Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5aed2b67-37d3-35f2-9b02-f4de1b4288c1.roa
File:                     5aed2b67-37d3-35f2-9b02-f4de1b4288c1.roa (raw, json)
Hash identifier:          2sWhfqa6/MDmvt9g8mINHValsQa/pzizqRXbP4sF/UA=
Subject key identifier:   19:B7:69:D5:E4:19:6E:2D:43:98:21:0C:D3:B5:BE:D1:69:BC:BD:CC
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840AD296A54C8E12F757B1C9980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5aed2b67-37d3-35f2-9b02-f4de1b4288c1.roa
Signing time:             Mon 23 Jan 2023 12:00:00 +0000
ROA not before:           Mon 23 Jan 2023 12:00:00 +0000
ROA not after:            Tue 28 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        130.186.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:ad:29:6a:54:c8:e1:2f:75:7b:1c:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 23 12:00:00 2023 GMT
            Not After : Feb 28 05:00:00 2023 GMT
        Subject: CN=6d936c6a-6c99-45ed-bfed-bc839bda93bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ee:9b:cd:30:95:2b:1f:3c:0c:9e:d4:1e:34:
                    d8:a0:3c:34:ff:e4:39:a7:6f:42:a0:40:21:22:0c:
                    57:c7:1a:af:66:0d:80:54:77:84:46:8a:e1:3e:3d:
                    ca:97:c4:45:2f:5a:40:9a:a3:55:d2:b1:3e:1a:53:
                    71:b1:73:38:70:3b:d1:f6:41:a1:42:37:d1:15:b3:
                    ab:d8:6a:c1:de:65:e3:8d:0c:fc:0b:3b:bc:aa:58:
                    19:ef:1b:e1:15:17:45:05:f4:c6:a1:ea:d9:16:24:
                    62:f0:c4:dd:06:06:6e:e7:e5:53:eb:d7:08:68:ab:
                    c6:4d:7d:b8:c7:c2:5e:4b:27:6c:c8:ce:a0:25:00:
                    8f:d1:a4:89:6d:58:1a:42:cf:3a:0f:19:39:42:f5:
                    1a:81:9c:ce:29:28:9f:fd:df:da:06:3c:2b:5b:f2:
                    60:a8:82:fe:f4:35:70:8a:b7:e1:a0:b5:53:e6:c2:
                    0b:43:4d:0e:81:85:a8:bb:37:59:04:d5:97:a7:cb:
                    26:0b:e7:01:71:e4:f3:54:e2:c6:29:ac:6c:8e:73:
                    31:b7:7d:62:0d:49:17:6c:58:68:4f:f1:63:66:09:
                    d5:0f:14:55:c2:d2:25:d2:26:63:9a:29:64:c0:8c:
                    c4:03:a5:c3:20:18:f6:68:40:fa:36:cc:ea:0b:ed:
                    4d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B7:69:D5:E4:19:6E:2D:43:98:21:0C:D3:B5:BE:D1:69:BC:BD:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5aed2b67-37d3-35f2-9b02-f4de1b4288c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.186.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:1f:01:14:a7:da:72:4b:61:c2:bb:5a:28:24:64:d1:7b:bc:
         fe:03:19:dd:a8:6d:3b:a0:be:95:8d:7f:d9:03:6c:d8:71:e4:
         b4:99:6a:68:72:4a:8b:3d:e2:93:52:39:47:b4:35:8c:64:41:
         3d:07:e2:c2:20:5c:69:1a:0c:bd:29:6d:e0:8f:30:05:4e:79:
         79:f6:04:57:2a:da:3d:d4:f4:01:35:7c:17:86:86:40:96:b8:
         74:44:b2:50:e9:b7:7b:34:8e:89:2a:d3:f1:55:7d:63:79:08:
         bd:0c:7b:72:ce:3c:8e:b6:9a:28:f8:7b:b4:84:c4:53:22:a3:
         06:c3:1d:4a:7e:6c:ee:bc:0e:ac:25:23:ad:82:32:93:a5:a8:
         83:81:88:6e:ff:4c:90:1b:99:87:3d:71:75:c6:f4:f8:8c:b9:
         55:66:66:ab:b4:ef:03:15:b9:b2:e5:4e:36:31:21:08:65:0a:
         25:0a:cf:d0:83:3f:81:a5:2e:c7:43:1e:bd:36:ff:0c:8a:58:
         4f:77:68:33:df:28:32:24:46:35:91:c4:b2:47:10:ab:74:4d:
         ef:dc:1d:f4:b7:b0:62:6d:6f:39:aa:36:87:3f:c4:09:eb:58:
         61:0e:ba:0a:da:bb:6e:ca:71:23:81:42:ef:b9:94:f3:a7:91:
         8b:5c:cf:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----