Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6d3a2749-3abd-3cdc-98a9-71db340d1f2b.roa
File:                     6d3a2749-3abd-3cdc-98a9-71db340d1f2b.roa (raw, json)
Hash identifier:          huzZSa3r29mLT9RtaUkArHGEuDptYF7LEoSQ4cx6wyY=
Subject key identifier:   E5:91:3C:4A:13:1C:5F:F4:8F:A2:A7:B8:90:A5:42:31:39:DA:5D:BB
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840A4D0D30F482A6142F8C8BB00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6d3a2749-3abd-3cdc-98a9-71db340d1f2b.roa
Signing time:             Fri 20 Jan 2023 23:36:08 +0000
ROA not before:           Fri 20 Jan 2023 23:36:08 +0000
ROA not after:            Sat 25 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        156.27.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:a4:d0:d3:0f:48:2a:61:42:f8:c8:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 20 23:36:08 2023 GMT
            Not After : Feb 25 05:00:00 2023 GMT
        Subject: CN=662bd790-b947-4f54-9d24-3f899473177b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:47:61:c8:9b:ac:ea:4c:57:77:9c:a2:09:b8:
                    d6:2f:88:3b:4a:89:1f:f0:cb:41:0f:50:57:7f:80:
                    83:e8:7a:6c:4a:11:18:b9:a2:3c:d8:a3:66:02:88:
                    37:d4:38:a1:96:b6:fb:4e:1e:d2:80:6d:14:12:c5:
                    df:88:ce:72:ed:88:50:48:1a:c7:41:b3:74:76:14:
                    69:3a:91:66:c0:e4:a4:4b:aa:43:6b:01:6a:78:28:
                    63:d3:56:75:9a:35:93:5b:b8:ca:ea:c5:7b:f3:14:
                    3a:f5:8b:a4:01:d5:e4:98:5d:37:b6:9c:c1:47:46:
                    83:be:d9:ff:9d:08:63:e8:7b:2e:b7:d4:c0:9b:59:
                    c8:40:3b:86:0d:89:bf:5b:e2:15:c8:a8:da:ea:37:
                    af:4b:02:dd:98:1e:63:25:59:62:4c:85:2f:7c:75:
                    64:75:d5:aa:a7:15:7d:22:90:4e:3d:f3:7f:1c:f3:
                    87:a5:39:bb:8f:6d:a9:17:7d:86:43:4c:ee:40:00:
                    1a:b0:f3:0d:60:91:01:a3:0a:c4:b2:6e:c5:7f:8b:
                    72:bb:d7:83:97:11:4a:dd:48:7b:cb:99:dc:59:6b:
                    91:d1:17:36:1e:f5:06:22:dc:4c:08:4f:f8:7a:40:
                    86:39:aa:63:c7:cf:91:d6:69:57:33:6e:e0:3e:19:
                    7b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:91:3C:4A:13:1C:5F:F4:8F:A2:A7:B8:90:A5:42:31:39:DA:5D:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6d3a2749-3abd-3cdc-98a9-71db340d1f2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.27.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:31:96:fe:44:8b:8d:67:fd:a3:d4:c0:da:e7:b3:27:eb:06:
         3e:5f:0c:fd:3f:b7:c6:ec:4a:33:06:98:59:9c:52:0f:df:bd:
         6e:d9:9e:67:55:98:3d:9c:06:08:b0:a3:1a:65:f6:0e:29:84:
         ed:76:d9:3d:d5:8c:ea:41:69:64:5b:88:48:da:4d:f6:c4:de:
         37:85:3f:7d:1a:12:4f:f1:06:bc:93:d7:50:ca:1e:07:50:9a:
         77:30:ac:e7:48:88:71:48:39:bd:ee:d7:2d:aa:0c:c8:87:75:
         55:11:bc:e1:7b:4e:24:d0:25:72:ea:03:b4:3e:3e:f1:10:89:
         1a:a5:db:e7:54:28:f8:2f:55:e3:76:de:d5:6c:cc:55:3a:ad:
         50:db:1c:c0:b9:2c:2e:8e:e9:1e:01:a8:63:2a:97:eb:0a:79:
         4a:8e:08:50:c8:ce:e8:56:4b:ff:78:2a:6c:10:b5:3e:03:c4:
         b8:69:f7:f1:a4:cc:5b:d6:dc:f5:08:94:5e:fe:e3:30:55:cb:
         db:df:54:c7:5f:25:06:fc:e8:14:cc:b6:4c:df:eb:62:0f:db:
         04:39:94:c3:5a:bc:8b:9c:30:ba:84:c4:95:2b:69:44:b3:aa:
         c2:61:bd:cb:9b:ee:b2:22:97:76:55:3e:8f:f0:61:da:9e:e1:
         3d:3e:82:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----