Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/60423771-9385-326b-a22d-7130741a0878.roa
File:                     60423771-9385-326b-a22d-7130741a0878.roa (raw, json)
Hash identifier:          o81xJmtac/eYvbgD6SGDDzXrjAUe8PvAN1x+xVh9HvQ=
Subject key identifier:   DC:D8:FA:7F:8D:59:C6:76:C2:9E:89:3E:48:E0:CC:C9:17:A5:78:CA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840B670489B2C60EB9CD45F9200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/60423771-9385-326b-a22d-7130741a0878.roa
Signing time:             Thu 26 Jan 2023 15:12:07 +0000
ROA not before:           Thu 26 Jan 2023 15:12:07 +0000
ROA not after:            Fri 03 Mar 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        76.223.128.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b6:70:48:9b:2c:60:eb:9c:d4:5f:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 26 15:12:07 2023 GMT
            Not After : Mar  3 05:00:00 2023 GMT
        Subject: CN=fdbde182-05d0-453d-855b-8c593125abd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a2:73:89:a8:78:0d:07:e6:3e:fc:36:a7:a1:
                    90:a8:3d:32:31:13:1d:2d:48:79:d3:c5:2c:bc:ef:
                    e9:bc:12:39:0f:bc:57:47:14:9e:9e:fe:30:60:30:
                    1d:07:76:b9:04:2d:cf:17:3e:9a:75:9a:6b:fa:32:
                    77:eb:f7:0c:4f:96:64:3e:b5:49:bf:02:bf:3e:4e:
                    4c:8c:02:1c:fc:d2:b2:a5:1e:29:80:c6:2a:49:d2:
                    bb:fd:32:57:9c:26:3f:18:96:47:98:44:df:49:9c:
                    59:20:e4:84:8f:27:d6:be:a0:dc:8e:7c:13:ec:e9:
                    61:64:3e:fb:c6:35:b3:c6:3e:df:9d:96:65:2c:4a:
                    39:35:7f:c7:06:60:e8:d8:6d:38:fb:c1:a9:a2:ac:
                    23:c8:6c:5e:fb:97:7d:ea:52:fb:e4:da:3a:2f:f5:
                    53:47:40:97:6f:5d:99:e1:89:ca:05:b4:58:89:fb:
                    3f:d9:9e:df:de:71:c6:84:00:34:7e:6a:e7:f8:f2:
                    39:95:07:fc:1b:35:ca:6b:ce:bc:a0:70:f8:26:eb:
                    51:ca:23:79:9c:8c:33:3b:1e:5b:7e:33:27:2f:af:
                    68:24:5c:0e:a3:39:1c:ba:0a:59:d3:2f:54:00:41:
                    3d:31:98:62:da:3a:a9:ab:c3:9d:93:85:ea:78:73:
                    bd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D8:FA:7F:8D:59:C6:76:C2:9E:89:3E:48:E0:CC:C9:17:A5:78:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/60423771-9385-326b-a22d-7130741a0878.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:a6:9e:ba:9a:17:9a:b7:56:cd:d6:62:30:cb:81:5f:38:24:
         45:a1:43:d0:4b:e1:43:fc:92:93:37:bd:fb:8f:0a:a2:a1:c1:
         fe:bb:51:46:d0:e6:71:f5:0c:7b:55:a5:aa:b9:28:44:f6:ad:
         8e:ab:90:7c:d7:39:ad:7e:c8:2b:1f:ee:55:54:d0:df:aa:42:
         1c:2e:ba:6b:bc:93:db:79:ce:22:69:d2:f0:cd:e4:47:7b:49:
         a6:15:91:7b:ab:ec:b1:e3:c3:ea:b3:a0:a0:34:0e:be:5b:d6:
         94:0f:4f:c8:24:fb:19:76:30:c2:67:a4:38:f0:78:45:24:89:
         76:2b:d7:f9:74:24:20:75:95:53:d2:4b:a5:01:86:70:6b:fc:
         88:24:77:b1:1d:41:d8:a1:50:5d:67:0c:18:81:5e:6b:fb:1b:
         fc:02:9f:4f:9c:48:3d:dd:74:97:a2:cb:1c:e3:31:34:3b:8a:
         ad:31:ae:42:24:98:5d:82:a6:06:a4:33:af:46:a4:c3:9d:28:
         f5:c1:6c:d9:37:60:08:57:06:a5:ab:aa:47:20:b2:8a:ab:b1:
         ac:a1:80:43:1f:e6:02:86:e8:16:62:d0:ff:12:33:98:75:22:
         22:5a:b9:de:a8:1c:60:a4:19:95:a8:86:5d:00:78:ce:17:65:
         a1:64:ab:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----