Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/53c46b42-2f0e-307b-bf61-ed9f967cbe66.roa
File:                     53c46b42-2f0e-307b-bf61-ed9f967cbe66.roa (raw, json)
Hash identifier:          GXUjlccVpkwlzU5vcfMB99sLc+V7TAHem5XpK8C+gik=
Subject key identifier:   ED:93:9B:D2:4B:45:94:B8:6B:55:3F:C7:D2:68:0F:B2:3A:2E:1F:52
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840D46BF755CE3997F46F38E680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/53c46b42-2f0e-307b-bf61-ed9f967cbe66.roa
Signing time:             Mon 06 Feb 2023 12:00:00 +0000
ROA not before:           Mon 06 Feb 2023 12:00:00 +0000
ROA not after:            Tue 14 Mar 2023 04:00:00 +0000
asID:                     8987
IP address blocks:        68.158.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:d4:6b:f7:55:ce:39:97:f4:6f:38:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  6 12:00:00 2023 GMT
            Not After : Mar 14 04:00:00 2023 GMT
        Subject: CN=c852b525-2491-40f1-9fba-5717c9894fb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:32:a1:87:4a:38:1c:ea:88:d3:04:b0:8c:d7:
                    bd:6a:98:38:f2:59:38:a9:da:86:99:89:67:a8:23:
                    f2:44:21:4e:b5:28:8f:a6:83:4a:8b:ce:3e:69:47:
                    ea:d0:1f:c3:71:8f:93:cb:6e:45:ee:3d:e4:60:5f:
                    30:e4:af:dd:ca:46:34:55:79:b9:ea:d7:00:fd:25:
                    2d:ea:d4:11:aa:af:ea:8a:61:45:bc:fc:81:30:80:
                    c7:0d:81:d5:c9:b8:1e:68:cf:eb:43:b3:68:60:12:
                    22:2a:6c:52:2e:63:0b:fa:69:b7:8e:58:87:51:1c:
                    40:24:be:a8:03:34:7e:55:4b:5b:77:25:3c:6e:5f:
                    af:a6:ff:4c:1e:14:05:3a:15:5e:68:60:36:5d:50:
                    d1:19:ee:d5:0f:27:25:1f:fb:f3:a1:bc:66:ab:75:
                    bd:7b:52:f3:a6:69:b1:0a:86:7f:c8:23:8c:4e:23:
                    e0:bc:73:88:1f:da:5e:bd:4c:d8:6c:1a:9e:7f:ba:
                    e1:ef:93:38:a6:87:f6:c6:c9:b4:53:3c:42:29:0b:
                    2c:48:85:c9:cb:e2:88:4e:73:0a:25:df:e9:36:c7:
                    10:08:83:1c:c6:7d:d9:67:58:82:c3:02:d4:ab:ea:
                    ca:db:dd:88:61:04:47:dd:b4:e6:22:71:0e:e1:64:
                    98:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:93:9B:D2:4B:45:94:B8:6B:55:3F:C7:D2:68:0F:B2:3A:2E:1F:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/53c46b42-2f0e-307b-bf61-ed9f967cbe66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.158.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:ef:5a:0d:ae:2b:c3:63:f7:1b:d4:b8:25:8b:17:b9:01:b7:
         ad:82:2e:41:3a:85:3c:2d:79:f8:35:84:fe:03:91:6d:e2:0b:
         be:9b:d4:05:4a:ca:ef:70:cf:04:cc:e0:7a:7b:6d:29:a3:d3:
         48:50:25:da:3a:b0:94:fa:a6:08:89:8b:b1:a5:ba:c5:19:42:
         26:74:7c:ac:de:4c:7e:74:12:7c:2a:b9:9d:a8:5d:b4:c7:09:
         0f:50:9b:40:69:3a:1d:a8:04:73:04:3d:5b:8a:81:5b:16:59:
         bc:8d:23:ed:d7:e9:2c:e4:34:ec:5a:5a:97:68:4b:34:9d:93:
         34:a4:22:35:9d:d1:f4:67:3d:26:53:17:8d:a8:8a:18:f3:28:
         37:9a:85:2e:1d:60:62:34:bd:9e:77:ec:0a:ee:f0:8b:03:80:
         13:d2:77:d9:83:2b:07:ff:e0:0e:89:db:7e:34:1e:46:c3:df:
         50:80:fb:a7:57:e8:57:82:46:d2:78:a9:c7:86:6f:9c:10:e0:
         2f:25:b0:79:3f:66:c6:2e:7f:5a:ad:f9:fe:23:b3:b2:d7:76:
         af:d0:2c:df:fe:77:4d:be:e7:82:65:fc:51:91:63:a1:3e:7f:
         e1:5b:89:f4:36:6e:b7:28:41:e8:cc:4e:d2:3a:0c:a1:93:26:
         ab:b9:92:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----