Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7884aaa9-c3ad-33b5-9dfa-505c8d1d4d9c.roa
File:                     7884aaa9-c3ad-33b5-9dfa-505c8d1d4d9c.roa (raw, json)
Hash identifier:          C4cvUNcduRKoFlBYLT4KiZqL9U3igpvCzsaYGH8b3ro=
Subject key identifier:   61:32:48:4F:55:36:4E:78:5D:E1:AE:6B:17:4C:4C:4B:A1:DC:69:39
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858408928FFAF25144F9623007000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7884aaa9-c3ad-33b5-9dfa-505c8d1d4d9c.roa
Signing time:             Tue 10 Jan 2023 12:00:00 +0000
ROA not before:           Tue 10 Jan 2023 12:00:00 +0000
ROA not after:            Wed 15 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        2600:1f01:4800::/47 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:89:28:ff:af:25:14:4f:96:23:00:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 10 12:00:00 2023 GMT
            Not After : Feb 15 05:00:00 2023 GMT
        Subject: CN=35ed207f-b5fe-42f3-86b6-d9d59b0e3de5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:9f:07:27:52:14:f9:24:40:a4:eb:dd:44:e0:
                    57:7e:2e:62:3f:6b:31:a9:0a:c9:7b:d7:e7:bf:63:
                    5f:65:98:67:53:0c:45:d8:d6:cd:ee:0b:d2:72:40:
                    60:b7:dc:49:21:00:ff:e9:71:f0:a7:ff:0a:42:3a:
                    ac:46:d0:b4:64:79:fb:30:af:ea:64:9a:4b:69:c4:
                    68:d9:9e:f4:64:d6:23:98:65:43:ff:aa:57:bb:f8:
                    df:62:f9:f7:c0:b3:9b:64:da:b2:73:d3:c0:43:53:
                    d4:db:a4:59:cc:02:ff:e5:13:f9:b4:15:3c:7d:26:
                    db:f4:e2:3d:db:32:1d:ef:b1:0c:fb:12:ea:23:ea:
                    96:9b:50:14:63:b8:04:09:96:6a:4d:b6:55:48:cf:
                    55:11:e9:9e:b9:5f:84:c9:79:13:1b:cd:8f:33:dc:
                    64:1b:39:79:23:21:99:8b:a2:68:0e:6f:64:78:59:
                    7d:26:36:62:14:47:c3:80:d0:c7:f1:f3:06:8b:4a:
                    70:0b:6d:72:93:e1:8c:30:28:61:f7:2e:7b:cc:51:
                    fb:38:bc:7d:f0:98:51:ba:79:11:c9:13:18:8d:c5:
                    76:b6:db:6c:51:47:01:2f:8e:0b:71:36:e6:4e:92:
                    aa:38:40:d1:71:bc:bb:ac:55:c3:0e:b0:92:1c:a7:
                    9f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:32:48:4F:55:36:4E:78:5D:E1:AE:6B:17:4C:4C:4B:A1:DC:69:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7884aaa9-c3ad-33b5-9dfa-505c8d1d4d9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f01:4800::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:38:eb:28:6f:15:15:a7:a7:cb:09:24:df:e4:78:3c:8f:60:
         d4:ae:a1:8a:da:0c:a1:2c:fc:e7:a5:eb:69:eb:3d:9b:55:d4:
         52:71:0b:b1:41:7d:94:ea:d9:b5:e6:dc:0d:75:9a:a4:87:0c:
         24:73:97:9f:2c:62:28:75:3d:70:15:3e:25:0b:60:93:3a:78:
         46:10:25:0e:27:bb:97:c3:aa:9a:1f:3c:f5:5c:d3:4a:3f:62:
         73:3b:89:47:b3:fb:e3:f1:1f:f7:2c:1c:9b:e4:b0:13:a0:03:
         2c:8f:c8:e1:12:38:35:6a:17:aa:43:c4:f9:7d:b5:e0:a1:1b:
         39:52:68:33:c9:01:94:59:d4:45:d1:cf:a1:4d:2c:e4:32:ac:
         c9:f8:88:38:0d:77:90:a6:0a:8e:3f:e1:47:83:8f:68:e8:6b:
         e9:31:32:66:e2:49:2b:41:e4:50:69:97:e0:a0:31:11:42:b9:
         88:93:e9:16:ef:72:35:a8:b1:be:fe:8f:9b:78:f9:b1:47:1b:
         ca:d0:52:05:67:82:b0:70:3c:53:f7:9c:d3:54:ea:bc:7c:7a:
         c9:b7:e8:b1:c0:2d:2c:e5:7d:53:7f:b2:47:a0:38:3b:6c:a5:
         6d:04:0d:eb:e1:c8:f5:39:4e:66:c3:5e:3a:e1:5e:7a:81:d1:
         f3:66:2c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----