Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/73d80a2b-0298-3c1e-a87b-b13d35d804b0.roa
File:                     73d80a2b-0298-3c1e-a87b-b13d35d804b0.roa (raw, json)
Hash identifier:          dwUeU7GI60m8OBbKW+q+6WajrFW507byaMzHQ8o3U1o=
Subject key identifier:   10:6C:EA:44:99:1A:A6:64:3E:98:EA:8F:F1:BC:A6:EC:7E:54:04:DC
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840D4F922C89E837B199DFA1480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/73d80a2b-0298-3c1e-a87b-b13d35d804b0.roa
Signing time:             Mon 06 Feb 2023 12:00:00 +0000
ROA not before:           Mon 06 Feb 2023 12:00:00 +0000
ROA not after:            Tue 14 Mar 2023 04:00:00 +0000
asID:                     8987
IP address blocks:        151.148.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:d4:f9:22:c8:9e:83:7b:19:9d:fa:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  6 12:00:00 2023 GMT
            Not After : Mar 14 04:00:00 2023 GMT
        Subject: CN=3306374d-60b5-4ce7-88ea-5cb4b01bb4e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9b:be:c1:57:8d:6f:cb:57:92:b9:c6:bf:34:
                    8d:c0:d3:91:fc:33:f0:81:37:07:b6:cd:6c:61:6e:
                    d3:83:00:63:28:f5:af:3f:6a:8b:cc:ed:ce:18:c7:
                    d4:09:14:bd:64:65:13:45:1b:2a:88:a9:9b:15:f0:
                    f7:63:ec:76:76:91:8a:d9:9d:17:79:c2:d0:a0:32:
                    1d:1a:65:6c:60:59:95:9b:5c:a1:c4:b0:97:36:5d:
                    d4:3a:59:d6:9c:c7:01:06:77:ec:c0:26:03:29:9c:
                    86:24:79:f6:9c:bb:82:43:14:a3:a2:f9:b1:ee:60:
                    14:31:8b:53:ac:3e:4d:7e:9f:c2:bc:09:63:6d:68:
                    b6:07:06:a9:40:a8:2c:1e:87:00:38:97:7a:56:31:
                    b3:fd:69:3f:3d:7b:02:65:71:85:44:5c:96:2b:0b:
                    be:f1:0d:5c:ea:33:32:01:38:3c:43:2f:d6:83:8a:
                    2f:d9:8e:f6:7b:a6:ac:2e:53:7f:a2:43:e7:fb:4a:
                    f4:65:84:e8:2c:4b:35:f3:b9:2e:83:06:6d:fc:58:
                    d6:15:2f:7e:ad:55:91:c6:b6:24:d9:4c:71:27:d9:
                    93:2c:87:43:7a:4a:b8:26:90:98:39:eb:6b:61:14:
                    bc:6c:65:0f:f4:a5:6b:c3:5e:9e:de:68:cd:99:b5:
                    dc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:6C:EA:44:99:1A:A6:64:3E:98:EA:8F:F1:BC:A6:EC:7E:54:04:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/73d80a2b-0298-3c1e-a87b-b13d35d804b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.148.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:35:af:0e:ed:a1:3c:6f:39:64:60:c9:52:51:47:27:62:c7:
         c3:36:00:0d:67:de:1a:6a:54:19:54:8e:de:59:93:86:a8:b1:
         90:d2:93:d1:57:ad:00:1a:56:7d:02:03:0f:79:71:51:b5:1e:
         7d:30:76:e9:72:14:9a:73:56:7f:7e:8f:e1:b2:85:fb:bb:85:
         1c:61:58:72:b9:78:6b:9d:8b:7b:4c:7c:b0:28:34:0c:12:e4:
         20:31:bc:44:5e:2a:9c:37:65:12:a4:c7:88:28:69:22:d5:bc:
         45:ee:fe:ba:d3:b2:f7:3c:01:ec:43:00:56:60:b1:30:09:d1:
         fd:47:c4:5f:79:a1:28:e3:8e:48:5a:29:42:bf:9c:ab:73:00:
         b4:60:e0:ac:4a:b5:0f:c5:eb:a6:40:33:7f:c4:51:cc:04:51:
         aa:5a:63:75:ee:28:b5:b1:7f:8c:bf:70:88:f3:99:ee:25:6f:
         5e:82:7c:cb:7f:73:db:9b:14:20:e2:1f:fa:26:c1:72:74:72:
         81:b7:1a:39:7b:2b:36:5b:71:0a:d1:86:47:2d:b7:fb:26:3d:
         f7:8f:6c:c5:15:9d:02:2f:d6:a0:10:17:c6:3e:1a:ae:4a:f3:
         ee:aa:61:b6:fc:9e:32:42:84:95:db:9c:ba:51:ed:92:2f:ed:
         32:e6:19:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----