Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/89e0c7ca-3893-3e24-9a94-2700c38f5625.roa
File:                     89e0c7ca-3893-3e24-9a94-2700c38f5625.roa (raw, json)
Hash identifier:          E4DR1E9Sf3EjQLArE3JmyV50cojQqznwdYruXzKuty0=
Subject key identifier:   7A:9E:59:03:63:8D:22:F8:DD:DB:0D:78:C3:DD:62:65:48:7A:37:88
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840B91D5889959C9BC07BE0BFC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/89e0c7ca-3893-3e24-9a94-2700c38f5625.roa
Signing time:             Fri 27 Jan 2023 12:00:00 +0000
ROA not before:           Fri 27 Jan 2023 12:00:00 +0000
ROA not after:            Sat 04 Mar 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        198.200.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b9:1d:58:89:95:9c:9b:c0:7b:e0:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 27 12:00:00 2023 GMT
            Not After : Mar  4 05:00:00 2023 GMT
        Subject: CN=f0239df8-cf1e-49a5-962d-930db76e62b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e6:fc:6e:dd:c5:36:28:95:c7:33:cd:5e:a5:
                    b6:64:c2:ad:0f:e0:33:2e:9d:11:1a:5f:ca:09:ee:
                    e6:39:18:c8:8f:6d:ec:b7:8c:16:4e:b9:71:bb:a0:
                    c5:ad:d6:dd:72:3b:a2:ba:4b:c3:42:b0:45:a2:e2:
                    82:12:9d:79:77:bc:a2:e6:99:4f:47:75:af:2a:8a:
                    76:41:ab:db:6c:90:91:76:2a:20:a6:a6:9f:c8:93:
                    6d:34:41:62:14:05:58:29:70:67:18:5f:a4:b4:9d:
                    d1:e7:a5:b7:f7:4f:2a:54:53:9b:fb:88:9c:a9:f8:
                    eb:78:51:99:43:25:bb:42:72:33:86:3f:8e:95:f3:
                    31:b1:3e:91:f8:c5:5d:19:d2:fe:ab:81:84:8d:38:
                    f0:6d:95:d4:e9:e4:ae:04:20:bb:f3:6b:69:59:2b:
                    8a:eb:47:a6:5c:ec:31:4d:1e:d6:04:32:31:6a:c6:
                    ba:29:fd:9b:3d:0a:86:e5:b5:09:2f:77:c8:8d:88:
                    37:5d:7f:a5:9c:c3:92:98:9b:2a:cf:a0:9b:f6:4d:
                    6a:29:e0:65:6d:87:bc:23:82:09:cc:e3:26:ae:2c:
                    a8:e6:af:64:f8:90:72:56:bf:1e:71:8c:8a:56:4a:
                    41:fa:05:32:25:1c:e6:3e:25:ec:61:92:89:fd:a0:
                    19:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9E:59:03:63:8D:22:F8:DD:DB:0D:78:C3:DD:62:65:48:7A:37:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/89e0c7ca-3893-3e24-9a94-2700c38f5625.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.200.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:01:fa:2f:16:ec:79:22:03:f5:a5:49:aa:1e:da:b7:0a:c9:
         69:db:9b:f2:e1:0e:ee:c1:9e:8f:17:05:e6:2a:1d:db:02:bb:
         71:ee:46:59:4c:b1:3b:25:14:5f:58:ad:84:ae:fb:b4:bf:0a:
         c2:78:98:26:e5:53:b2:0a:a1:34:7b:93:fd:e0:1e:22:20:70:
         56:f9:03:f8:6d:cc:61:ac:2f:4c:65:df:c4:0d:49:11:3c:2c:
         92:22:ff:f2:bd:f3:f8:8e:86:dc:a5:7a:72:d7:73:19:e4:3c:
         6d:a5:c8:14:e1:72:03:d7:a2:36:5c:d8:0d:63:03:3f:43:90:
         36:a0:6f:2b:a1:d9:c4:2b:62:c2:2c:39:95:b0:ce:8c:5a:68:
         f8:1c:5f:2a:13:5d:ab:be:6f:05:95:d0:47:b6:a6:e2:63:c2:
         ec:78:e8:e3:20:6b:97:a0:05:32:f9:99:ee:50:c3:90:43:6e:
         e4:45:54:1f:c4:6e:1a:49:63:3f:80:9e:31:d8:ba:ab:c7:fe:
         51:9e:88:e6:0f:b1:b4:95:7d:f3:52:85:b0:11:ec:3c:ca:c1:
         92:26:0b:0b:97:31:ce:89:aa:1e:9a:66:03:99:28:d8:cf:f7:
         2d:3d:7f:39:15:e0:ce:54:60:ed:e1:a2:58:5e:90:a7:d5:b1:
         91:7b:3d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----