Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9950e26b-1f24-3b92-80eb-efcd48ede9f8.roa
File:                     9950e26b-1f24-3b92-80eb-efcd48ede9f8.roa (raw, json)
Hash identifier:          pZ27SzLy8kYS7sQj/fmv3wMDqxOh3I9wDG09dRoMteE=
Subject key identifier:   86:DD:5C:90:5B:2E:99:E2:98:33:8A:47:94:71:FA:28:78:0C:CD:76
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840D6F38F51C2A09F7584EF2100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9950e26b-1f24-3b92-80eb-efcd48ede9f8.roa
Signing time:             Tue 07 Feb 2023 12:00:00 +0000
ROA not before:           Tue 07 Feb 2023 12:00:00 +0000
ROA not after:            Wed 15 Mar 2023 04:00:00 +0000
asID:                     14618
IP address blocks:        164.178.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:d6:f3:8f:51:c2:a0:9f:75:84:ef:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  7 12:00:00 2023 GMT
            Not After : Mar 15 04:00:00 2023 GMT
        Subject: CN=4cb44e96-a199-462b-a786-6d4064da5526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:27:dd:b6:53:53:48:c8:e0:a9:9e:76:ff:57:
                    29:6b:ec:5d:9c:c0:56:df:0c:a1:c1:01:95:35:f0:
                    b5:b7:80:98:37:f0:54:0e:83:82:a9:a9:22:53:23:
                    e8:55:61:3e:c4:7c:04:3a:3f:5b:38:e1:09:4c:5c:
                    7a:ac:55:47:03:4e:70:a8:47:8d:3c:62:5e:b5:56:
                    d6:95:e1:41:3c:95:2c:49:76:48:28:ec:bf:7b:31:
                    0a:ce:80:7e:f1:2f:17:9d:fa:06:7c:37:bf:64:5a:
                    08:2a:39:01:94:2d:a4:1d:56:77:4e:86:5d:8b:40:
                    a1:8c:2d:5e:06:c1:d2:d4:a0:74:dc:02:ca:19:7a:
                    cb:ec:5e:28:6f:e6:82:88:a6:7d:21:ad:7e:58:15:
                    5a:2c:64:6c:d6:69:c4:df:87:de:d6:00:34:2b:7e:
                    8e:be:e7:8d:4a:76:46:5d:f2:db:c5:d9:7a:e3:e5:
                    7c:8b:7d:75:8f:08:72:ff:83:6d:65:f4:9a:12:2f:
                    48:7f:d8:51:5b:29:2a:12:c9:ed:99:e8:b2:df:b0:
                    f1:0a:28:6a:b5:a6:a6:43:0d:d8:db:10:61:cf:ae:
                    88:a4:10:6c:2d:c5:1a:9c:f8:2f:05:20:cf:a8:5a:
                    48:f0:1e:9a:d0:91:86:44:b8:d0:0d:2c:21:41:04:
                    b0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:DD:5C:90:5B:2E:99:E2:98:33:8A:47:94:71:FA:28:78:0C:CD:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9950e26b-1f24-3b92-80eb-efcd48ede9f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.178.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:58:c5:6c:1f:c5:0a:99:d1:7a:c4:5d:f3:27:52:97:8c:1b:
         eb:b4:79:13:a4:17:d5:01:c2:fc:93:b9:8c:aa:52:cb:06:4f:
         94:ff:6b:70:55:73:68:69:9a:e9:9e:86:c4:94:97:09:bf:44:
         6c:61:76:92:0b:da:62:55:32:20:d4:e0:ad:74:d4:3c:9a:a7:
         f2:c1:8b:23:51:7c:33:7d:6e:57:43:4e:ca:b0:f0:29:57:a2:
         64:9d:23:c1:3e:76:52:25:14:62:24:39:92:10:de:78:ff:0b:
         b7:e6:3d:69:45:af:9d:38:18:f6:a5:13:b6:c0:12:4c:0a:62:
         5b:a8:34:bd:4f:a0:a5:72:aa:6b:d1:a0:7d:b9:b7:1d:f3:ed:
         5a:5e:78:28:6d:8e:88:cd:59:30:e7:7b:44:a1:68:09:d9:5b:
         97:f9:59:b3:a1:04:04:b3:f2:85:ab:0b:2a:97:c8:01:59:ca:
         cf:7b:ac:7b:39:a9:4f:9d:a9:91:19:ea:f0:bd:13:f9:35:3b:
         77:63:74:fd:04:f6:9b:7b:56:fc:fd:ce:1f:7f:f7:ed:4b:4d:
         e5:14:cf:d2:09:8e:f1:81:06:46:b3:ae:a8:71:1a:46:b6:a0:
         37:e8:b4:84:14:3d:c0:f4:95:5b:34:03:b5:62:6e:4f:e2:d1:
         d9:c3:9b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----