Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/92f6f2ec-2762-3862-9d0d-0538b922e22b.roa
File:                     92f6f2ec-2762-3862-9d0d-0538b922e22b.roa (raw, json)
Hash identifier:          CDJU73sg1hLVFGOPjy54lCnRbFqrLdz7BFui4V5UCBU=
Subject key identifier:   F8:1A:34:94:E2:2C:F8:F0:9C:A8:9D:B2:85:0D:10:D3:D7:C4:9A:45
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840B8DA68E895D386606B3B8180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/92f6f2ec-2762-3862-9d0d-0538b922e22b.roa
Signing time:             Fri 27 Jan 2023 12:00:00 +0000
ROA not before:           Fri 27 Jan 2023 12:00:00 +0000
ROA not after:            Sat 04 Mar 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        99.78.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b8:da:68:e8:95:d3:86:60:6b:3b:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 27 12:00:00 2023 GMT
            Not After : Mar  4 05:00:00 2023 GMT
        Subject: CN=0c1430da-fbe7-4587-895b-f1263f1ab963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8c:4f:0b:46:37:d8:64:ce:40:3b:bd:1f:76:
                    cb:f3:1c:86:85:33:de:87:a1:8f:44:ec:86:45:eb:
                    3a:89:9c:bd:26:00:9f:6c:4e:97:9e:05:8d:fc:ee:
                    16:3c:0e:a3:78:87:e3:da:7f:24:04:5c:ab:75:9d:
                    51:ac:6e:4f:79:f9:a6:1d:56:3f:88:0d:0c:c2:f1:
                    6f:a5:cf:4c:67:74:5e:7a:d7:47:e7:8d:c7:0b:9c:
                    df:72:30:cd:82:c8:2a:3c:ff:e2:00:36:2e:9a:d4:
                    72:3e:1b:69:e0:50:7d:5d:b4:42:be:3f:bd:74:76:
                    f9:a7:05:8b:89:3a:d4:41:5a:bd:5b:09:a2:57:78:
                    9c:b5:40:68:3f:de:37:21:15:4d:66:ac:fa:65:95:
                    88:23:2c:96:4e:ba:2d:aa:a0:40:9f:2c:66:1c:b6:
                    d0:30:05:ce:28:91:5b:87:8c:4e:a3:4e:58:ec:1a:
                    3b:88:b3:18:35:9e:c3:ba:19:90:71:e9:55:69:ed:
                    5f:e1:54:b2:6b:01:0c:39:0f:78:fd:42:de:62:c7:
                    5a:75:7b:84:35:cf:ff:ad:43:3e:1f:fe:b7:1d:25:
                    cd:ab:7d:99:28:c6:c5:cb:41:77:35:3c:cd:49:3f:
                    d2:e4:9e:5b:bc:b5:a5:71:5f:bf:10:66:42:44:84:
                    ea:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:1A:34:94:E2:2C:F8:F0:9C:A8:9D:B2:85:0D:10:D3:D7:C4:9A:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/92f6f2ec-2762-3862-9d0d-0538b922e22b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.78.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:e0:c5:53:cc:98:02:dc:fc:47:1a:3f:0a:74:f5:e4:93:a6:
         c8:c9:39:20:32:6c:ca:a9:04:8e:00:4d:b3:ed:db:4e:0e:6a:
         15:58:09:5a:3a:b0:a2:38:54:42:57:d6:5a:11:1a:4e:a4:39:
         e0:1c:6c:61:b4:ad:28:14:ce:69:13:fc:0b:17:01:91:0d:bc:
         ec:b1:69:3a:33:d4:70:29:06:11:ea:5d:68:36:35:60:7b:0a:
         66:85:32:ed:12:ef:a4:36:ea:02:44:30:67:fa:5d:82:90:d2:
         19:97:b4:50:da:2c:28:bc:90:b3:49:37:86:0d:12:75:1f:52:
         dc:fb:7b:31:31:9e:48:45:c7:00:31:50:62:6a:21:32:1e:ce:
         57:c6:34:f0:35:0d:64:a1:a0:d5:e0:51:12:ab:cb:07:8a:e9:
         1a:f4:98:d0:18:0b:11:ad:3b:7a:50:e4:5a:e7:f0:2d:94:57:
         a8:ec:d4:14:6a:29:82:8c:5a:a4:d2:25:4a:c7:3a:fb:6e:06:
         22:c0:60:5d:61:fe:d9:7d:31:7b:85:9c:74:80:4b:f4:26:21:
         ea:7d:39:6d:1e:9a:80:fb:77:21:0a:49:a6:d5:bb:1f:9b:3b:
         04:42:9f:26:5a:22:63:de:ea:94:40:be:6d:e8:db:22:7a:f0:
         79:2b:e6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----