Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/941736e2-b327-3563-844c-b3e9e50d2aba.roa
File:                     941736e2-b327-3563-844c-b3e9e50d2aba.roa (raw, json)
Hash identifier:          KA3aGDi43R9ibWtlXpyUW4oDLFmyAWbY1PkXwGyA3Cc=
Subject key identifier:   1C:AA:AF:86:46:AB:DD:00:46:D2:A8:E9:95:4A:02:16:E8:19:C0:C3
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DA15DC131A55EE4E8FF83F300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/941736e2-b327-3563-844c-b3e9e50d2aba.roa
Signing time:             Tue 19 Apr 2022 04:00:00 +0000
ROA not before:           Tue 19 Apr 2022 04:00:00 +0000
ROA not after:            Tue 24 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        56.27.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a1:5d:c1:31:a5:5e:e4:e8:ff:83:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 19 04:00:00 2022 GMT
            Not After : May 24 04:00:00 2022 GMT
        Subject: CN=eeae049a-7c02-4910-91cb-167fe86a5bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:90:a6:24:c2:28:42:4e:38:1f:df:a9:b8:78:
                    1d:28:da:bb:3a:86:03:99:3f:ed:df:7c:f6:f4:aa:
                    2d:f2:7b:3b:72:cd:1b:4f:37:79:b1:ea:e2:1a:39:
                    e1:3c:cf:4a:ed:82:47:eb:29:ec:cd:09:4c:9f:06:
                    d1:c6:27:2b:06:4e:5c:ed:c0:bb:6f:e0:05:6f:0a:
                    6c:20:23:5d:24:f5:38:a8:0d:56:69:11:64:24:17:
                    ec:ba:1f:55:75:0e:19:c2:8b:0b:2b:ae:e5:cd:c7:
                    f3:6b:d2:30:86:a3:dd:a4:ec:b1:38:a8:90:cf:df:
                    60:08:a8:6a:a1:34:a7:9e:68:c8:8d:19:7f:f1:ad:
                    e3:0b:d7:90:ea:34:92:fd:0c:74:9e:af:99:e5:e2:
                    67:22:7c:b8:d7:92:48:b8:d6:ab:7f:d9:fa:76:e6:
                    3c:f3:e0:7f:fc:50:03:f3:d7:dd:68:83:fc:92:43:
                    43:79:4a:ca:26:c0:a2:e9:5f:87:ac:3f:b8:8d:3c:
                    07:23:13:4f:99:f0:e1:1f:a1:d0:2a:00:05:32:fd:
                    3a:8b:bb:27:7d:38:5f:7a:58:13:da:50:83:e8:f5:
                    23:05:a0:df:56:99:78:8e:fc:fc:d2:fb:31:5f:06:
                    21:23:db:57:a4:48:a1:89:0c:13:c5:29:74:72:97:
                    2a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:AA:AF:86:46:AB:DD:00:46:D2:A8:E9:95:4A:02:16:E8:19:C0:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/941736e2-b327-3563-844c-b3e9e50d2aba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.27.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:67:fb:13:b4:89:59:63:78:4f:15:b1:d9:48:4e:90:41:fb:
         44:2b:ad:7c:71:ce:a4:f8:3a:c3:2a:53:18:7b:33:f3:3c:1f:
         8d:88:33:ab:aa:74:7f:ff:1a:c7:2f:85:3a:65:07:83:8a:2b:
         d7:28:9a:c8:bb:10:c0:39:65:ef:e0:f2:1f:83:a4:b4:8d:ba:
         05:4b:32:ff:dc:35:d8:f9:58:8e:79:99:a0:60:61:3e:ef:53:
         78:b1:dd:15:f8:52:d6:0e:ad:2e:9d:1e:08:26:87:7b:2b:1f:
         1d:48:32:7d:fe:74:74:bc:f1:e1:3a:86:38:f3:77:36:83:ba:
         43:f5:2d:9d:1b:5f:11:e0:bb:b3:fe:76:73:e6:84:67:31:ba:
         b7:79:0a:9c:97:3a:63:3d:28:b3:09:31:73:41:4e:b6:ad:f7:
         7d:47:44:6a:83:ca:4e:3e:a2:7c:61:c4:52:16:c2:ef:02:2e:
         c6:0e:08:f3:b8:e5:d4:8f:05:cc:b3:19:8e:66:e3:84:3e:58:
         cc:46:67:b5:ca:b4:2a:02:02:09:56:33:d3:0b:55:aa:dc:c7:
         bb:f7:81:88:d5:45:36:0c:f0:41:4f:af:19:9c:95:ef:8c:ae:
         87:b0:9e:65:f8:5b:c9:06:e5:67:4d:54:94:c9:a4:98:a5:ab:
         02:e3:14:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----