Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9295f691-0de4-370f-988c-b8ef7fe6cbc3.roa
File:                     9295f691-0de4-370f-988c-b8ef7fe6cbc3.roa (raw, json)
Hash identifier:          7eCSj1SE1Tsiqok0lcD0HS2koVJr1I2Cs7t6tJ8T7KE=
Subject key identifier:   1E:9C:C9:56:FD:C5:9C:4A:E3:11:C5:72:61:AB:71:FC:82:97:43:6B
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858409207E842127C30D5C1CB1100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9295f691-0de4-370f-988c-b8ef7fe6cbc3.roa
Signing time:             Fri 13 Jan 2023 12:00:00 +0000
ROA not before:           Fri 13 Jan 2023 12:00:00 +0000
ROA not after:            Sat 18 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        173.246.160.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:92:07:e8:42:12:7c:30:d5:c1:cb:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 13 12:00:00 2023 GMT
            Not After : Feb 18 05:00:00 2023 GMT
        Subject: CN=8b8a0bae-d253-4911-ab02-2601d857d650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:14:2a:93:9a:4e:4e:83:e8:4c:5d:3e:f5:99:
                    25:a3:dd:3f:9e:f1:dc:81:1c:bd:2e:91:dc:db:f8:
                    88:5e:d0:27:57:74:84:2a:bf:91:86:5f:9e:4e:0d:
                    de:40:c1:69:4e:52:50:aa:b9:7d:f7:55:e1:8b:61:
                    62:04:e6:f4:e5:3f:79:1f:8d:31:a0:77:b1:ba:24:
                    ce:48:af:95:d6:54:27:42:88:3c:ed:f7:9f:b1:af:
                    70:d8:21:79:1e:23:ed:c0:d4:f8:7d:7e:32:98:3e:
                    f2:6e:05:d1:16:ea:f7:71:44:e0:09:c0:df:76:6d:
                    56:a6:28:fe:8c:bb:b7:9b:d3:eb:0b:36:f4:e7:4d:
                    e9:85:28:56:2a:fa:e2:55:d0:ed:3b:05:9c:a2:19:
                    ea:97:e3:1f:4a:34:e2:53:91:0c:26:0b:2a:38:a5:
                    fd:56:b0:19:70:16:63:d5:49:9a:fe:f0:bc:5c:a1:
                    be:f8:65:5d:1c:ff:2c:4e:6f:d0:ab:cc:97:a6:cb:
                    11:43:ca:7c:14:9c:b7:6f:01:92:ac:ac:c6:f0:33:
                    6f:7a:88:4c:4b:23:19:ed:76:41:9e:13:8b:fd:fb:
                    1c:9e:8c:4e:44:9a:7e:11:49:22:57:13:f5:68:26:
                    17:70:5e:f7:b1:ab:ba:63:51:8b:2a:78:ac:69:bf:
                    45:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:9C:C9:56:FD:C5:9C:4A:E3:11:C5:72:61:AB:71:FC:82:97:43:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9295f691-0de4-370f-988c-b8ef7fe6cbc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.246.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:ec:1c:ac:cb:c5:e0:62:c6:67:8f:1c:e9:e6:fa:9f:e4:0a:
         df:48:eb:62:a7:42:9a:14:2e:21:64:41:fc:29:61:87:15:47:
         6c:2d:a6:0e:39:42:19:a4:5c:57:db:9a:60:8d:6b:af:23:2e:
         88:19:5d:b9:4a:bf:b0:4a:60:f2:90:0d:48:20:c9:ed:73:82:
         5d:13:01:c9:a5:13:db:25:d7:f8:94:50:46:cf:96:05:16:63:
         90:8d:dd:e4:55:36:ba:47:b9:aa:47:c2:5c:3c:be:6d:42:85:
         2e:c7:11:a0:eb:94:17:6a:f4:7a:bc:d1:d1:bc:88:e0:71:0c:
         58:46:72:a7:9a:57:80:e5:d9:8f:e1:0d:55:3d:ea:9e:94:83:
         dc:ba:69:c6:ce:f0:b0:08:3c:29:0c:ac:45:0b:bc:2e:a9:33:
         4f:9e:72:b5:41:98:54:3d:79:58:3f:f4:8d:b7:90:65:f3:68:
         df:92:87:ee:9a:23:30:3c:e3:09:27:76:63:a6:08:16:a8:38:
         6b:0f:11:74:76:b9:cf:85:1d:ce:2b:8e:39:50:be:69:db:bd:
         b4:39:53:2f:10:f9:65:40:17:1a:28:f8:7d:8d:3b:5d:2a:07:
         bc:70:ca:c6:1c:ca:5b:30:9b:8f:86:99:f0:97:0a:51:b0:80:
         64:96:90:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----