Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4d8e381e-80c0-3509-a3ac-59698482278b.roa
File:                     4d8e381e-80c0-3509-a3ac-59698482278b.roa (raw, json)
Hash identifier:          4AHnQB8bl89aG2M9c0OCpf8TjOZfooxcVBLClK+UKsE=
Subject key identifier:   ED:E0:82:E7:53:49:29:0C:51:6B:40:7F:35:81:63:06:A7:79:04:39
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840A06CDE70099FA1AE2A9F25C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4d8e381e-80c0-3509-a3ac-59698482278b.roa
Signing time:             Wed 18 Jan 2023 12:00:00 +0000
ROA not before:           Wed 18 Jan 2023 12:00:00 +0000
ROA not after:            Thu 23 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        16.179.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:a0:6c:de:70:09:9f:a1:ae:2a:9f:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 18 12:00:00 2023 GMT
            Not After : Feb 23 05:00:00 2023 GMT
        Subject: CN=7c62c818-2801-4320-a6b7-f98c62ef84e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2a:87:7d:f2:ee:cf:6c:9d:30:c1:40:71:ee:
                    a9:54:ed:73:cd:86:c1:d7:fb:b1:14:c5:b7:11:7d:
                    c9:a2:23:ca:be:bf:a7:64:16:05:60:8e:a0:3b:7f:
                    62:08:56:1b:d0:8d:30:83:da:d9:01:6d:45:01:44:
                    0a:91:e9:1e:1b:71:bf:fb:ae:2c:a7:b4:ed:e6:e0:
                    4e:14:d6:a1:bb:10:a0:58:e1:67:39:28:ef:97:77:
                    1d:7e:e9:de:0b:be:d1:a1:6e:6a:61:3c:21:50:85:
                    4a:66:fe:d7:0c:bb:2a:82:e9:de:d8:51:9f:75:5a:
                    db:42:d5:4a:09:84:7f:8b:00:d9:ef:38:99:d9:f3:
                    b9:64:ee:d2:b4:bd:08:02:75:4f:c2:dd:c4:ea:bb:
                    fc:51:18:49:c9:c1:90:0f:c0:3d:7c:ff:ac:92:1d:
                    99:cb:e6:a4:ee:50:c8:9a:15:db:6e:de:2d:6c:6d:
                    86:9e:29:01:77:7c:7e:ed:75:d3:bd:8f:f8:e0:8a:
                    5e:9c:10:69:c4:60:71:09:48:05:8b:85:0f:23:23:
                    e2:73:36:98:99:25:be:f3:79:6b:97:54:2d:44:5e:
                    b1:ba:52:7b:bc:ab:72:45:d0:31:ce:96:ad:1d:6a:
                    65:a1:9c:6f:c3:f4:27:56:6e:93:8d:3b:e7:85:20:
                    18:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E0:82:E7:53:49:29:0C:51:6B:40:7F:35:81:63:06:A7:79:04:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4d8e381e-80c0-3509-a3ac-59698482278b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.179.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:82:fc:32:c5:84:98:ee:40:1c:04:b7:5a:ff:81:84:31:78:
         59:06:60:5b:a1:ec:ec:c6:ff:fa:9d:49:5f:30:86:0e:40:a5:
         ae:c8:7d:16:cf:ee:45:a3:b5:91:c8:ae:7f:6f:7f:36:2a:08:
         4c:f4:8a:72:b6:32:7c:43:f4:9e:6a:17:6a:24:6d:67:6a:55:
         9d:91:2d:7f:9f:cb:e7:2e:6f:c8:7d:47:a0:bf:4b:8d:56:26:
         d4:b1:29:a6:fa:4a:5b:a2:55:ae:6f:56:86:36:35:b3:0b:51:
         9f:6a:84:39:76:8d:26:b7:e6:be:20:b2:55:70:38:79:2c:f9:
         61:7f:10:9e:22:fe:55:04:f1:af:ab:1b:2d:56:71:ea:71:2f:
         68:1f:54:df:1e:68:26:af:57:36:c7:7c:df:ae:f5:4b:e1:82:
         a1:f5:8c:e3:8f:7f:9e:07:94:a8:cb:a3:b2:29:7e:18:67:0c:
         ca:51:ee:65:11:31:a9:36:7e:d7:f3:ff:15:c3:8f:4b:e8:11:
         8a:98:e7:b3:e4:ff:42:34:75:77:48:a1:5b:4c:ad:d0:65:2f:
         8a:14:f8:e8:f7:f9:bf:70:56:a7:c4:6a:3f:7d:ff:95:ab:aa:
         0d:65:1a:6e:79:ed:2e:e8:5f:b0:66:b4:07:1f:85:e5:17:5d:
         4a:c0:2c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----