Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/63346cb0-630d-3f6e-9bf9-0f6ca8e40f8e.roa
File:                     63346cb0-630d-3f6e-9bf9-0f6ca8e40f8e.roa (raw, json)
Hash identifier:          /QHqOL1PWTOQ7OdznzfwQJ00BeZK22ZBiUXQZ8JbGLA=
Subject key identifier:   B8:7A:C2:34:0E:6F:2C:8D:2A:EB:A4:67:21:9A:96:7B:0A:7A:71:2E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584096B62E43D57FEEC456D37B80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/63346cb0-630d-3f6e-9bf9-0f6ca8e40f8e.roa
Signing time:             Sun 15 Jan 2023 12:00:00 +0000
ROA not before:           Sun 15 Jan 2023 12:00:00 +0000
ROA not after:            Mon 20 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        194.148.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:96:b6:2e:43:d5:7f:ee:c4:56:d3:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 15 12:00:00 2023 GMT
            Not After : Feb 20 05:00:00 2023 GMT
        Subject: CN=946f2e61-7e78-4f3e-8d1b-9762d21aa84d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1e:b0:28:73:8f:d1:74:59:2e:eb:bc:06:83:
                    3a:33:af:46:6f:dc:f0:17:86:b4:87:36:2b:bd:c6:
                    28:8f:46:72:10:c8:72:6f:35:73:96:ab:30:0f:21:
                    8d:5b:07:cd:73:e6:5e:2a:61:06:ab:9a:f6:2c:37:
                    7a:c2:58:29:1b:aa:bb:b2:29:14:01:69:e3:6e:99:
                    df:16:f4:7e:27:00:dd:25:e9:ab:38:e0:88:34:d5:
                    e6:3e:c6:21:b1:73:74:46:11:bd:b1:13:28:7e:62:
                    a6:a9:c5:33:f9:61:15:3c:fb:51:e5:86:a9:0d:a2:
                    34:2c:1b:40:c2:79:1a:71:fc:e9:25:a0:b8:e3:cc:
                    52:c9:6b:b8:ea:ad:08:a1:00:04:85:cc:96:3e:76:
                    a6:77:42:c5:22:c7:0e:db:36:03:f4:f7:b6:36:94:
                    c4:30:17:9a:5f:a6:99:f4:21:da:9a:a0:80:ec:f1:
                    30:d2:45:50:53:b2:42:1c:51:a9:33:96:2d:99:77:
                    88:88:67:d7:3d:ea:b8:d9:89:11:c2:34:e1:49:a0:
                    48:e5:09:65:bd:58:65:04:6a:06:36:61:f7:c6:8e:
                    32:28:46:f3:7d:a5:bb:19:d8:4f:74:b5:d3:2f:ce:
                    1b:57:0a:9a:f9:cb:f7:ff:f8:ad:5a:46:33:21:d8:
                    d6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:7A:C2:34:0E:6F:2C:8D:2A:EB:A4:67:21:9A:96:7B:0A:7A:71:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/63346cb0-630d-3f6e-9bf9-0f6ca8e40f8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.148.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:91:92:07:d5:67:d8:33:df:1c:60:a1:86:52:50:02:f4:77:
         1c:27:98:f4:d7:d3:11:f5:c0:87:69:52:f8:49:66:bb:ba:45:
         51:b6:52:53:6a:07:0b:39:12:82:85:d2:05:bd:10:51:bc:ad:
         5f:1e:6e:b8:42:30:ea:f8:07:29:3b:ae:26:18:25:63:80:82:
         32:2a:f7:01:08:6c:b8:d3:cf:33:07:54:21:8a:ff:1e:2b:0d:
         fe:e4:61:37:61:9f:d1:c6:1c:f6:8d:14:ce:da:11:a4:d4:64:
         5b:be:c5:ee:bf:b7:36:af:e4:ce:27:8d:f4:f1:57:b3:61:ee:
         cb:a6:35:b0:63:36:3c:ef:c5:f7:21:ec:93:df:88:42:08:e9:
         fd:fe:1a:d2:0c:3b:74:6b:0f:5f:0d:e9:41:25:a5:97:09:1c:
         9a:61:28:5c:2e:ab:f2:15:fd:80:4a:89:9d:e2:b9:38:f9:4d:
         24:be:02:a5:ae:33:7e:82:85:89:9d:26:f4:01:44:05:a3:3d:
         d3:db:a6:14:ee:dc:79:95:fd:b9:ce:66:a5:7a:74:80:d6:b9:
         95:c7:2b:cd:9f:aa:b0:27:db:27:e7:11:86:7c:cf:c9:a4:33:
         12:78:72:cb:f4:f6:89:75:2c:0d:ca:0f:26:c0:13:60:af:2a:
         66:75:bf:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----