Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/46b5834a-6190-3352-befc-96c4cc1cbcf8.roa
File:                     46b5834a-6190-3352-befc-96c4cc1cbcf8.roa (raw, json)
Hash identifier:          eaIrqqqPDcy6K399HOr/yC2ZJZjENQJGdt9rCMY4X6s=
Subject key identifier:   B7:09:F3:39:CA:ED:13:5A:92:08:D2:08:94:32:F2:C8:A0:B2:A1:37
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DAA8E754E2FF920E14C188E80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/46b5834a-6190-3352-befc-96c4cc1cbcf8.roa
Signing time:             Fri 22 Apr 2022 12:00:00 +0000
ROA not before:           Fri 22 Apr 2022 12:00:00 +0000
ROA not after:            Sat 28 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        99.80.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:aa:8e:75:4e:2f:f9:20:e1:4c:18:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 22 12:00:00 2022 GMT
            Not After : May 28 04:00:00 2022 GMT
        Subject: CN=d2cdf904-7733-4b57-827e-a26379c212c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:12:cc:2e:72:24:0a:63:33:f7:b5:4a:f4:21:
                    39:60:39:6a:44:05:29:8f:ab:25:f7:7d:92:4a:9f:
                    71:8b:f5:5a:1d:c8:cb:7d:d1:d8:64:14:be:32:d8:
                    20:9a:2f:59:eb:98:01:15:cf:0c:af:5e:7f:6b:08:
                    60:2f:82:7e:32:0d:5e:31:0c:ac:b4:28:8b:42:58:
                    db:a0:6b:6f:6e:d4:24:2c:f9:06:1c:2a:99:c5:a0:
                    92:87:82:46:39:41:c8:1f:be:7b:cc:c6:0c:fd:ce:
                    a0:11:58:18:10:52:e9:26:49:e3:7a:bc:c1:35:3f:
                    37:94:bf:6c:37:5a:50:b4:00:0e:00:aa:4b:51:7d:
                    ae:a7:2d:6b:ce:d4:6f:db:aa:d3:94:2c:d8:d3:71:
                    9b:33:89:9e:eb:37:a9:10:df:83:f3:e2:cd:9d:b1:
                    a6:c5:cc:d2:ec:ee:1b:31:32:b1:26:95:af:3f:bd:
                    06:9f:c1:61:cc:84:15:56:40:d6:43:50:66:53:8c:
                    8a:f8:fb:bb:64:97:f7:69:92:21:a1:04:a9:5c:3f:
                    18:86:0e:2c:1d:da:fa:3b:b0:05:e9:f3:d1:96:61:
                    65:0c:ed:36:19:2c:70:cb:12:fc:43:bd:82:2c:c2:
                    ee:45:41:c4:7a:a8:e8:2e:41:3f:d3:93:c6:9f:f7:
                    c8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:09:F3:39:CA:ED:13:5A:92:08:D2:08:94:32:F2:C8:A0:B2:A1:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/46b5834a-6190-3352-befc-96c4cc1cbcf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.80.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:54:43:23:6d:b4:74:96:90:0b:bf:73:cc:6f:a4:ae:09:13:
         33:61:b8:3c:e2:5a:72:36:b4:9d:3d:ec:10:c1:d7:66:1e:d8:
         a2:22:f2:16:df:88:64:b6:2f:f5:91:03:b5:d6:ef:1e:6d:2a:
         3a:1e:96:13:cf:b7:23:50:13:62:c1:73:3d:6e:ec:0e:ed:e9:
         26:0c:ac:03:76:c1:26:ad:b6:9d:6f:53:e9:3f:8d:c9:a7:d3:
         b3:56:2a:d5:2a:96:26:b4:62:ab:95:82:8c:8d:79:bc:17:47:
         05:f5:17:70:56:44:03:66:b3:c0:75:9f:ce:a4:c2:24:c6:a3:
         5a:c8:f2:be:43:d6:6d:04:a8:08:b2:14:09:bd:7a:dc:07:39:
         22:7d:b4:9a:49:75:10:91:64:32:3a:34:38:8a:99:f4:4d:bd:
         0f:0c:a9:3c:38:71:61:a4:da:40:96:9d:03:ea:bd:b2:d9:95:
         ba:50:a7:c1:83:b7:63:2b:d5:24:89:12:c6:b1:24:3b:25:b6:
         6f:8d:57:64:85:58:ed:e6:ff:87:be:b2:06:ba:4c:30:01:18:
         8e:97:2a:62:01:4c:c5:f9:cd:47:6d:6a:41:71:11:25:3f:e9:
         e2:76:8f:24:61:37:52:0b:60:61:6f:b4:c4:9f:77:91:14:5d:
         e3:56:dd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----