Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4cbd50c7-c366-3948-9b52-83ee2d7749c4.roa
File:                     4cbd50c7-c366-3948-9b52-83ee2d7749c4.roa (raw, json)
Hash identifier:          4AUK/kFLm4s2fPu+yUQnZP0Ggtg+FVEprILgnDj0KWI=
Subject key identifier:   BE:76:B1:0A:11:15:DC:91:9C:83:BB:22:F4:93:B8:01:97:0B:CE:30
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840930C35FCCFCA3877783AFF00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4cbd50c7-c366-3948-9b52-83ee2d7749c4.roa
Signing time:             Fri 13 Jan 2023 12:00:00 +0000
ROA not before:           Fri 13 Jan 2023 12:00:00 +0000
ROA not after:            Sat 18 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        71.141.0.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:93:0c:35:fc:cf:ca:38:77:78:3a:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 13 12:00:00 2023 GMT
            Not After : Feb 18 05:00:00 2023 GMT
        Subject: CN=a37a91e9-0ace-4a01-84b8-463ca8f202f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:44:53:cd:af:a8:44:3f:59:46:c9:37:da:d9:
                    20:49:73:d6:13:88:4a:a3:68:f0:66:7a:b0:cb:34:
                    8a:9d:d3:b0:85:9b:a1:1c:15:d4:7c:5d:82:da:6a:
                    42:bb:5c:6b:05:bb:31:39:cb:42:7a:bc:cb:7b:bf:
                    c0:ce:65:f1:ee:19:11:65:ca:b1:30:ba:ff:fd:4e:
                    6d:85:1c:4e:99:ca:77:ec:8c:c8:f7:5c:53:d4:c9:
                    7e:5a:ef:ef:55:20:d5:a7:fc:22:4e:9a:02:86:30:
                    84:88:8b:e7:ab:37:3c:15:d3:ae:5a:63:78:db:46:
                    47:56:a2:89:e7:ef:54:d0:d6:ce:ad:2b:80:68:e2:
                    3a:a8:67:d8:16:e8:df:cb:77:19:32:6e:fe:49:25:
                    9d:63:49:56:b0:bf:38:8b:bb:cc:3b:e0:5e:f8:fb:
                    03:39:59:e5:2e:d4:c6:03:f5:a4:bc:1d:aa:1e:47:
                    e4:b0:1e:b7:49:5c:6f:5a:11:55:51:af:aa:75:6e:
                    15:c4:12:6e:44:f6:43:0e:e1:d2:63:72:ca:e6:cb:
                    ef:6f:12:6f:04:ec:a1:17:14:fa:49:db:36:7b:e5:
                    1e:9a:2d:d3:95:8f:6d:95:32:f8:da:3e:8a:57:71:
                    3f:01:6f:2c:5f:96:60:98:aa:33:8c:70:bb:b9:06:
                    db:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:76:B1:0A:11:15:DC:91:9C:83:BB:22:F4:93:B8:01:97:0B:CE:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4cbd50c7-c366-3948-9b52-83ee2d7749c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.141.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:fc:43:ca:a8:97:b1:db:f1:04:74:74:f2:80:e2:65:f5:f5:
         86:1f:b1:c2:71:32:b7:9b:0d:10:04:69:c4:45:12:35:c4:45:
         41:9d:e3:f4:07:27:68:f5:90:53:07:26:d0:0b:40:73:85:95:
         54:83:80:ac:f2:68:ac:c2:4c:5e:eb:ab:c3:b0:ba:03:b3:7c:
         73:ab:b9:c6:a8:02:02:e1:2c:2d:ad:ff:47:f4:ce:0e:4f:e1:
         0f:3a:9c:29:47:f8:fe:d7:43:f1:ae:dd:42:a8:6e:15:21:26:
         c3:8d:2d:38:dd:94:13:9e:60:98:ba:2a:1f:fe:05:a7:ed:f2:
         94:ae:7a:05:a5:74:6f:ef:9c:fe:6e:ab:91:07:05:8e:89:35:
         79:86:39:5b:f2:26:bc:89:97:c4:3a:e0:f6:90:8a:15:29:d8:
         c4:21:c8:6b:dc:cf:40:10:8b:7e:a9:b3:ac:43:57:3d:81:aa:
         b0:55:27:d1:9e:66:58:b4:6c:cd:a0:e8:93:ff:ce:a6:bf:65:
         e2:6d:e8:1f:33:15:f9:44:d3:6f:a3:a5:52:59:d4:28:57:d5:
         59:17:40:ed:af:ee:45:b7:eb:95:e7:45:e0:91:71:96:ae:a1:
         f9:d7:7a:c0:31:26:90:bb:ba:b5:87:59:13:49:05:11:d7:ca:
         c1:83:7a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----