Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6f04b209-45ff-3468-988b-fc3e2fb61435.roa
File:                     6f04b209-45ff-3468-988b-fc3e2fb61435.roa (raw, json)
Hash identifier:          Y9soDTqmr/PKsJOs5TpamZdO3VoepA244DwZZl1ecAc=
Subject key identifier:   6D:DC:78:97:2C:0B:B4:1A:90:AC:CF:E0:39:49:95:BF:7D:E4:2F:87
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DAB397785801E6F8EFA6D4300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6f04b209-45ff-3468-988b-fc3e2fb61435.roa
Signing time:             Fri 22 Apr 2022 12:00:00 +0000
ROA not before:           Fri 22 Apr 2022 12:00:00 +0000
ROA not after:            Sat 28 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        70.251.64.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ab:39:77:85:80:1e:6f:8e:fa:6d:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 22 12:00:00 2022 GMT
            Not After : May 28 04:00:00 2022 GMT
        Subject: CN=e2f392bb-e458-452a-8e6d-e222807706c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4d:14:7c:3f:b9:f7:09:f4:60:f8:92:c6:c9:
                    71:35:26:16:4b:0c:d7:19:29:e8:05:fa:b2:95:02:
                    62:b7:db:32:11:eb:2d:69:0d:2a:43:41:39:e6:20:
                    8f:37:d5:43:bb:b3:a1:92:58:3c:88:4b:81:e6:f7:
                    91:4f:d2:72:1d:25:72:42:1e:1d:a7:75:3c:93:08:
                    af:a1:03:65:a2:59:c7:5b:1b:20:60:b0:d5:ab:8c:
                    8f:78:cf:28:c2:9f:fe:5b:65:1a:38:b2:57:b5:d0:
                    2d:66:52:7f:ca:99:11:17:1f:fa:96:68:94:35:1f:
                    2a:ab:0a:37:61:84:11:de:03:7b:2d:1b:2b:0d:f7:
                    b3:e0:d7:39:78:94:74:77:d6:a7:12:a5:d5:ad:cb:
                    d8:48:b0:5a:39:d1:11:67:fc:44:ba:ce:3c:63:35:
                    e4:4d:aa:b4:6e:68:08:67:e1:a7:48:2e:75:8a:77:
                    72:5f:82:7a:07:f0:eb:4f:47:e0:96:ce:f1:ee:26:
                    5c:48:ef:7a:26:a6:66:c0:86:7a:09:45:41:e3:7f:
                    5d:52:f5:8a:aa:a1:1d:c9:4e:9f:50:07:ef:91:c6:
                    69:e3:da:90:da:f3:96:ba:fa:89:6f:34:0b:69:ac:
                    80:11:60:62:a1:c5:23:b1:77:37:e4:d3:70:82:18:
                    d7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:DC:78:97:2C:0B:B4:1A:90:AC:CF:E0:39:49:95:BF:7D:E4:2F:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6f04b209-45ff-3468-988b-fc3e2fb61435.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.251.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:4b:a7:71:c7:ee:e0:73:63:20:0a:70:8f:d7:e5:6f:a6:74:
         44:0c:75:63:37:3c:b0:65:46:51:eb:5a:46:01:cc:45:23:aa:
         52:b3:02:bd:4e:5c:5b:f8:09:58:4c:a4:c2:21:44:fa:e4:a7:
         57:9d:b9:bc:a0:7c:47:2d:81:bb:6e:43:76:3d:58:3b:7d:09:
         be:48:aa:31:4b:7e:89:28:12:de:ab:67:e6:01:89:05:b1:ea:
         f8:04:0b:23:ff:f0:5a:bf:57:f7:e2:5b:48:84:ed:d1:5a:20:
         68:6c:b5:b8:da:d6:e2:1a:ad:1d:ba:0a:45:5a:a3:fb:4d:55:
         39:41:0a:2d:93:74:8f:0c:16:f8:94:10:49:95:bc:4d:f1:73:
         43:e3:8e:4d:b7:3d:7b:e1:b4:72:f9:e8:33:7a:41:72:01:dd:
         f5:54:c2:fb:46:e8:08:5f:68:6f:1d:56:2a:de:aa:4f:00:35:
         c0:c1:25:cf:f2:ce:93:d7:cd:f2:04:86:af:ab:6b:d1:ef:f7:
         21:6a:60:ad:ed:41:04:6d:c5:0c:6c:7b:c6:e7:27:72:22:1b:
         b5:d8:40:2a:6a:45:9c:52:18:03:7e:70:25:7c:5d:53:2e:0e:
         68:18:15:5d:f0:d5:52:80:10:54:74:5f:bd:52:ed:b7:f6:42:
         cf:da:81:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----