Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a0da3e75-51ed-30d2-a995-a84891ca2288.roa
File:                     a0da3e75-51ed-30d2-a995-a84891ca2288.roa (raw, json)
Hash identifier:          zZVX8nb+7dG6imsZYtQ8SKIExhj6iTLnDKWdNPYFiis=
Subject key identifier:   E3:2F:46:8B:68:D3:45:E0:9C:12:E1:AC:70:E7:69:87:E6:F6:A9:03
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858409322A60B3CEC2A26449DAC98
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a0da3e75-51ed-30d2-a995-a84891ca2288.roa
Signing time:             Fri 13 Jan 2023 12:00:00 +0000
ROA not before:           Fri 13 Jan 2023 12:00:00 +0000
ROA not after:            Sat 18 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        158.56.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:93:22:a6:0b:3c:ec:2a:26:44:9d:ac:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 13 12:00:00 2023 GMT
            Not After : Feb 18 05:00:00 2023 GMT
        Subject: CN=affe7c38-9781-4af0-b4c5-708f0ad4ab73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1d:97:25:c8:9a:63:e0:1a:40:00:ea:a8:3c:
                    35:cf:00:76:ea:fe:1e:76:e7:22:9e:f3:ac:50:1e:
                    e6:60:ae:ee:5d:f6:80:7c:be:9c:66:ce:f4:b0:23:
                    b6:81:9f:61:01:fa:01:1d:97:f6:57:9c:ee:50:4a:
                    26:84:ee:10:b4:0a:6f:e6:cc:a2:d5:d1:51:93:d3:
                    2e:93:01:d1:41:a2:39:98:4d:62:13:79:b3:3e:69:
                    fc:6b:09:53:a9:26:69:a9:3e:a3:ce:80:97:ca:30:
                    0c:de:6c:a8:3f:a8:cd:2d:33:3d:c2:8f:ae:5a:0d:
                    20:29:e5:d6:e1:94:4a:db:5e:f3:09:03:12:f3:80:
                    37:f2:de:db:9f:f6:0e:f7:fe:e0:f9:ca:d5:67:cc:
                    6e:ff:41:43:2c:d4:1d:ad:4d:7b:fa:07:56:a6:eb:
                    f6:59:6d:70:b9:bc:9d:29:82:b5:5b:eb:b5:cd:3d:
                    3d:38:2d:55:7e:9e:c6:03:6b:f9:12:e2:d2:b8:74:
                    66:ae:b0:b7:98:56:c7:5a:ef:f8:58:e8:c4:20:84:
                    8d:8f:c3:f2:89:f7:fe:84:77:29:1a:b5:e8:38:6a:
                    84:ed:ef:79:18:61:a7:7e:ca:02:e4:52:00:30:1b:
                    c7:67:cd:ce:76:fd:bd:dd:a7:2b:ef:ea:bf:63:10:
                    b2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2F:46:8B:68:D3:45:E0:9C:12:E1:AC:70:E7:69:87:E6:F6:A9:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a0da3e75-51ed-30d2-a995-a84891ca2288.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.56.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:1c:d6:8c:19:06:ed:0c:2a:bc:2d:87:b2:25:c7:3c:9d:77:
         23:90:1c:d3:23:08:c6:75:2c:27:59:cb:13:ef:e5:02:60:5e:
         ea:b8:5c:e1:d4:42:fa:87:87:a8:ce:ba:9e:0f:2f:e2:c5:4c:
         dc:f3:b8:c5:3e:56:67:7d:5a:59:88:76:44:91:74:8b:6d:92:
         d8:65:46:48:d9:05:34:3f:43:ba:2a:59:b3:e7:97:63:3f:fc:
         c2:37:65:d0:88:71:03:b2:14:75:89:b6:02:1d:84:4a:f6:10:
         d7:63:90:db:ff:59:6d:4b:c5:43:d1:6f:ea:a7:bc:f5:4e:8f:
         ca:b9:27:c3:76:94:90:2b:d1:67:d8:ac:a0:7c:ee:4c:9d:60:
         a9:a8:b9:c0:78:b0:ec:d5:9b:2f:e9:48:00:b2:dd:76:b1:5b:
         37:be:72:ab:4d:73:98:77:df:c6:9c:7c:0a:08:9a:7f:7e:16:
         09:7a:5b:c7:3e:10:93:ef:36:2f:e6:01:a7:18:0e:03:67:60:
         ff:5f:99:29:6f:81:e0:eb:0d:54:3a:bc:28:30:97:22:0e:97:
         f5:72:de:27:75:ec:7c:dd:16:8c:ef:97:fb:ba:a2:36:3b:07:
         0f:fc:0e:10:cd:b7:5a:24:47:83:46:9a:db:05:17:19:f5:fd:
         0a:b3:f0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----