Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/992a60b1-86f0-336e-9e7d-19d66d5a0d19.roa
File:                     992a60b1-86f0-336e-9e7d-19d66d5a0d19.roa (raw, json)
Hash identifier:          EyEgaz/OXbnuet86rLJjHNQtF+IQE6Iwkj6rUaLW3SM=
Subject key identifier:   1D:74:F4:5D:0C:E4:C7:E5:B4:CA:C6:31:BE:AF:1F:FC:91:1D:38:17
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858407B1D6D499A3F71EA51785880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/992a60b1-86f0-336e-9e7d-19d66d5a0d19.roa
Signing time:             Thu 05 Jan 2023 12:00:00 +0000
ROA not before:           Thu 05 Jan 2023 12:00:00 +0000
ROA not after:            Fri 10 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        160.223.224.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:7b:1d:6d:49:9a:3f:71:ea:51:78:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  5 12:00:00 2023 GMT
            Not After : Feb 10 05:00:00 2023 GMT
        Subject: CN=7178fea3-bc5a-488f-a0ab-35ab60ce6b17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a8:39:fd:96:c1:4c:b8:af:69:c5:52:45:0d:
                    e2:b9:e0:b7:7b:03:42:bd:2e:74:41:70:3f:f1:b4:
                    84:8a:2c:55:f9:34:fe:77:cc:1b:92:2e:58:c2:ed:
                    68:57:3c:cb:60:9e:cc:89:16:52:35:b1:98:65:01:
                    6e:9d:f8:fc:22:1a:de:3e:9c:13:3f:ce:f1:76:ae:
                    0c:45:a6:5f:11:fb:1e:f7:83:83:93:4b:58:66:d6:
                    d0:51:ea:48:1b:65:26:a8:4b:a6:f7:78:2f:21:77:
                    47:30:74:c8:c3:fa:e9:c3:13:c6:bb:2a:01:49:9b:
                    bb:b2:de:03:b4:cd:75:30:81:c0:8d:e3:a0:ce:ce:
                    23:38:93:3d:bd:10:8d:51:98:fb:44:e8:24:8f:66:
                    1d:50:5e:18:7e:88:73:3d:c4:cc:bc:a7:45:d1:e5:
                    27:bb:ad:9c:3d:18:0d:ad:cd:26:36:a4:48:2d:e7:
                    99:0d:60:5d:22:1b:56:3b:d7:ad:db:6b:53:95:63:
                    99:d1:1c:ff:fc:94:cf:70:e2:3d:eb:92:b5:ea:b7:
                    c7:ca:63:38:0c:b2:1e:94:ec:cc:98:df:3d:f2:3a:
                    20:2d:3a:81:d7:2f:f8:9a:41:a6:3e:33:7c:17:61:
                    ed:53:6d:0f:a5:b5:dc:3f:f6:64:e5:08:5f:c1:36:
                    1c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:74:F4:5D:0C:E4:C7:E5:B4:CA:C6:31:BE:AF:1F:FC:91:1D:38:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/992a60b1-86f0-336e-9e7d-19d66d5a0d19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.223.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:84:c7:8b:42:82:bd:de:75:c9:6c:72:8d:42:0b:bb:5f:17:
         70:ca:cb:ca:8a:41:51:ed:a0:35:53:b8:08:e5:2c:58:86:62:
         58:a7:d2:fb:14:c9:94:59:0d:41:ae:aa:a7:8d:e2:a2:d9:10:
         81:e1:fd:7a:1a:00:9b:fe:04:f2:af:90:0e:24:ef:38:47:63:
         99:32:d6:f8:15:dc:70:33:7c:6b:e1:a4:6a:7b:17:f4:68:bb:
         11:aa:b2:30:fb:c7:2d:bd:fb:f5:82:a2:4a:b7:ad:25:46:eb:
         b2:1c:61:f6:bc:b6:6f:80:79:b1:dc:72:ef:d2:8e:0d:9e:83:
         23:87:81:a7:ae:37:7c:b3:c1:98:ca:bf:ae:c9:b6:bb:23:cf:
         b7:84:c2:81:0f:7a:ee:34:9b:05:09:5a:74:08:65:fb:24:b5:
         97:1b:31:50:fe:25:47:20:eb:80:62:96:9f:dc:2d:17:5b:4b:
         8b:ea:f6:2e:eb:cb:1f:43:f1:89:ad:76:a6:83:97:0b:b3:8f:
         9c:76:17:e7:c4:81:8f:96:52:7c:9e:f3:68:a1:58:84:4f:95:
         e9:84:88:45:3a:8b:83:41:9a:fc:b1:09:ad:fd:9e:2b:f3:5d:
         62:a6:3f:02:4a:07:ca:b6:94:97:48:f2:bf:f6:26:4e:1e:3e:
         1f:8d:5c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----