Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a8e8c329-074a-3f0b-a177-9b7f65409d3e.roa
File:                     a8e8c329-074a-3f0b-a177-9b7f65409d3e.roa (raw, json)
Hash identifier:          lrrV+USRBhGHnSmWC+/WXLWzULOJEQMbkV2BM4f2FBk=
Subject key identifier:   1D:51:4D:E3:36:F0:B7:FB:8D:32:9D:CC:91:A7:E7:02:FF:2F:36:6B
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858406BE7A7B8ED16C959150E1016
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a8e8c329-074a-3f0b-a177-9b7f65409d3e.roa
Signing time:             Fri 30 Dec 2022 19:54:08 +0000
ROA not before:           Fri 30 Dec 2022 19:54:08 +0000
ROA not after:            Sat 04 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        198.41.96.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:6b:e7:a7:b8:ed:16:c9:59:15:0e:10:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 30 19:54:08 2022 GMT
            Not After : Feb  4 05:00:00 2023 GMT
        Subject: CN=b0288501-451b-46ec-ab5f-fb4006b06c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:56:a8:ee:5f:8d:41:26:56:a7:9e:42:6b:b3:
                    cb:34:e6:99:82:6d:43:2f:9d:e6:3a:21:57:2a:cf:
                    e7:21:76:47:38:4e:7f:3c:dd:57:57:e6:88:cc:ba:
                    3d:b5:d1:39:0f:8d:19:a7:c5:63:5b:e2:0c:32:e2:
                    f4:8d:6e:9d:00:da:0b:73:43:d0:17:7d:2e:1d:fc:
                    9b:a8:06:ae:9a:4f:37:e3:96:49:20:09:5b:ef:88:
                    d1:82:ea:fc:1f:50:9a:cb:03:13:cc:b8:76:b9:5c:
                    72:37:63:89:af:6f:9c:cc:ff:4d:7c:ca:43:83:16:
                    21:14:7a:8c:d7:53:f8:fe:9f:c6:93:cb:07:5d:fd:
                    4b:0e:65:00:0a:92:09:a8:d1:7e:8e:13:45:6d:8f:
                    da:fc:71:91:cd:aa:82:e8:f9:2c:b4:87:ee:a3:77:
                    dc:7f:36:ae:80:3b:75:fb:08:1d:48:2e:d0:de:e5:
                    93:34:a6:b7:f4:20:c8:d2:86:08:57:42:59:92:67:
                    c5:33:28:32:97:84:21:0b:17:0d:1f:8e:0c:23:4f:
                    2d:74:f6:37:50:cb:b6:bc:0e:47:6c:07:05:1c:3e:
                    5e:6c:28:8d:b1:9a:66:bc:bd:8b:a7:a0:7d:98:2b:
                    67:9d:fe:68:17:37:34:3f:b2:0f:3a:06:ae:df:9c:
                    9c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:51:4D:E3:36:F0:B7:FB:8D:32:9D:CC:91:A7:E7:02:FF:2F:36:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a8e8c329-074a-3f0b-a177-9b7f65409d3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:a0:6d:b2:a3:9b:43:9d:de:a8:32:ed:7a:85:8d:7e:22:d1:
         cf:56:05:c7:07:1e:7a:1c:d6:dd:11:ad:9f:a4:b8:3e:00:2e:
         e4:52:bd:84:34:4e:1c:17:e4:15:78:96:d5:84:2f:0c:b2:99:
         c9:30:a1:bd:2a:dc:e7:6c:ed:23:89:58:10:6a:55:7b:9f:95:
         d1:32:9a:2f:ad:98:b1:c6:d6:50:5b:60:c1:1a:5b:d9:a5:9a:
         de:69:dd:74:84:52:c7:99:8c:07:b6:88:32:29:a5:a2:e9:d0:
         83:30:5e:d3:da:bc:cb:93:ad:75:d9:2c:41:eb:e2:be:2a:a7:
         70:d1:ab:54:9f:a2:15:eb:a6:a3:84:81:7f:36:23:40:34:a2:
         b4:65:7b:51:d2:d4:0d:75:78:b4:64:a8:ab:86:90:67:64:52:
         27:d9:5f:11:23:07:53:d2:5b:d2:61:3e:4f:dd:a5:bb:11:06:
         8f:62:a4:69:e3:07:6f:19:ba:d4:24:fb:fa:cd:13:6c:37:c6:
         f1:bd:62:2b:13:3a:b5:7a:e6:ac:d0:5b:a7:4f:c5:3b:0f:ca:
         ef:66:98:5e:69:c9:49:49:6d:7f:51:6a:8a:21:00:aa:69:f2:
         c0:e2:44:36:df:58:1c:c2:82:94:af:f9:20:ec:aa:5e:d3:e2:
         7b:51:0f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----