Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a80f0242-0f69-36b9-8a69-e407f73f515d.roa
File:                     a80f0242-0f69-36b9-8a69-e407f73f515d.roa (raw, json)
Hash identifier:          kym+FIbyCvKI97jo7c2bUOmVEowO7P8c8L1dmFnY1Q4=
Subject key identifier:   87:21:54:F4:CD:CA:FD:D6:50:A9:9F:70:56:5A:99:B9:38:08:1E:8A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840C141D7E17EA582D542794C40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a80f0242-0f69-36b9-8a69-e407f73f515d.roa
Signing time:             Mon 30 Jan 2023 22:42:07 +0000
ROA not before:           Mon 30 Jan 2023 22:42:07 +0000
ROA not after:            Tue 07 Mar 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        149.177.0.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c1:41:d7:e1:7e:a5:82:d5:42:79:4c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 30 22:42:07 2023 GMT
            Not After : Mar  7 05:00:00 2023 GMT
        Subject: CN=694fc8ff-caaa-40a5-8379-63a9b45ca2a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:71:54:9b:77:58:0c:09:42:2a:e6:00:a1:11:
                    95:1e:29:1b:47:41:e5:df:4c:e9:47:e8:3b:9e:16:
                    2c:5f:15:90:1c:e8:fe:08:4c:64:18:c2:85:a0:1c:
                    b5:58:f9:3d:3b:43:54:bd:23:cf:6b:e3:9a:eb:c6:
                    aa:41:6d:7d:9f:43:f8:b1:99:19:e0:52:21:5e:44:
                    6e:4a:87:58:5b:fe:b2:2b:77:89:f9:12:b4:16:fc:
                    45:1a:43:86:0e:c2:29:ed:8e:fe:a9:67:39:77:e5:
                    f8:a1:ce:54:0b:8b:17:1d:0f:6c:da:93:93:52:94:
                    22:8f:4c:f2:e4:04:2f:29:c5:47:a2:3d:5d:18:27:
                    dc:42:73:83:38:69:18:b7:8c:bf:00:ca:91:c8:fe:
                    a8:d6:06:a0:ed:fb:b6:66:dc:8e:a4:f8:97:75:b3:
                    ff:a3:b3:ea:b5:e1:9a:85:a2:b8:55:e3:b8:27:6a:
                    02:1a:37:e3:2a:4c:2b:d0:5b:cf:1b:b9:c9:fd:71:
                    15:45:63:ab:93:a2:77:5a:c4:fa:f5:a3:4b:a7:b1:
                    24:39:9a:8d:3d:af:e1:2e:d1:92:d0:c4:32:9e:83:
                    04:0b:fd:ab:76:57:59:67:4b:e6:a1:f2:fc:ca:fa:
                    47:cd:7f:37:67:30:5f:c6:17:5e:75:d6:1a:86:b1:
                    00:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:21:54:F4:CD:CA:FD:D6:50:A9:9F:70:56:5A:99:B9:38:08:1E:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a80f0242-0f69-36b9-8a69-e407f73f515d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.177.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:4b:f8:b8:25:bd:85:02:05:30:07:ea:ff:ea:a6:34:44:7f:
         38:5c:14:fe:97:53:c5:15:8d:dc:7f:4b:72:5b:b9:db:79:d5:
         d3:a0:60:94:de:19:87:65:66:9b:6d:df:3b:4b:ae:2e:5e:18:
         6a:d0:06:3b:da:6b:14:2d:18:68:0f:ee:65:d3:b2:5e:29:b6:
         16:f0:86:15:ef:4b:79:cf:fa:00:9f:79:d0:5f:b2:c5:91:9b:
         89:6c:0c:75:34:f8:6c:0f:90:fe:ce:b8:ad:f6:a6:13:56:c2:
         17:e5:92:cb:4f:42:f6:0c:34:64:4b:05:59:19:77:f6:ae:af:
         24:bf:b5:93:9b:b9:54:bc:3a:8e:a8:a0:16:aa:11:d5:f2:f6:
         d9:c7:13:d9:77:6b:bb:58:42:b1:4b:fc:5c:b6:99:3d:fc:d2:
         06:5c:3e:09:3a:bb:56:7f:4a:39:2b:0d:d3:a8:07:91:cc:34:
         af:07:fb:12:18:b4:21:25:79:e4:e3:7f:fe:0b:76:36:10:fd:
         23:1b:be:b2:65:f9:79:88:aa:f1:bb:af:50:d8:59:1d:58:a6:
         5c:33:f5:fe:2d:54:c4:3b:1e:32:19:13:02:80:ea:6e:27:a0:
         f4:b3:17:5c:34:a5:29:a7:14:4b:f7:97:f9:32:b5:c3:ee:14:
         4f:ea:4d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----