Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9bcab723-051f-3595-a33e-7978a08f27c9.roa
File:                     9bcab723-051f-3595-a33e-7978a08f27c9.roa (raw, json)
Hash identifier:          YuV7kowNsFNI2poVWowF3F12TGkPn4YwMYtmGMqJalc=
Subject key identifier:   9E:5E:D1:38:01:1F:3B:0D:E5:A8:D6:99:B8:78:35:CD:C8:4F:04:FD
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858408699D5FC25821474B1E436C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9bcab723-051f-3595-a33e-7978a08f27c9.roa
Signing time:             Mon 09 Jan 2023 12:00:00 +0000
ROA not before:           Mon 09 Jan 2023 12:00:00 +0000
ROA not after:            Tue 14 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        65.4.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:86:99:d5:fc:25:82:14:74:b1:e4:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  9 12:00:00 2023 GMT
            Not After : Feb 14 05:00:00 2023 GMT
        Subject: CN=df23d3f0-5644-4e09-a400-d5ee9f54f012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:70:da:7f:a3:3e:75:f5:d0:a0:0d:db:b2:93:
                    99:8d:85:38:f0:47:a4:fa:ef:4b:b8:66:4d:61:c8:
                    aa:7c:7a:1a:f2:7d:0d:52:47:fb:39:4f:ba:86:91:
                    b2:15:4f:0e:c4:2f:9d:db:c7:50:97:b7:37:9c:e2:
                    d6:cd:ec:d4:42:20:fd:91:08:41:4f:17:6d:41:21:
                    18:e6:c3:0f:2b:b2:60:bc:d6:6a:1b:16:13:3f:45:
                    46:ad:c0:67:4f:18:2c:3f:25:f0:5a:19:39:07:49:
                    b9:0e:f8:9c:5c:46:58:72:82:3e:40:94:32:52:4b:
                    bb:32:33:c8:52:dc:42:50:eb:68:73:c7:6c:14:fd:
                    aa:c9:20:66:26:19:bd:cb:f6:9c:fb:bf:e6:db:1f:
                    e5:4a:ea:57:93:9a:f5:59:d3:89:84:2a:00:7f:85:
                    99:3a:58:a4:01:31:a3:f2:e6:6a:19:ca:5a:e9:22:
                    4c:26:04:f7:57:e0:e3:93:e1:bf:ad:98:2a:f7:65:
                    72:73:9f:e9:8a:0d:2f:2a:0a:02:e1:63:0c:fe:25:
                    03:ed:69:6a:9c:98:87:1a:b0:44:48:e6:aa:ff:33:
                    76:b9:ab:23:ef:dd:b4:e8:46:89:e4:43:92:f9:3b:
                    c8:2c:c9:c1:09:72:00:ac:ae:57:f6:4a:83:2d:3d:
                    e7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5E:D1:38:01:1F:3B:0D:E5:A8:D6:99:B8:78:35:CD:C8:4F:04:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9bcab723-051f-3595-a33e-7978a08f27c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.4.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:c0:73:4b:78:de:25:cb:d8:c0:cb:d6:1b:7e:2c:0a:e0:7c:
         9d:fd:3a:14:33:07:ea:fb:81:eb:35:d7:b0:ee:87:c6:e2:fd:
         f5:0b:e9:ca:23:1b:fb:3c:11:c2:00:77:f2:75:3e:74:1c:56:
         df:ff:46:c7:3c:f4:34:1a:f8:b0:88:a3:6b:27:67:b5:6d:fe:
         f2:59:cc:6d:13:99:84:78:76:42:4e:e9:8c:de:55:a7:d1:9a:
         9a:ff:7d:9a:93:22:2e:05:36:ce:b4:94:f8:27:11:2b:77:b3:
         8a:ca:53:e3:7e:ea:96:f3:9c:11:89:72:f5:ab:dd:40:d0:39:
         5f:29:24:bf:8c:05:4f:99:a7:70:56:62:00:f5:d1:0e:8d:70:
         c8:dc:ec:9d:df:89:b8:92:2a:5d:b7:0b:77:42:16:a1:c7:08:
         97:35:df:39:5b:1b:89:3c:0d:9a:2a:36:06:d6:66:2d:ac:2f:
         48:db:b5:a9:e8:cb:af:25:ad:59:d8:22:46:d1:6d:e3:ea:a9:
         ac:15:03:25:2e:74:d0:96:05:a3:e5:d1:00:aa:68:e2:95:9a:
         ba:66:79:4c:99:aa:3d:28:56:5e:7b:e9:67:9c:13:81:e5:46:
         c4:cf:19:fd:89:2e:70:3e:2c:fd:2d:88:b1:1b:e0:4a:3b:34:
         10:5b:7f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----