Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/77432fe4-15fc-36b6-8ffe-7952a186652a.roa
File:                     77432fe4-15fc-36b6-8ffe-7952a186652a.roa (raw, json)
Hash identifier:          IRJmoVWZ3gnZQejsQb0fYrAOR9rgdS2PQOH/KH0BFUg=
Subject key identifier:   49:78:9A:8A:E7:54:2E:49:65:0D:6B:DF:8A:0D:9C:3E:07:47:D0:F1
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840AA8B9F99D2DE25F9259B5880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/77432fe4-15fc-36b6-8ffe-7952a186652a.roa
Signing time:             Sun 22 Jan 2023 12:00:00 +0000
ROA not before:           Sun 22 Jan 2023 12:00:00 +0000
ROA not after:            Mon 27 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        156.4.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:aa:8b:9f:99:d2:de:25:f9:25:9b:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 22 12:00:00 2023 GMT
            Not After : Feb 27 05:00:00 2023 GMT
        Subject: CN=e6a0692a-fac4-4c39-acb6-91ed9edcf647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a0:aa:58:e2:fd:81:28:ba:67:fe:bb:08:7e:
                    60:e0:2e:58:a4:56:a4:78:41:ef:42:41:83:5a:00:
                    a3:83:b0:d1:83:dc:0c:24:00:e8:7f:e2:4b:fb:0d:
                    35:53:2d:87:33:00:c0:e7:ae:5e:47:03:01:97:95:
                    6e:65:30:f9:5c:ba:dc:4a:69:cb:f9:47:52:84:9e:
                    63:54:ec:77:2d:a1:d6:0a:81:dc:d9:90:a5:d4:66:
                    24:9a:58:30:9b:7d:0c:cf:c7:de:88:fe:95:92:82:
                    22:21:0e:28:e9:7d:6a:a2:c0:55:81:09:4e:2b:da:
                    71:88:0c:33:8d:10:89:4b:66:68:58:54:42:2b:af:
                    3e:2e:6d:0b:10:65:3b:ab:1e:ce:13:c3:1c:27:09:
                    74:82:04:a8:1c:95:53:91:47:c7:00:dd:11:52:64:
                    83:4e:20:1d:7f:f0:8c:2d:69:58:2e:85:37:8f:92:
                    8e:55:66:f7:40:63:3d:04:01:ae:df:b1:c1:1b:d0:
                    73:fb:0c:c1:d3:12:31:17:d2:2b:16:d9:5c:48:d7:
                    77:98:8e:9b:5b:5d:c8:51:62:70:f9:ee:43:71:32:
                    b9:a7:7c:99:71:ac:68:80:12:6d:44:e0:88:b0:47:
                    57:bd:86:8f:c6:ec:81:53:b2:a8:4b:b7:38:6c:31:
                    74:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:78:9A:8A:E7:54:2E:49:65:0D:6B:DF:8A:0D:9C:3E:07:47:D0:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/77432fe4-15fc-36b6-8ffe-7952a186652a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.4.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:85:9d:db:db:4c:c0:c6:10:ce:52:0e:18:93:5d:36:5b:8d:
         35:b5:16:f3:66:af:90:cf:5e:f5:a4:c6:41:97:14:54:4d:07:
         64:96:ef:7b:cd:30:40:dd:6c:cb:55:5c:fe:84:ad:eb:56:17:
         63:76:ba:89:06:8a:a5:50:90:81:34:2e:76:61:5d:82:76:1f:
         32:b6:9d:b4:5c:37:42:d0:76:ca:20:fc:ab:e4:ac:04:af:97:
         76:85:1e:7c:f6:90:9d:82:6b:03:19:9e:63:b2:6d:11:bb:27:
         56:06:33:78:52:60:72:10:f2:72:b6:d1:d7:f0:be:eb:15:8b:
         2c:08:6f:c0:8a:22:95:6b:35:fc:fd:78:8d:f7:fb:ea:53:5e:
         b4:6d:73:b9:1d:62:f0:8c:12:63:66:ae:42:0c:be:a9:e9:f3:
         6e:45:85:08:4a:82:76:d3:ca:39:4e:fa:80:3f:7b:9b:7e:8c:
         0f:b9:37:bb:aa:bf:c6:43:08:01:37:e2:e3:03:1b:69:6c:e1:
         37:d3:b2:b9:94:35:84:27:5a:13:45:c4:b1:d3:4f:b4:9a:95:
         29:72:00:dc:0d:b6:ae:c8:12:d4:d4:69:e9:7c:c0:92:12:7f:
         b4:86:50:05:22:b9:5f:3e:a2:ce:77:bb:f1:83:1a:67:63:a2:
         f4:08:01:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----