e7:0a:84:f5:d7:ae:9d:ea:b6:41:4d:e9:99:6a:
         8e:ad:6e:8e:4e:59:90:60:96:d1:4d:2d:dd:1f:fe:81:4b:2e:
         46:43:97:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----