Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/73ed9652-450d-3693-9201-1607bd5d7420.roa
File:                     73ed9652-450d-3693-9201-1607bd5d7420.roa (raw, json)
Hash identifier:          R9p0w8ZlrH7NY6onRC2/5ZHKCS27hXR+XNF1p4dvLCA=
Subject key identifier:   AB:03:5F:93:82:F6:76:30:8C:5F:D1:B3:94:4F:FC:C4:4C:20:01:C6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858408F626C89D0A399A767571980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/73ed9652-450d-3693-9201-1607bd5d7420.roa
Signing time:             Thu 12 Jan 2023 12:00:00 +0000
ROA not before:           Thu 12 Jan 2023 12:00:00 +0000
ROA not after:            Fri 17 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        2620:107:4000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:8f:62:6c:89:d0:a3:99:a7:67:57:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 12 12:00:00 2023 GMT
            Not After : Feb 17 05:00:00 2023 GMT
        Subject: CN=8a17ca05-1eb0-40e3-ac57-8d36072f7032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cb:74:a5:6f:bd:b6:41:9c:99:bf:c8:15:87:
                    c2:ff:53:a6:9f:18:17:fc:79:06:df:11:93:3f:9e:
                    3c:b0:1b:48:e6:3e:cd:0c:0b:9e:54:34:7e:2c:dc:
                    73:b8:43:e7:04:43:00:16:b0:5d:cf:89:96:e3:6b:
                    34:aa:fc:12:11:a0:fe:1f:bc:be:25:98:40:41:6d:
                    13:2c:41:ac:30:9f:e0:90:cf:ac:9a:24:7b:63:8f:
                    93:83:fb:9f:7f:40:59:fd:f9:60:09:aa:a2:db:4a:
                    2d:76:fb:91:d7:6e:8d:3a:da:fb:5a:4a:cf:f0:78:
                    3a:70:d1:b1:95:42:7d:66:c6:23:33:f2:d2:ad:11:
                    5b:b1:ac:5d:1d:c1:04:98:50:9f:f7:21:83:d5:af:
                    30:38:37:77:66:1a:06:87:c0:b7:f3:77:a2:da:ee:
                    c4:4a:e1:53:23:48:89:1f:b2:5d:22:41:15:78:8d:
                    68:64:03:06:2d:8c:10:15:93:2e:97:02:1d:53:13:
                    14:00:7b:7f:b1:37:38:8f:95:7c:b7:2b:7d:20:6b:
                    ca:87:28:a4:50:d7:32:c4:32:ad:64:a7:da:26:9c:
                    e1:22:c6:7f:4a:82:75:7e:12:c7:cb:60:ce:d1:1a:
                    ad:b6:a0:c9:94:4e:a8:d3:43:26:f8:57:c2:06:2a:
                    bb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:03:5F:93:82:F6:76:30:8C:5F:D1:B3:94:4F:FC:C4:4C:20:01:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/73ed9652-450d-3693-9201-1607bd5d7420.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:107:4000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:ba:eb:b2:17:07:2a:9c:c5:e8:f7:75:29:92:33:42:09:a8:
         0e:e0:be:66:d9:0d:a6:55:97:ba:b3:42:29:ba:9f:8c:0c:af:
         5f:e8:9c:fd:40:90:87:8c:fd:30:e5:16:d9:64:a1:4b:62:79:
         f1:60:43:53:9b:82:95:89:56:ab:42:32:b4:d1:44:7c:18:55:
         2f:fa:2d:ab:99:f1:0f:86:f9:f2:17:58:0a:ba:bf:62:24:5b:
         3c:46:e2:b3:cf:bd:4f:df:5f:9a:fa:65:aa:f8:58:2a:09:ee:
         52:88:1e:4a:6f:7c:ac:b9:47:52:99:b3:9e:25:5c:3f:cf:4b:
         b2:26:c0:3a:7e:39:ed:ed:47:fb:d9:98:12:52:f4:a3:a2:b5:
         11:72:c6:74:d9:ea:3c:dd:fe:8a:fa:b9:6d:00:dd:5a:aa:da:
         1f:83:68:d8:c8:cb:29:10:63:12:87:f7:19:89:28:8b:d0:3e:
         d4:ce:24:b8:c2:27:18:a9:6c:14:f6:cf:6b:6f:ba:43:37:62:
         e2:10:93:4f:32:30:28:02:47:79:e5:85:32:0a:2c:f2:10:2a:
         ba:92:dc:d4:e1:03:46:71:f8:50:b3:79:c7:79:5c:03:2c:16:
         16:6d:21:84:70:37:f6:ea:ac:c4:9d:6f:f3:f3:b9:d8:96:de:
         1c:06:b3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----