Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a81b2cca-f6e2-3074-bdbd-deca6e6d9353.roa
File:                     a81b2cca-f6e2-3074-bdbd-deca6e6d9353.roa (raw, json)
Hash identifier:          0mgepXFwU71m2L7fbnmD0d+jp3B+a+wWK1xPJJc9OxY=
Subject key identifier:   6B:DC:84:4A:BA:96:87:46:36:C0:BE:2D:D8:E0:A2:6C:92:04:13:DC
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858409CD927E02A26F57AAC9FBE80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a81b2cca-f6e2-3074-bdbd-deca6e6d9353.roa
Signing time:             Tue 17 Jan 2023 12:00:00 +0000
ROA not before:           Tue 17 Jan 2023 12:00:00 +0000
ROA not after:            Wed 22 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        141.230.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:9c:d9:27:e0:2a:26:f5:7a:ac:9f:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 17 12:00:00 2023 GMT
            Not After : Feb 22 05:00:00 2023 GMT
        Subject: CN=6bb295b7-344a-406c-adcf-2ce95bd7ce01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:93:df:f0:84:f2:e9:03:48:4e:a8:58:39:d0:
                    ce:63:29:77:2a:93:59:6f:1d:00:ce:8b:a9:4d:72:
                    9d:3b:5b:a8:65:08:2d:11:68:a5:da:d6:7d:08:b2:
                    ea:8a:33:56:b6:b0:c9:c1:a8:00:f6:8d:47:8f:fe:
                    10:66:20:ab:44:b2:c9:5b:c0:09:66:29:e7:c6:d9:
                    5d:ac:56:62:13:7b:56:8f:30:1e:e2:ce:bf:c6:e2:
                    8f:51:2c:60:86:ff:1c:c7:8f:64:e2:44:57:ff:53:
                    0b:ba:9b:7c:fb:f3:7b:68:73:2d:27:dd:00:50:94:
                    68:00:49:d3:60:a4:32:e9:41:24:84:69:a0:6e:60:
                    b6:04:d1:bf:51:2a:bd:43:a3:35:18:80:5d:8f:64:
                    a8:59:cc:35:f3:83:c2:33:e5:f2:fa:d5:e6:ac:e7:
                    af:16:35:2a:d6:b6:61:5f:55:1d:40:9c:41:67:74:
                    43:18:d2:cd:d5:00:6e:ad:cc:58:fb:98:a5:f3:46:
                    e7:94:8e:44:0f:c4:f9:5c:7a:9c:d6:5d:9e:9f:a0:
                    19:9f:9b:ea:01:fc:68:f5:2c:a3:17:4a:e0:3e:df:
                    34:32:c8:f5:d3:67:be:6c:d1:44:e8:26:6b:df:cc:
                    73:84:e9:62:81:f9:c0:29:dd:30:a7:67:e6:3b:aa:
                    90:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:DC:84:4A:BA:96:87:46:36:C0:BE:2D:D8:E0:A2:6C:92:04:13:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a81b2cca-f6e2-3074-bdbd-deca6e6d9353.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.230.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:f5:15:07:a8:39:9b:be:a6:5c:fd:02:1a:e4:6e:75:f9:fb:
         7d:5d:e9:b7:55:a8:a2:ac:3d:e1:bd:b8:3d:79:88:24:87:76:
         36:ff:ab:bb:08:44:20:fa:fc:05:55:ea:fb:4b:5d:24:42:e3:
         cd:d3:92:c1:0f:7f:38:00:b1:3b:25:69:73:78:33:af:2b:4f:
         b4:4d:99:0a:27:13:87:54:c6:43:9c:54:19:9b:54:99:37:00:
         79:4a:a4:35:90:b4:ee:74:ff:90:64:b8:49:de:4f:45:79:45:
         ef:75:e9:0f:43:29:ab:9b:bc:ad:40:37:76:26:8d:2c:8c:3b:
         b9:ae:62:f7:cb:58:51:e8:46:b3:06:63:ed:f9:9e:55:6a:dd:
         e3:ba:dd:73:f2:e4:be:14:5c:d3:a9:8b:8a:5e:63:db:f4:70:
         10:c5:35:76:d5:c8:9a:a6:7b:3d:89:2d:ee:97:42:a3:d7:d0:
         4a:e0:76:14:aa:67:1a:ae:b9:a1:8d:6b:c3:13:7a:f3:09:e5:
         ce:c3:33:56:e5:93:2b:7b:59:4c:56:2c:2c:24:e4:7a:2b:7c:
         4f:0f:a9:f5:8c:fe:a4:6a:11:dd:59:73:70:bf:58:6f:73:29:
         fe:e6:de:91:97:6c:f6:ca:7c:5f:0f:ba:d9:6f:2c:1a:7e:69:
         94:d8:a0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----