Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/95aaa200-8199-3df1-a992-4d0c3c484e04.roa
File:                     95aaa200-8199-3df1-a992-4d0c3c484e04.roa (raw, json)
Hash identifier:          pgWsU0MdWFjDYXYRRjVKl5tLTeYd0kdNO5Joo9HyPXY=
Subject key identifier:   AF:39:B2:33:59:29:75:64:95:18:F3:84:55:E4:C3:F3:83:0E:68:48
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858406A6C19E00EE7B778C28807E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/95aaa200-8199-3df1-a992-4d0c3c484e04.roa
Signing time:             Fri 30 Dec 2022 19:54:08 +0000
ROA not before:           Fri 30 Dec 2022 19:54:08 +0000
ROA not after:            Sat 04 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        108.156.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:6a:6c:19:e0:0e:e7:b7:78:c2:88:07:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 30 19:54:08 2022 GMT
            Not After : Feb  4 05:00:00 2023 GMT
        Subject: CN=2861067d-e27d-4e0c-8121-d2cc540f824d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d3:a7:8f:54:ed:93:28:4a:7c:e4:be:fc:10:
                    d7:de:bf:d3:65:8c:38:cf:c7:c8:fc:99:de:b6:ec:
                    53:94:35:b8:74:b7:e3:26:80:ad:b8:66:76:41:10:
                    5e:b7:11:f3:96:10:a2:ad:5b:99:2d:6c:75:11:69:
                    07:76:70:49:e6:5f:0c:90:b6:01:cf:24:46:5b:95:
                    c5:8c:a9:c4:35:f5:c5:08:18:f3:e8:59:6f:11:fd:
                    e0:0c:2b:bf:20:07:dc:cc:35:4b:b3:ba:85:10:a6:
                    25:7c:91:1e:4b:ee:71:c3:3f:2c:06:22:e7:73:50:
                    e6:05:69:3a:e1:ce:1e:8e:9d:37:a2:34:4e:ed:c4:
                    c6:14:c3:fd:fb:7f:49:16:45:72:0c:b3:d4:74:1c:
                    f2:55:1f:ca:ef:0b:72:82:54:db:a5:ed:7f:5c:b1:
                    00:d0:25:a7:b1:6a:fe:31:86:67:b7:c8:8e:30:86:
                    41:93:5e:c2:60:02:3b:2f:fc:4d:46:b0:1d:6f:2e:
                    9e:78:ba:50:0a:d2:94:06:c3:6d:bb:60:c7:a1:1b:
                    75:c2:15:96:e0:c9:98:04:e8:da:1c:1d:90:35:4d:
                    c3:b2:88:27:69:6b:05:20:bb:6b:43:b0:3a:dd:b3:
                    f2:75:b6:b2:81:e8:c4:f0:ad:5a:04:76:7b:ce:d4:
                    91:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:39:B2:33:59:29:75:64:95:18:F3:84:55:E4:C3:F3:83:0E:68:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/95aaa200-8199-3df1-a992-4d0c3c484e04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:f3:bd:b0:34:7d:5b:71:ed:f9:92:4a:15:e1:ee:6d:cb:16:
         12:f4:03:7a:68:d8:c1:5d:47:a1:63:ea:23:dd:6f:0e:51:9f:
         81:74:41:39:0b:88:7c:f9:ff:fa:6c:06:31:78:af:e5:de:89:
         34:92:a3:d8:1c:d9:3f:bd:69:0b:b0:14:6a:3b:82:c6:1f:67:
         9d:d1:49:47:22:a1:f4:c0:d1:48:68:2b:2c:17:2e:87:4e:0b:
         b5:01:d1:0b:f9:ee:04:84:06:d6:1f:7b:91:3b:26:1a:4f:8f:
         57:b2:b6:7d:eb:51:4f:21:51:fa:9e:f5:e4:ef:9f:04:8b:10:
         3f:16:d0:31:6f:33:93:d9:35:59:98:13:c8:d4:f8:02:68:77:
         85:83:46:58:a5:16:f3:67:55:e7:d9:4c:ad:b5:78:bb:e1:e6:
         15:ea:6c:26:57:f2:0d:20:22:14:39:64:08:e9:ca:df:d0:1d:
         ac:74:54:97:45:00:41:02:6e:e5:f8:33:69:c8:3d:2b:67:40:
         76:9b:bc:f7:20:35:40:69:1a:d5:9f:7a:0c:8d:d2:c2:11:84:
         fb:83:be:a0:3a:80:eb:18:a3:a4:a3:06:39:3f:57:1f:59:36:
         f7:53:9b:da:08:7b:a2:43:f2:b2:4c:79:88:65:74:b1:90:92:
         ec:c4:51:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----