Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8a878a82-f2ce-3d43-9e3e-f4ceb40d3ca6.roa
File:                     8a878a82-f2ce-3d43-9e3e-f4ceb40d3ca6.roa (raw, json)
Hash identifier:          pyyJ6PCPU2VuuB7anajBrjoWWIgUEWbSME9qx+RRlRQ=
Subject key identifier:   BD:BF:4E:32:EF:DE:E3:82:6D:9C:43:CC:49:66:03:DF:07:E2:4C:B6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DD23182C0F5479FCDC47111E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8a878a82-f2ce-3d43-9e3e-f4ceb40d3ca6.roa
Signing time:             Fri 06 May 2022 12:00:00 +0000
ROA not before:           Fri 06 May 2022 12:00:00 +0000
ROA not after:            Sat 11 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        69.210.64.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d2:31:82:c0:f5:47:9f:cd:c4:71:11:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  6 12:00:00 2022 GMT
            Not After : Jun 11 04:00:00 2022 GMT
        Subject: CN=a9c8daa2-d2ba-4ac7-8e4c-3e31318fb551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f1:99:92:51:90:92:44:7f:8f:07:bb:38:a3:
                    33:1e:4e:d3:d9:26:ad:e0:96:dc:90:cc:da:d1:f8:
                    e3:b7:d0:d6:06:c6:da:d9:15:19:13:ab:97:83:a3:
                    2f:6d:bc:05:6c:c1:45:ad:2b:fd:be:51:f2:11:e4:
                    5b:81:24:f5:e4:f2:13:b4:9a:c7:ae:af:10:28:fa:
                    4f:89:0c:93:b6:22:8a:fb:0b:3a:7a:7f:d3:24:2f:
                    41:6f:ce:3f:01:d3:d9:fb:15:52:3d:2f:7f:28:08:
                    0e:4a:f8:51:7c:6a:94:37:d3:83:aa:c0:8e:85:74:
                    77:b9:95:9a:06:62:f9:80:0d:bc:27:ce:1e:14:34:
                    db:34:4e:97:1d:78:0d:fe:6b:f6:43:ce:f0:60:78:
                    cc:6c:cd:0b:48:bb:27:0d:bd:93:7f:35:73:91:a7:
                    75:b6:a5:60:67:ac:47:54:bf:48:be:c3:36:ef:32:
                    58:39:06:fa:9e:bf:c7:aa:ae:7a:02:d4:8a:f5:c3:
                    28:1d:9e:d9:c3:ed:7b:6b:f9:e1:b1:28:07:e4:65:
                    3f:fc:9c:52:0d:ef:1c:9a:03:4a:59:49:a4:37:1c:
                    50:bb:42:46:35:66:75:40:3e:b5:13:6a:c0:95:52:
                    a8:e7:42:ed:f8:1a:ed:89:28:38:1a:35:8c:bc:78:
                    91:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:BF:4E:32:EF:DE:E3:82:6D:9C:43:CC:49:66:03:DF:07:E2:4C:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8a878a82-f2ce-3d43-9e3e-f4ceb40d3ca6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.210.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:58:5f:c0:2f:4d:d1:f3:8b:7b:b5:cf:fe:b1:19:ed:b5:2a:
         e4:1a:36:d5:81:98:f6:0d:ad:67:3a:d5:02:19:9c:dd:e1:43:
         7a:64:68:b8:b8:e3:97:3e:6c:b1:a1:5d:3b:73:75:4d:b1:bb:
         f9:4e:10:f3:e9:4b:7d:a0:a5:03:58:d9:c6:ac:f1:67:74:1e:
         3b:65:a9:26:ca:1a:29:d0:ea:a8:85:22:63:87:30:94:1f:9f:
         7d:80:b3:1a:a6:ec:5d:cd:15:74:c8:86:5a:7f:6a:e0:d7:bd:
         fb:0d:b0:48:b2:aa:be:37:0d:6f:5e:b6:7f:89:26:66:f1:92:
         00:43:22:c1:c5:c1:a3:eb:a5:eb:68:b0:87:03:bb:e7:65:60:
         c4:11:b7:e2:04:cd:6a:98:1f:b3:36:99:dc:7f:98:4e:89:29:
         cf:bc:21:7b:2e:1a:dd:72:13:5a:a0:90:68:0e:fe:99:98:c5:
         34:29:a4:93:9d:f2:9c:89:a1:e1:c3:cd:f3:08:c0:f7:e1:fd:
         72:61:43:be:3e:64:6e:c1:fb:75:02:33:9e:b0:34:47:fe:08:
         d0:ed:9c:24:9a:9e:0e:df:93:66:fa:83:f1:9b:8c:d7:b4:45:
         f7:e3:fc:a1:b8:2f:14:ef:11:87:f9:ba:68:9b:7b:4f:a0:3f:
         53:c1:d1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----