Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/90cd2ee2-5e33-3483-a156-34750bcbead4.roa
File:                     90cd2ee2-5e33-3483-a156-34750bcbead4.roa (raw, json)
Hash identifier:          O5jzGc2MhbKyA9aaPUncXSotWtVMu3rlHO1+trq8gXE=
Subject key identifier:   9C:3F:84:52:85:91:21:AF:40:59:96:6A:B0:90:DD:01:6C:09:9F:9F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840917A4AB90114C0E1478649E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/90cd2ee2-5e33-3483-a156-34750bcbead4.roa
Signing time:             Fri 13 Jan 2023 12:00:00 +0000
ROA not before:           Fri 13 Jan 2023 12:00:00 +0000
ROA not after:            Sat 18 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        72.41.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:91:7a:4a:b9:01:14:c0:e1:47:86:49:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 13 12:00:00 2023 GMT
            Not After : Feb 18 05:00:00 2023 GMT
        Subject: CN=4aba9e6a-11df-4774-8b3b-7f1d5088b473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ec:f8:3c:29:ef:93:57:5a:08:eb:ea:35:71:
                    7b:c8:4f:61:6f:da:38:69:f7:5f:f1:ae:42:cc:d2:
                    2b:e5:7f:ba:12:b9:77:e6:17:63:d1:be:84:43:9e:
                    cd:02:b2:2b:e3:a0:79:8a:49:e1:61:c0:bc:cc:eb:
                    8c:0e:81:02:61:cd:70:5d:6f:52:70:44:ec:53:75:
                    ea:a7:48:7c:fa:ef:07:65:7f:47:3e:ea:a6:72:bf:
                    fa:47:04:fd:56:ee:9f:16:78:26:b4:d1:52:ed:d3:
                    b9:e7:e7:e0:9a:f1:35:a8:2a:c2:f5:1a:6f:68:f5:
                    86:cf:d7:11:ae:60:a6:1a:67:69:43:11:15:79:ed:
                    78:d1:2b:ad:8e:28:72:04:e0:99:32:53:de:91:47:
                    1b:81:83:27:f4:d4:1e:18:6c:ad:4b:1f:49:0d:da:
                    cf:4b:02:c5:3d:7e:69:02:fc:68:7d:63:9f:1c:52:
                    bb:7f:e0:04:48:59:66:14:03:02:5e:eb:0c:4a:7f:
                    23:8f:ce:0d:38:36:58:13:1a:ad:b5:99:77:1d:3e:
                    00:32:49:10:e1:ef:77:09:ef:a0:2f:fc:48:f3:cd:
                    28:5e:8c:85:50:9f:66:4f:9d:1f:11:e8:16:47:a0:
                    4f:ca:75:12:c3:07:ff:e9:98:2c:19:01:ce:9d:2d:
                    7f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3F:84:52:85:91:21:AF:40:59:96:6A:B0:90:DD:01:6C:09:9F:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/90cd2ee2-5e33-3483-a156-34750bcbead4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.41.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:1b:ee:8c:1a:8a:4b:bf:85:6a:ed:93:36:87:e2:72:cd:14:
         b7:e9:a4:aa:17:50:5a:0c:7c:57:c2:1b:b5:48:e3:71:3b:8a:
         34:4a:0d:d5:ad:38:04:89:7f:78:90:54:72:a2:a7:fd:21:d6:
         a9:88:b0:d2:fd:b8:bd:55:e6:46:af:84:84:f3:e1:09:5e:6f:
         30:ac:d9:bd:b0:a0:e4:c1:38:ab:ab:61:6f:f0:bc:9b:f9:dd:
         f8:d1:f0:79:36:77:34:18:1a:df:2c:77:3a:43:61:b1:67:90:
         8f:8d:fc:2a:82:ed:25:a3:8f:1e:61:2d:56:bc:20:09:9d:ca:
         0f:fe:e9:8d:39:b9:bd:81:d4:09:17:39:79:6a:bf:2e:51:e5:
         3c:17:95:e2:6e:6e:7d:c2:bb:f4:97:24:5e:99:01:6f:64:e6:
         38:36:6d:59:88:e6:7a:81:41:69:6c:4b:f2:ef:bd:ba:2d:c8:
         0e:65:b9:d4:31:03:44:4e:20:9f:41:84:a9:f4:3d:97:ce:46:
         27:19:82:33:12:e1:86:3c:44:f7:44:74:22:dc:80:7f:1a:39:
         c2:fe:ca:02:cc:5c:4e:5b:4c:8d:05:19:81:4a:fe:ae:7d:5c:
         e4:64:d7:4a:75:9d:97:44:e7:c5:d4:d2:09:48:03:7f:58:47:
         c8:63:4a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----