Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3e84de17-3f41-3a43-a7d6-71694c26b9d6.roa
File:                     3e84de17-3f41-3a43-a7d6-71694c26b9d6.roa (raw, json)
Hash identifier:          o1g/1F/UgIeIhLB5FW1f6xtQNFnUtDDrHK3muR0hh48=
Subject key identifier:   50:93:A8:1F:2D:AA:61:DD:51:E1:FB:91:B3:14:0E:9D:34:BB:29:D4
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858408BB0AB9249C8FFB259127200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3e84de17-3f41-3a43-a7d6-71694c26b9d6.roa
Signing time:             Wed 11 Jan 2023 12:00:00 +0000
ROA not before:           Wed 11 Jan 2023 12:00:00 +0000
ROA not after:            Thu 16 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        136.2.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:8b:b0:ab:92:49:c8:ff:b2:59:12:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 11 12:00:00 2023 GMT
            Not After : Feb 16 05:00:00 2023 GMT
        Subject: CN=fa75b25a-4cef-4ad2-8dd2-b82139842201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a3:9d:7e:3f:d5:b5:35:db:89:3c:5c:b6:40:
                    0b:87:8b:cd:3a:01:20:91:30:a1:9d:27:75:9e:67:
                    16:6c:29:f3:88:08:99:dc:8b:ff:e8:b4:af:f2:a5:
                    71:1e:5a:f9:8f:15:a8:5e:e5:9a:d6:22:7d:56:17:
                    37:bf:dd:47:ba:f1:8d:6e:9a:67:65:8c:f6:52:05:
                    df:83:ad:15:aa:6f:49:62:11:a6:a9:32:6d:26:54:
                    91:bc:18:5c:25:46:72:66:0c:6c:2e:39:cb:33:e6:
                    8d:e6:87:b2:02:d7:50:b7:14:8e:17:8e:7e:de:b1:
                    e1:66:47:20:24:5f:4d:03:57:7b:19:a5:9e:96:80:
                    b5:ba:e4:fc:b6:fc:65:c5:2c:47:12:57:eb:dd:6a:
                    ff:73:37:f4:db:cf:d2:8c:bb:84:b1:b3:3d:64:8f:
                    99:d6:40:11:3b:34:c7:4b:35:12:1e:f8:53:59:01:
                    66:d2:db:75:09:6b:c5:5c:e4:4f:f7:97:16:03:1d:
                    3b:70:51:b5:0f:71:44:af:8c:10:56:51:db:dc:d7:
                    98:fd:92:0d:b7:01:22:57:f0:c3:36:8d:a4:42:db:
                    19:63:ab:48:e0:5c:13:14:d9:0c:14:98:0b:c9:ab:
                    e6:19:b8:7e:7f:8e:38:bc:71:90:a8:71:7f:88:39:
                    67:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:93:A8:1F:2D:AA:61:DD:51:E1:FB:91:B3:14:0E:9D:34:BB:29:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3e84de17-3f41-3a43-a7d6-71694c26b9d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.2.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:ba:f5:07:ba:c3:63:04:4e:79:29:d5:4e:2b:8a:92:08:da:
         80:fb:ba:1e:1d:20:a6:a1:1f:9b:11:02:e1:d1:44:f2:a1:5f:
         2b:82:fc:1e:5f:49:ac:f8:39:68:0e:15:f9:07:3a:9e:7f:99:
         49:88:11:38:e5:28:66:89:44:2f:3b:7b:95:0b:ea:5c:8f:90:
         8d:d2:55:7b:45:38:65:0d:fb:61:ec:e5:89:a5:e6:aa:a2:07:
         9f:da:28:d1:5c:35:1b:b5:df:d5:98:f5:76:bc:e2:68:de:85:
         16:8f:5d:b1:4a:7a:79:1b:9e:12:0a:15:bb:29:ca:ef:a6:b9:
         76:5d:bf:53:d8:70:30:b1:35:47:b7:80:8f:75:89:c5:2a:41:
         79:5a:d5:89:01:96:67:b1:c2:8c:ba:1a:2a:cd:e2:6f:35:cc:
         8c:ca:88:13:30:e9:c8:cd:15:6e:bf:df:d0:00:eb:a3:80:cd:
         39:6f:6a:ab:8e:ac:39:f0:c4:d6:0d:e7:95:55:bb:e9:d5:42:
         a2:03:11:6d:4b:34:8b:b0:56:56:92:19:93:74:1f:4e:9d:f9:
         6f:32:12:0a:0c:52:3e:37:da:3b:4c:22:7a:cf:1d:a5:02:fb:
         e0:88:5c:8c:02:d5:c4:b2:6b:0a:37:69:9f:85:78:f6:5f:d7:
         45:79:86:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----