Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4d6139b6-6cc1-3c26-80c3-9191ef8395c8.roa
File:                     4d6139b6-6cc1-3c26-80c3-9191ef8395c8.roa (raw, json)
Hash identifier:          NnNKCDzx8vQOItuRk7ScA5okn64CiS4uEflAvuW6JMg=
Subject key identifier:   62:C0:9B:4B:6A:CB:98:4D:02:55:62:51:18:F0:DB:F7:7D:FF:FD:9D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840833A70F1EC9BEDEE575AA2C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4d6139b6-6cc1-3c26-80c3-9191ef8395c8.roa
Signing time:             Sun 08 Jan 2023 12:00:00 +0000
ROA not before:           Sun 08 Jan 2023 12:00:00 +0000
ROA not after:            Mon 13 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        158.254.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:83:3a:70:f1:ec:9b:ed:ee:57:5a:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  8 12:00:00 2023 GMT
            Not After : Feb 13 05:00:00 2023 GMT
        Subject: CN=c17b0a54-5ad0-4d95-b9e4-38341fe131e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ea:17:1b:47:40:9c:ec:25:d1:67:fa:61:6f:
                    55:69:32:11:96:2a:9b:2f:f0:d1:bd:49:6b:7a:3f:
                    b4:97:dc:c0:90:8a:cc:69:80:c5:08:4a:ca:71:d9:
                    51:ee:8a:2a:97:6c:28:98:54:73:d2:ca:db:5d:85:
                    ce:12:35:a1:22:8a:ab:9c:01:4b:fd:12:b0:2e:66:
                    24:1c:e9:9e:81:cb:4b:60:52:ca:0c:df:19:c4:ff:
                    b1:77:8c:81:33:f5:ec:c6:fb:6a:d0:cb:93:1c:02:
                    ce:45:12:f0:d4:a8:40:c7:01:06:72:ae:da:36:cd:
                    45:e8:7c:d7:b5:22:90:cd:47:e7:b5:1f:6b:08:f2:
                    66:2f:53:b4:cc:22:4f:f0:4c:b6:62:ef:07:78:f3:
                    42:e7:79:21:bd:cf:7f:22:c2:a9:44:46:a7:09:c1:
                    8d:ae:5f:45:b7:31:00:6b:07:68:64:f2:f9:ff:bf:
                    a8:3e:e0:69:61:68:39:9b:9d:e9:3d:98:02:4e:e4:
                    89:1f:d1:d7:57:7a:b4:94:f9:37:b2:25:11:c0:60:
                    b6:1d:b6:7b:63:0b:24:30:ff:b3:cf:43:b6:ca:ea:
                    86:0b:af:82:e2:af:9a:82:bc:12:17:4e:65:c3:c6:
                    cd:12:61:8d:15:4d:5f:d7:2b:d4:c7:d0:9d:1c:e1:
                    85:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C0:9B:4B:6A:CB:98:4D:02:55:62:51:18:F0:DB:F7:7D:FF:FD:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4d6139b6-6cc1-3c26-80c3-9191ef8395c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.254.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:69:e9:aa:f0:11:f2:55:4a:75:74:f0:c1:b1:87:f6:0a:11:
         e5:89:62:bd:b7:b6:d1:55:c6:3d:9c:c0:de:c4:93:67:86:60:
         cc:92:bf:12:a4:12:31:7d:a5:3d:88:a9:74:64:e3:37:c4:44:
         de:b6:cc:17:5c:ab:36:90:b0:ad:12:6e:e4:be:99:e7:e3:69:
         98:6a:54:0b:4d:e8:65:28:5e:c1:7a:02:9f:7d:ac:c9:ab:09:
         ce:51:40:3e:a5:f0:99:81:a4:10:d9:36:c1:fe:a0:b3:fb:78:
         bc:fe:11:01:e2:f0:8a:b1:a4:86:d5:84:6e:1e:ae:93:6d:88:
         01:0b:57:23:86:58:23:b6:2b:81:ce:f0:f0:fd:5b:dc:a8:71:
         40:27:3d:41:fa:ad:9c:9a:74:e0:44:fc:fe:03:f1:e1:1e:38:
         79:16:5e:82:34:dd:0d:45:da:04:80:5c:2a:ed:34:ae:03:70:
         ed:9b:ad:c1:d4:db:24:36:c5:55:0a:cf:c1:f5:39:07:fa:b4:
         0e:a8:14:dd:9a:e0:d1:99:85:0c:8a:be:1a:34:25:c5:38:60:
         4d:b8:6b:e1:cb:12:cb:63:ca:96:76:67:f4:dd:d1:e3:e6:48:
         73:46:88:42:ba:30:89:bc:05:e7:05:b0:b1:dc:62:6f:26:e2:
         e9:7d:bd:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----