Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5bf91145-30c4-3fe6-8ea1-be35f4ba8d64.roa
File:                     5bf91145-30c4-3fe6-8ea1-be35f4ba8d64.roa (raw, json)
Hash identifier:          mbUrlfIlJtGPXIPu/FMoKgCZ0s7xkF1u3MkcTMEWFB4=
Subject key identifier:   3C:E7:8E:2C:80:73:3C:1A:7C:70:B8:23:BE:F8:96:04:61:15:CF:F4
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858409F6110C6E05D6E7E208FC800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5bf91145-30c4-3fe6-8ea1-be35f4ba8d64.roa
Signing time:             Wed 18 Jan 2023 12:00:00 +0000
ROA not before:           Wed 18 Jan 2023 12:00:00 +0000
ROA not after:            Thu 23 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        13.192.0.0/13 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:9f:61:10:c6:e0:5d:6e:7e:20:8f:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 18 12:00:00 2023 GMT
            Not After : Feb 23 05:00:00 2023 GMT
        Subject: CN=395c9797-1bf0-4dfb-bfdc-d0caa3383b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:01:65:4d:4d:8d:c0:9f:a2:52:eb:f9:ea:44:
                    83:78:ec:79:7b:ef:c9:fc:9f:a1:bc:da:53:a1:36:
                    e2:13:4d:72:3d:5f:c8:60:62:19:5c:57:44:6e:da:
                    a5:4d:6d:b5:39:c0:7d:98:a6:78:fd:3c:84:95:1b:
                    f9:5a:55:45:8c:0d:fa:a4:46:8b:e9:59:fb:8e:c2:
                    8a:55:85:38:43:e9:e9:4f:1e:de:35:41:e8:dc:92:
                    9c:7f:e4:00:2e:30:53:19:5b:10:1d:eb:6e:87:70:
                    8e:5f:de:b5:1b:b8:a5:23:31:12:ef:2f:7a:f8:b2:
                    a3:e6:9e:76:a2:51:a4:9e:fe:8a:aa:cf:32:d0:3b:
                    10:9f:23:f6:3f:ab:7b:16:12:f2:c4:c5:df:8a:24:
                    0c:e9:1d:c6:97:c1:41:e3:d4:db:6f:63:1c:fc:fa:
                    65:02:27:53:21:1f:69:53:f4:3b:71:46:61:01:02:
                    59:83:9d:51:54:fb:36:a6:16:28:c8:56:8e:43:63:
                    df:0f:ac:1d:ce:35:22:dd:7b:9a:7e:8c:2c:b0:07:
                    9a:32:fa:23:d9:23:41:2a:d3:94:a7:29:50:60:f6:
                    f8:58:81:0c:f9:bd:99:af:fa:20:80:d5:75:78:97:
                    86:ed:43:09:87:54:94:d2:41:58:fa:ea:e5:b1:e2:
                    a7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E7:8E:2C:80:73:3C:1A:7C:70:B8:23:BE:F8:96:04:61:15:CF:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5bf91145-30c4-3fe6-8ea1-be35f4ba8d64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.192.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:df:22:89:87:40:17:9d:e3:b3:2b:e2:43:62:9c:7f:e6:b7:
         0b:b8:29:5e:ac:d2:e7:b6:f2:3d:c9:3c:46:2e:0a:56:5e:b9:
         6e:b7:50:54:26:62:8e:7b:32:27:71:41:29:b1:0f:4b:77:c9:
         7f:e2:e1:5d:22:e0:36:79:52:ba:22:6e:a0:16:e0:5d:62:55:
         c7:d9:19:8b:de:c1:ae:be:f6:fa:28:44:3c:26:a4:e1:a1:8c:
         c0:20:ee:35:cc:9f:c2:80:58:f3:0c:ea:e5:7d:ea:eb:2a:d9:
         2b:22:02:81:56:0d:95:45:d2:32:be:5e:40:9a:52:9a:ad:f7:
         54:5a:25:aa:17:ff:a6:9e:6f:4c:94:c6:e5:35:8f:cf:7c:e9:
         97:20:e7:7e:60:8e:2d:c9:ba:9b:71:60:be:22:62:61:66:d3:
         97:c2:e7:52:ac:9a:4e:1d:f9:c0:2b:20:c4:bc:ba:df:76:f4:
         73:6b:fa:36:23:b2:67:e8:9e:88:d6:6d:b8:98:cf:76:4f:0d:
         3b:a8:fa:a5:29:70:0b:10:07:0b:a9:68:80:d6:19:25:bd:a7:
         c1:0d:19:e1:05:50:b3:63:be:f4:e2:6d:62:8e:1b:d1:4c:74:
         d8:f3:d7:d6:2d:8c:ed:b1:55:d0:3f:1f:30:33:00:8d:3f:6c:
         50:b5:7a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----