Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/55dc52f9-0c2d-3e37-97f9-c95ee529563c.roa
File:                     55dc52f9-0c2d-3e37-97f9-c95ee529563c.roa (raw, json)
Hash identifier:          gtRmk43+lcmkVEXfKdfIRVpAHf4umpXX9pe6QVhmLiw=
Subject key identifier:   A2:87:E0:B3:03:A4:A3:3F:34:7A:9B:07:01:80:7F:6B:9A:97:33:84
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584086E485249611B83BF5AB8F80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/55dc52f9-0c2d-3e37-97f9-c95ee529563c.roa
Signing time:             Mon 09 Jan 2023 12:00:00 +0000
ROA not before:           Mon 09 Jan 2023 12:00:00 +0000
ROA not after:            Tue 14 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        161.46.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:86:e4:85:24:96:11:b8:3b:f5:ab:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  9 12:00:00 2023 GMT
            Not After : Feb 14 05:00:00 2023 GMT
        Subject: CN=3ecf2070-460b-43a0-bee7-c4010b6a269b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2a:34:8a:6a:93:7b:fe:d1:8c:e3:0e:1d:09:
                    83:f8:85:6d:43:70:d2:1e:16:26:de:c4:0f:5d:9c:
                    03:59:0b:43:ff:c8:d9:77:d7:93:26:b8:42:20:0d:
                    45:8a:73:f9:a1:67:89:8d:44:78:c2:35:4a:7e:f3:
                    44:3f:20:e5:7c:f7:be:b1:0c:41:31:63:b3:11:3c:
                    e7:ae:ca:99:92:96:66:d1:ff:93:a5:0e:d9:45:d1:
                    3d:69:9a:5c:e2:6c:9f:1a:06:a8:64:39:30:c4:ba:
                    ca:e9:d2:86:c4:f9:5b:d1:04:28:2b:2f:ef:aa:20:
                    f1:7c:37:73:0d:58:39:02:82:79:51:40:c6:c1:2c:
                    f6:94:39:e1:c4:7d:d1:5d:ec:c8:b6:d7:f6:5a:39:
                    b7:07:f2:94:c9:f2:1c:f6:79:70:b8:ac:d6:34:0a:
                    2e:e0:42:49:f8:13:8c:f3:ef:05:ed:25:32:9f:01:
                    01:f2:ff:16:3a:e8:bd:bb:55:3f:2c:e8:c8:bb:28:
                    b3:fd:dd:49:a8:fd:5c:51:cc:e1:33:b0:65:f5:75:
                    75:bd:96:41:4f:85:c0:3e:9f:9a:7f:b9:e0:cf:29:
                    5d:71:c6:94:09:e1:bf:b8:80:65:dc:52:06:71:0f:
                    1e:86:56:04:5e:60:3a:05:1a:75:86:26:8f:da:cd:
                    3a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:87:E0:B3:03:A4:A3:3F:34:7A:9B:07:01:80:7F:6B:9A:97:33:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/55dc52f9-0c2d-3e37-97f9-c95ee529563c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.46.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:53:dc:c2:30:10:18:f3:1e:de:4d:80:33:d1:bf:7c:49:e5:
         cd:c7:d1:0f:27:f0:fa:45:f3:ca:9d:89:32:c8:c6:a3:df:40:
         0c:ab:bf:42:e7:96:8b:e0:86:8c:7a:3b:03:e1:ae:90:df:32:
         90:00:c2:e1:1b:7f:6d:be:aa:e2:e5:39:9f:d9:71:a6:c2:07:
         e6:36:66:8a:64:c0:d6:eb:21:8b:89:8a:b7:82:68:78:a5:27:
         7c:b8:cd:5d:f5:d8:e8:da:db:7d:6b:7b:07:8d:15:2b:0c:33:
         14:59:fb:24:07:b5:b0:e4:90:69:4d:13:af:45:5e:3a:08:03:
         62:1b:37:7a:c4:54:f9:a5:df:e1:1f:d8:22:59:76:6d:3f:b9:
         0b:8a:74:99:51:f0:5c:50:4c:ad:f0:a2:0a:6c:7e:1b:d1:a5:
         f1:2c:e7:ec:68:5d:32:e7:a3:f2:dc:c0:0e:9d:79:d5:61:bf:
         36:27:ee:13:73:7a:ca:89:ee:ca:5c:d3:22:96:d7:03:04:c9:
         4f:46:8a:80:8f:08:96:59:7d:32:d4:bb:7c:5f:db:ef:df:c0:
         f9:36:be:50:7a:7a:89:99:5f:9c:2c:94:36:1d:a3:44:cb:50:
         62:29:63:4b:a3:51:75:63:bd:9c:a5:f9:a6:a4:a4:ce:25:0b:
         bc:17:cf:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----