Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/506fa526-36cc-34d3-9963-593ba042295e.roa
File:                     506fa526-36cc-34d3-9963-593ba042295e.roa (raw, json)
Hash identifier:          WSYX5A2UNp7Tgz6PyPzaiWC8QOGETu0GEF9ULJZSk4o=
Subject key identifier:   16:5B:5B:AD:04:27:99:95:21:8C:6D:36:F3:C8:49:81:0E:39:E3:47
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840BAF9CE340008A9ECD862C880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/506fa526-36cc-34d3-9963-593ba042295e.roa
Signing time:             Sat 28 Jan 2023 12:00:00 +0000
ROA not before:           Sat 28 Jan 2023 12:00:00 +0000
ROA not after:            Sun 05 Mar 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        65.0.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:ba:f9:ce:34:00:08:a9:ec:d8:62:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 28 12:00:00 2023 GMT
            Not After : Mar  5 05:00:00 2023 GMT
        Subject: CN=95c9273e-4c35-41f3-9526-fe09046e0e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3d:c8:bd:9b:14:c4:fd:e4:61:bf:7b:f9:37:
                    05:55:a0:40:bb:16:9b:d9:94:3b:a0:9e:21:fc:07:
                    da:81:8d:5e:f0:82:a3:de:a1:00:a7:76:3c:0e:b9:
                    c2:54:e4:6c:ff:ff:59:95:32:62:0a:f1:24:b3:87:
                    7c:d5:7f:14:dc:d7:4e:21:7e:de:5a:f8:5f:2a:09:
                    43:87:fd:70:08:d6:e6:e8:bf:41:ed:f4:3b:39:d1:
                    21:f8:21:03:0a:6f:52:a9:72:60:19:b7:ef:b7:fb:
                    e0:3f:65:b3:be:40:b6:b5:9d:fe:54:26:5b:d8:3d:
                    a9:7a:d1:45:01:22:44:08:ea:91:01:10:76:a8:e4:
                    30:1f:91:fe:d2:f1:ef:ae:51:ab:42:60:3c:06:26:
                    00:63:54:2a:2c:f2:fe:d1:6f:38:95:eb:ce:a4:a2:
                    35:9a:57:bd:e2:20:f6:6c:10:91:26:0d:31:57:16:
                    1d:49:1c:fd:37:f7:78:5c:69:68:4d:46:40:40:91:
                    a3:26:2b:f9:97:7b:65:fe:88:24:fa:dc:a3:7c:31:
                    52:84:27:8e:73:a4:77:95:9d:e5:0d:37:8e:2f:f2:
                    da:c5:d1:9a:33:ff:d5:85:15:83:bf:5b:cc:54:4b:
                    5f:7b:d1:e4:82:0e:6b:f9:8b:15:fd:2b:f2:0b:42:
                    6d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:5B:5B:AD:04:27:99:95:21:8C:6D:36:F3:C8:49:81:0E:39:E3:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/506fa526-36cc-34d3-9963-593ba042295e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.0.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:fa:e3:0a:04:62:05:aa:db:ba:bf:26:10:b9:6a:f7:97:42:
         68:db:77:04:b7:7a:19:d3:02:2f:2b:36:12:d5:4d:69:40:95:
         e1:a6:83:aa:45:2f:52:25:95:89:b0:b3:bd:6e:dd:ad:6b:46:
         45:55:00:ed:9e:8e:82:e8:9f:46:37:51:b2:e1:0b:7a:83:54:
         e8:d6:81:ee:d1:a2:65:f8:62:5b:a3:01:f2:0f:b9:84:be:1f:
         8f:fe:ef:aa:87:b8:d4:b9:68:fc:6c:f2:46:bc:4e:d9:34:a0:
         e7:7d:fd:55:fb:9b:c0:98:08:e7:e4:5a:d3:06:d2:a7:1f:20:
         01:e9:a7:8d:5d:83:2d:ee:36:b7:91:bf:48:aa:fd:7e:13:48:
         9c:f9:0a:e2:a2:b9:43:6d:2d:aa:b6:fb:9a:b8:85:d2:ff:3d:
         60:68:2f:57:18:0e:97:d0:83:84:f4:d8:26:c4:b2:ae:29:63:
         96:98:04:5b:ba:dc:65:34:c6:61:b3:7e:18:ff:ea:db:58:ea:
         90:81:8d:65:83:fa:25:e6:7f:57:40:e8:40:ec:1b:1a:f3:a4:
         7f:2e:83:87:f6:90:f6:dd:42:bd:46:96:11:ee:95:58:df:87:
         c0:bc:7a:44:1b:34:bd:5e:5e:92:57:5b:bc:37:7a:2a:88:b5:
         8e:97:00:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----