Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6866f828-da99-3a9a-a23b-bfac6eae5974.roa
File:                     6866f828-da99-3a9a-a23b-bfac6eae5974.roa (raw, json)
Hash identifier:          qoqVDuBph1+Fi7PsxNmC7tlreAfTEO+69M834RkS8aA=
Subject key identifier:   20:C0:C5:85:EA:15:D3:BB:DE:2A:DD:AF:10:23:0E:E5:41:2C:DE:C4
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858408375CDA91C58F98FA2E95080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6866f828-da99-3a9a-a23b-bfac6eae5974.roa
Signing time:             Sun 08 Jan 2023 12:00:00 +0000
ROA not before:           Sun 08 Jan 2023 12:00:00 +0000
ROA not after:            Mon 13 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        65.176.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:83:75:cd:a9:1c:58:f9:8f:a2:e9:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  8 12:00:00 2023 GMT
            Not After : Feb 13 05:00:00 2023 GMT
        Subject: CN=d816e3b0-92b8-4fc4-97fe-8a6239a9f3ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:02:7a:a0:3a:67:be:fa:a8:30:68:fa:ca:f1:
                    f1:a6:85:f6:42:12:a5:7c:ca:0f:b8:26:be:87:4c:
                    2c:0d:d9:16:07:42:5f:92:dd:41:a6:81:a1:8a:c6:
                    2b:46:56:86:d6:a9:31:2f:4a:3f:5d:7a:74:8b:64:
                    8e:fc:4d:58:6c:ac:b3:c0:94:00:e1:75:6e:a6:18:
                    c4:33:5b:a6:c5:e2:be:c3:0a:47:5f:fa:6a:19:bb:
                    a5:0e:5d:2f:8c:25:d1:ce:6f:cc:0b:1d:63:7c:30:
                    de:08:1b:4e:18:87:93:b3:e3:fc:e6:93:6d:f2:7f:
                    66:d5:c6:6f:b7:55:f6:a0:7b:9d:be:ba:13:25:f9:
                    f6:52:ca:22:3e:1e:3d:2b:30:62:13:82:c9:dd:4f:
                    5e:54:e1:98:d2:97:1f:2b:fd:9e:fe:bd:3a:ac:0e:
                    d5:e0:e8:8e:ea:97:8a:00:e8:0c:00:c8:a3:c3:df:
                    be:c6:6c:e1:79:f2:55:f3:7d:07:83:43:dd:59:3f:
                    58:8a:3c:72:b8:0c:a0:3a:36:82:b3:77:e1:c2:07:
                    d3:4d:4e:4e:6a:07:d5:3f:df:87:9c:11:dc:1e:da:
                    5f:a9:c7:5b:9c:1f:04:f0:60:2f:ce:1d:5e:d0:96:
                    25:08:9d:11:a8:be:84:a1:f6:db:ff:1d:67:65:cd:
                    db:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C0:C5:85:EA:15:D3:BB:DE:2A:DD:AF:10:23:0E:E5:41:2C:DE:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6866f828-da99-3a9a-a23b-bfac6eae5974.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.176.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:45:1d:13:35:f7:08:3d:ab:51:25:ee:f3:18:70:de:92:6f:
         6a:cd:69:8b:33:b8:97:87:34:df:1d:c2:ca:d8:3c:e3:22:ba:
         e6:26:4f:4d:0c:39:5f:ac:9a:33:f7:23:39:0b:03:40:4a:de:
         ef:a4:7d:a2:f5:c3:7e:ed:d3:11:64:73:65:5c:10:bb:a3:5e:
         80:92:54:4c:c5:d5:d4:b8:95:c6:8c:74:ab:ca:76:8e:11:0e:
         b4:fe:c8:06:4a:88:1c:4b:8c:eb:f4:6b:19:ad:60:0d:1a:b0:
         80:99:96:02:e6:29:ee:61:19:5d:4c:e0:75:de:4b:94:27:fe:
         ed:3d:6b:54:4a:45:ad:65:1a:ba:71:8f:19:cf:1d:70:dd:a5:
         62:bd:b2:75:a3:57:28:51:7c:bd:15:66:0a:71:2a:1b:a0:2a:
         d4:62:8d:34:bc:5a:f2:6c:b7:85:26:93:f9:8e:04:81:7e:09:
         81:d7:fd:ac:a6:fe:86:1c:23:24:e8:c5:59:5b:b9:91:66:2a:
         c5:f0:30:58:4b:eb:ff:29:4f:28:af:ac:83:ea:21:2f:7a:9d:
         aa:38:53:c1:8e:40:37:21:63:60:1f:8b:e0:9f:25:9f:b1:23:
         f0:3e:a0:cf:73:25:dd:15:d8:81:5b:84:11:54:4a:fa:39:fb:
         59:73:39:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----