Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a025319f-8779-37b8-be57-87002d7ac00b.roa
File:                     a025319f-8779-37b8-be57-87002d7ac00b.roa (raw, json)
Hash identifier:          DP+mluLZnEU6LtjUQl56xKSfQtt1H4qH+QQEd8hZzmc=
Subject key identifier:   54:8D:4B:63:FD:C0:C5:75:AA:68:E2:CF:E1:05:23:D6:E2:30:7C:A1
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840AD38708E2AD64D6C05E04B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a025319f-8779-37b8-be57-87002d7ac00b.roa
Signing time:             Mon 23 Jan 2023 12:00:00 +0000
ROA not before:           Mon 23 Jan 2023 12:00:00 +0000
ROA not after:            Tue 28 Feb 2023 05:00:00 +0000
asID:                     22394
IP address blocks:        162.208.122.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:ad:38:70:8e:2a:d6:4d:6c:05:e0:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 23 12:00:00 2023 GMT
            Not After : Feb 28 05:00:00 2023 GMT
        Subject: CN=ee66df23-8ccd-463e-8f6a-1cdc76ba1d88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:01:5b:8c:3f:3c:23:1c:0b:8f:12:d8:28:16:
                    0f:c5:cd:14:f9:7b:60:20:bb:bb:6c:14:21:49:ad:
                    97:af:82:a5:9b:e2:35:33:96:14:25:d6:4e:7f:89:
                    c2:88:49:79:bf:61:97:f0:f1:53:43:cd:8a:7e:67:
                    c1:5e:c0:b4:67:e1:32:20:f8:c5:a7:23:78:4d:e8:
                    32:79:a9:f7:7a:16:47:ac:f3:aa:b1:a8:29:a2:8e:
                    d0:c4:2c:d3:5a:78:4a:1d:86:da:e1:68:11:e8:90:
                    1c:c9:9d:30:f1:28:2a:cb:65:76:57:cb:69:9c:37:
                    90:cc:28:4b:4b:ee:e4:b6:1b:13:87:6a:e2:d0:6a:
                    81:87:7e:5e:41:11:f3:c2:d5:80:b5:72:f3:6e:d1:
                    9a:0c:96:10:1a:a7:33:07:41:31:62:a9:f2:a9:ce:
                    d7:a7:09:e8:0f:af:d4:af:33:37:31:67:70:8d:92:
                    f0:ee:f5:88:15:8a:32:2d:1a:bd:5f:c0:15:22:a7:
                    66:23:8b:5d:60:73:c0:ac:29:18:ac:ad:94:37:d0:
                    00:94:ac:6d:20:5f:74:94:4f:a0:98:30:3c:4d:ab:
                    26:89:49:2e:f1:78:e9:6d:d6:0d:30:a7:70:b4:f9:
                    0c:5e:86:0b:4b:45:cb:f2:6b:e8:5d:e3:0d:c2:02:
                    0a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:8D:4B:63:FD:C0:C5:75:AA:68:E2:CF:E1:05:23:D6:E2:30:7C:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a025319f-8779-37b8-be57-87002d7ac00b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:7e:51:25:1f:39:bf:2a:4a:b0:b1:ab:9f:a7:ba:09:a5:83:
         4d:d2:54:a7:63:ea:37:5e:28:c0:c3:fa:ba:28:5b:61:1c:ff:
         f3:c3:88:51:ec:9c:8c:5c:eb:37:18:e3:28:9e:e6:d8:2e:f3:
         64:a9:a0:5a:fb:9c:f4:96:05:79:71:fa:00:e1:3c:aa:1c:f5:
         d5:9f:84:61:f5:19:8c:c2:a7:51:7f:43:bb:4f:d8:de:1e:69:
         c5:0e:06:7d:6c:f1:1f:b8:31:48:4a:e5:63:e0:76:a5:df:02:
         c4:4a:66:f1:17:e9:02:42:8f:2d:22:ee:59:47:7b:63:f6:d0:
         0e:7f:ea:7e:74:05:dc:00:3e:d3:8f:21:bf:eb:9c:39:8f:1a:
         eb:4f:93:21:02:08:83:43:da:a2:8b:75:a2:5b:53:09:19:bb:
         29:8a:01:af:56:0f:0b:37:80:ae:78:ba:e5:05:92:f1:82:a1:
         84:ec:ad:1f:4a:b1:27:81:52:72:3a:9c:21:07:fd:07:af:51:
         37:ae:8d:74:8c:35:cb:56:58:6a:49:5e:5b:c8:b7:27:52:a6:
         de:b5:8b:7f:ee:10:a7:c8:b5:ef:43:a5:91:84:c9:2d:56:f8:
         da:b7:1f:68:e8:af:88:ae:61:33:cd:86:4d:53:73:13:d0:52:
         02:a4:55:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----