Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/57338114-b315-331d-9263-fd11e5d1408c.roa
File:                     57338114-b315-331d-9263-fd11e5d1408c.roa (raw, json)
Hash identifier:          3w4PWIDkBzexTdD15OC8D+4vewMq8UZecKrQ9Ihahn8=
Subject key identifier:   12:F9:DF:3C:A7:E7:9B:14:07:E8:75:35:88:FB:3B:3F:37:32:EC:57
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584078958B1C989D9750F6503B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/57338114-b315-331d-9263-fd11e5d1408c.roa
Signing time:             Wed 04 Jan 2023 12:00:00 +0000
ROA not before:           Wed 04 Jan 2023 12:00:00 +0000
ROA not after:            Thu 09 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        56.134.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:78:95:8b:1c:98:9d:97:50:f6:50:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  4 12:00:00 2023 GMT
            Not After : Feb  9 05:00:00 2023 GMT
        Subject: CN=b95b337d-c383-4118-a67f-d18443532c14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:73:6b:25:ce:29:77:0c:5f:f2:c8:1a:b1:e9:
                    52:a2:4c:68:f0:c6:f5:30:f7:7c:78:87:9b:f5:9f:
                    33:99:90:06:85:0a:3b:19:5c:13:11:b6:24:50:8f:
                    41:e8:08:c2:2d:e8:9a:f1:bc:b9:71:ad:58:82:4b:
                    2e:31:fa:c4:1b:fd:0a:50:a7:29:a1:42:e5:ec:3f:
                    36:ea:26:47:90:df:a7:8f:d3:6c:b5:ca:ae:85:ce:
                    c8:9d:28:1c:ef:1e:0c:f1:7a:e1:9d:50:64:d5:e1:
                    28:3f:40:bf:ca:74:9f:32:7b:f5:d7:df:2b:9d:db:
                    3b:c1:a4:ff:33:0a:63:4b:97:08:1b:1b:df:9c:91:
                    5d:e0:df:d3:30:84:85:99:35:82:8a:f0:f9:a7:07:
                    d5:12:ad:c0:5c:3d:44:7f:7e:13:32:36:d7:bf:a5:
                    d7:bf:73:3e:c4:17:de:ce:bd:6f:ef:0d:9c:6b:68:
                    0d:d6:92:91:01:9f:64:b4:74:84:90:87:20:6b:85:
                    a5:22:d3:7d:c0:b5:87:98:cd:6e:ee:0c:28:5d:e6:
                    3d:10:32:58:58:c0:27:2e:c5:25:a3:47:72:d8:f0:
                    04:82:e6:0e:de:7a:27:b2:2e:2c:4e:db:11:4a:0c:
                    6c:c1:58:68:e6:e4:56:0a:f0:71:e3:e9:0a:3e:db:
                    86:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F9:DF:3C:A7:E7:9B:14:07:E8:75:35:88:FB:3B:3F:37:32:EC:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/57338114-b315-331d-9263-fd11e5d1408c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.134.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:8a:96:ba:b8:18:36:74:76:2e:1f:9b:18:c9:fc:1e:9e:89:
         37:60:20:4b:77:01:57:b6:20:6c:a1:f4:90:84:92:89:61:da:
         5f:c0:a8:47:ee:d5:dd:c1:9f:b5:55:2a:e2:a2:48:6f:d3:aa:
         46:c0:dd:3b:2c:a5:d9:bf:fc:10:77:07:5d:cd:bc:f1:67:19:
         c3:7e:d1:53:b0:09:66:8b:de:86:40:54:ed:37:c6:32:de:35:
         a3:af:dd:bd:f6:b3:38:36:d3:64:a8:79:81:e0:27:80:1c:c0:
         8e:c2:cd:dc:14:c1:ee:11:86:0d:a6:bc:08:8c:4e:79:0a:08:
         f9:9b:21:b8:d6:be:8c:1e:40:6d:dd:bf:35:ec:d3:51:be:84:
         a3:bd:aa:03:c1:7c:2f:b8:e9:b0:08:dc:75:63:38:0a:23:fd:
         6f:7a:1d:63:6e:cc:3d:43:94:28:45:fb:60:f1:b6:7a:45:45:
         71:ec:9b:bd:1e:af:bd:26:b2:fd:95:8c:10:7c:e4:23:53:5a:
         89:c3:2f:93:22:0b:87:fd:89:5e:d0:66:36:18:34:41:92:24:
         c7:af:63:3f:9b:8c:91:34:50:bf:90:8a:a4:8a:3e:bc:18:6e:
         a9:35:e9:18:a7:08:69:6c:6c:59:37:93:9c:93:37:4b:1f:ca:
         d3:d3:b4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----