Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/44e49550-ad1f-3399-8b5d-b8874c93e3be.roa
File:                     44e49550-ad1f-3399-8b5d-b8874c93e3be.roa (raw, json)
Hash identifier:          ibuPa0YYMQPk6Ppp2VQd5jLIyBI51ZsXufQZIBIHpRo=
Subject key identifier:   9A:47:DC:B1:1B:4E:70:94:AA:4C:1C:96:35:7C:A8:0A:DB:5C:43:E6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858405F8488E289CDDB7C43C87F80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/44e49550-ad1f-3399-8b5d-b8874c93e3be.roa
Signing time:             Mon 26 Dec 2022 12:00:00 +0000
ROA not before:           Mon 26 Dec 2022 12:00:00 +0000
ROA not after:            Tue 31 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        204.126.25.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:5f:84:88:e2:89:cd:db:7c:43:c8:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 26 12:00:00 2022 GMT
            Not After : Jan 31 05:00:00 2023 GMT
        Subject: CN=d6766ea1-9bdd-403c-b6b0-80234b07f181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6c:95:8e:96:b9:9f:ed:dd:d2:81:03:2b:7f:
                    e5:5a:c2:11:0f:f3:a3:44:78:ec:a7:ac:8f:16:57:
                    42:d4:5a:bd:27:1a:76:fa:ab:af:8a:ad:03:c7:47:
                    bd:73:9e:c1:19:2e:40:ee:a9:7c:06:a5:99:c0:f3:
                    bc:cb:1e:57:4b:04:7e:11:ad:74:70:ae:f2:4e:11:
                    82:0b:2f:79:d0:bd:b7:e1:ed:e3:38:bd:d4:fc:dd:
                    04:79:fe:6d:39:46:ed:5b:a5:0f:6c:b0:fc:48:1d:
                    e5:6d:46:b8:ac:66:03:66:e0:0b:ae:cb:5f:7b:2c:
                    72:ba:cc:3d:da:f8:36:26:8f:83:0e:11:91:41:4b:
                    dc:ec:c2:42:d7:64:5a:74:12:55:73:97:96:a4:45:
                    e1:0d:70:3e:a8:93:ab:ec:23:ef:e2:66:95:25:ef:
                    db:e1:7e:83:f1:e2:32:72:94:b7:52:81:f1:ab:fc:
                    7a:1d:67:45:7d:2e:de:5c:30:11:e0:51:4c:54:c3:
                    6f:aa:08:6f:2b:5e:ba:b0:39:9b:bf:77:3f:21:f5:
                    b9:00:73:f8:63:85:7a:65:7a:4f:c6:8b:dd:4e:0c:
                    13:fc:d1:8a:3e:80:86:b8:f3:8b:9d:97:e9:37:78:
                    e8:35:6d:1f:e1:d4:a5:d8:94:c1:85:a5:b6:aa:7d:
                    22:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:47:DC:B1:1B:4E:70:94:AA:4C:1C:96:35:7C:A8:0A:DB:5C:43:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/44e49550-ad1f-3399-8b5d-b8874c93e3be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.126.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:56:a8:0a:d8:19:14:e6:94:a1:51:c8:fa:36:a5:82:5d:c1:
         e3:ce:a4:93:b3:52:c7:bd:be:82:7d:40:c2:6d:96:60:05:3e:
         f9:60:d4:5b:50:5a:88:17:39:ca:ed:de:28:63:f9:a9:4d:9a:
         df:b1:92:e0:56:19:12:6b:1b:ac:de:44:dc:ad:be:05:e9:fe:
         fc:b3:c1:04:0c:7c:15:a8:c4:d7:ba:42:1a:88:4d:c1:43:ee:
         b8:84:9a:ee:f7:a9:cb:c4:12:2b:c5:a8:bb:1a:d0:27:ff:53:
         97:4f:df:27:be:df:02:71:d1:01:fd:24:dc:6a:31:8d:89:bc:
         25:fc:69:a6:7d:10:d4:36:2b:7e:b5:4f:14:92:5f:2e:e9:8e:
         2f:d6:1e:2b:86:48:2c:d6:10:f3:38:e1:b8:6f:65:0d:b7:8d:
         93:83:01:b9:9e:80:40:7b:7b:c9:cc:42:61:23:33:57:9d:5e:
         1c:ae:e6:30:9f:6b:98:6c:4b:30:ad:67:b1:fb:e2:87:f5:a3:
         d1:07:0a:69:f3:84:7e:de:b1:96:09:ec:9a:bd:8f:b9:f6:7f:
         f5:ca:29:a3:e9:31:2f:6b:90:23:3a:dc:fe:3b:5a:6b:4c:a8:
         13:68:77:c7:bf:2f:30:c5:71:97:ff:e7:ae:aa:23:d8:3f:0c:
         aa:05:c6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----