Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7dd61c12-7d2e-3027-929f-883cb434e3b8.roa
File:                     7dd61c12-7d2e-3027-929f-883cb434e3b8.roa (raw, json)
Hash identifier:          WChlvUWqzGRMFLObrMt1ZOFiXnvP+m1m16JgUkmCAhU=
Subject key identifier:   31:B2:C8:CA:E3:36:C3:A5:AF:39:E1:CD:4C:74:C2:11:03:49:29:C8
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858408631A61D28FC063D75F47320
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7dd61c12-7d2e-3027-929f-883cb434e3b8.roa
Signing time:             Mon 09 Jan 2023 12:00:00 +0000
ROA not before:           Mon 09 Jan 2023 12:00:00 +0000
ROA not after:            Tue 14 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        114.56.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:86:31:a6:1d:28:fc:06:3d:75:f4:73:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  9 12:00:00 2023 GMT
            Not After : Feb 14 05:00:00 2023 GMT
        Subject: CN=80053f15-74e7-4b91-a4ec-f0dc038a4aa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ce:04:cd:73:9e:69:0b:bb:57:f0:a4:9d:67:
                    53:7b:3d:e9:33:20:d6:d2:10:02:94:2a:c0:be:c6:
                    33:81:cd:4d:61:ae:ae:f3:3a:39:7c:1c:b2:3a:77:
                    67:1d:6d:23:d4:a3:29:fb:73:3a:3c:f7:4c:fe:88:
                    c8:66:42:e3:28:d9:4c:8c:26:fa:30:50:c1:c9:4b:
                    d1:fe:25:a4:df:32:fe:9a:55:e0:57:14:44:73:5d:
                    2c:fd:96:2b:7e:2b:6a:a1:da:01:a8:49:50:a1:45:
                    f3:7c:92:de:7b:c3:09:cf:cf:21:9d:89:fe:c5:80:
                    91:56:c3:e6:ce:1d:06:10:9a:2e:ff:26:4d:6a:64:
                    e6:64:3f:66:5b:3a:9e:ba:28:fc:6d:e0:35:77:c8:
                    c9:58:6e:b0:df:a7:ff:6b:fe:27:91:8d:c1:a5:55:
                    ee:5c:96:ce:76:03:84:a2:58:f4:65:8e:ed:c4:d7:
                    02:72:f6:ec:96:3a:ae:21:0a:9f:8f:4c:1c:9d:22:
                    e3:b3:fa:37:c3:3d:f4:77:1b:e7:77:ab:a1:f9:6c:
                    4b:dd:95:01:25:4a:ec:23:a9:0d:58:b6:c3:4e:aa:
                    31:4e:1b:b0:9c:62:04:68:2a:ff:43:da:cb:df:d7:
                    43:d2:3b:d9:b4:46:17:64:a3:c9:17:85:4e:2a:39:
                    6a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B2:C8:CA:E3:36:C3:A5:AF:39:E1:CD:4C:74:C2:11:03:49:29:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7dd61c12-7d2e-3027-929f-883cb434e3b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.56.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:5c:c7:f6:b7:cc:70:9c:8e:ed:51:a1:9f:cc:73:ae:ef:07:
         db:44:56:4d:0c:60:a2:2a:a9:3e:25:47:32:7b:e7:2d:ac:e7:
         d2:08:de:80:ed:fb:83:9c:9d:85:1f:b9:ec:d0:27:db:be:e5:
         78:5b:68:f7:40:c9:5a:af:4b:25:69:5f:bb:30:54:da:f1:fc:
         b3:66:61:bc:d7:ef:6f:2d:c1:59:76:9a:bf:f7:7d:57:07:44:
         c3:25:4a:ce:75:d8:39:41:1d:a7:cc:dc:d7:55:8e:6e:f5:84:
         50:68:fa:db:2e:7d:4b:8c:0b:ad:3d:91:d3:e1:75:d4:e5:c2:
         59:e7:eb:78:d5:72:8e:f1:62:25:83:26:57:ec:53:dc:c3:c8:
         71:1d:d0:17:60:33:3a:35:16:90:2b:2c:b2:d9:27:d3:cc:d8:
         2e:06:d0:88:24:a7:73:39:bc:23:e3:c4:11:f7:0c:8e:e7:c1:
         35:2c:5b:28:24:54:a3:34:4d:05:0f:6f:e5:30:a3:9c:a7:47:
         40:0b:a8:e6:0d:63:fe:4e:1d:2d:76:87:82:ee:ac:18:5f:8d:
         78:08:2d:3f:6b:83:a3:75:40:4b:3b:84:93:c8:e4:c4:e2:7e:
         7b:1c:17:13:2c:93:28:45:b3:34:b2:4a:05:16:7c:5f:94:87:
         a0:ef:8f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----