Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/acb10b66-a76f-35e1-ab3e-648ec075b37a.roa
File:                     acb10b66-a76f-35e1-ab3e-648ec075b37a.roa (raw, json)
Hash identifier:          Rfoh5VEWjLdqQQD6Fjyo8mXMH/dNJwHVxqm+YvenoG4=
Subject key identifier:   A1:A2:27:B3:65:48:72:50:E0:73:FC:F0:17:4C:25:33:CC:F2:80:56
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FF5CF038430BC774D6A0E7200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/acb10b66-a76f-35e1-ab3e-648ec075b37a.roa
Signing time:             Fri 18 Nov 2022 12:00:00 +0000
ROA not before:           Fri 18 Nov 2022 12:00:00 +0000
ROA not after:            Sat 24 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        72.44.32.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f5:cf:03:84:30:bc:77:4d:6a:0e:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 18 12:00:00 2022 GMT
            Not After : Dec 24 05:00:00 2022 GMT
        Subject: CN=a662acb1-578b-4017-b9c8-9ff877feb915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:98:8e:51:de:fe:a9:5a:13:52:ef:ef:41:aa:
                    63:df:8b:3c:3a:15:b2:cf:71:b7:37:16:e6:d5:1e:
                    e4:c9:7a:b0:f3:09:5b:45:db:55:c8:96:26:55:8d:
                    87:6e:41:fc:b4:2f:02:54:69:19:95:3a:2c:ca:67:
                    36:b6:d3:ec:1a:47:b2:89:02:b1:0c:52:45:fd:84:
                    69:70:89:a0:9a:7c:b3:1d:c6:9e:9d:be:42:a7:51:
                    36:85:98:19:ad:b1:6f:45:0e:d7:a3:29:a1:67:4e:
                    20:e7:48:b3:9c:39:25:b9:d6:7b:26:22:55:09:db:
                    12:54:82:1d:79:5e:1b:e2:29:0e:0b:c4:db:7f:34:
                    e8:83:1c:33:c7:58:6e:4d:e3:30:4f:23:96:c1:6e:
                    76:44:ab:35:dc:20:0c:b1:88:a5:64:e7:da:35:bb:
                    b7:40:3d:fa:dd:44:19:52:48:01:ec:a2:5d:5f:12:
                    84:29:8a:2f:a2:c7:5b:50:3b:0d:d5:e3:f0:2c:62:
                    06:ba:41:ea:15:dd:df:16:b0:3e:d3:80:91:99:9c:
                    b3:bf:43:de:55:83:5f:45:ff:fa:10:50:1a:f2:6a:
                    bb:32:d2:2e:5b:fb:1f:d9:bd:4f:ea:2b:e0:16:6f:
                    1b:12:ba:79:8e:d4:f8:98:10:dc:b4:7e:77:4d:63:
                    19:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A2:27:B3:65:48:72:50:E0:73:FC:F0:17:4C:25:33:CC:F2:80:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/acb10b66-a76f-35e1-ab3e-648ec075b37a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.44.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:d4:ba:a9:fe:72:4c:e0:e7:3b:36:54:d2:0e:76:a3:c8:91:
         05:d8:15:c1:33:88:6b:69:74:0e:e1:03:02:8c:07:5a:32:6f:
         79:3b:8d:fc:1b:4b:cf:60:0d:5d:1d:ba:5c:1d:f3:c5:9c:68:
         16:ff:71:a1:0a:07:3d:0a:bf:07:f6:71:3b:6e:72:af:81:85:
         5b:b1:b8:0a:b8:4e:e1:00:db:8d:a7:20:48:b8:a3:26:73:65:
         24:31:28:10:64:3d:d5:05:17:c6:00:aa:10:d1:c9:0b:1e:3b:
         dc:20:b0:f2:2f:a1:bd:f0:3e:9b:fb:52:a4:40:dd:18:89:fa:
         72:74:a1:67:b9:6b:27:0e:fb:76:50:94:83:32:50:a9:71:93:
         76:06:12:cc:94:10:1b:9b:4f:1f:d6:e5:3a:e4:1f:d0:7e:0d:
         cc:6d:aa:3b:80:01:ac:e7:94:0b:45:50:e9:fb:c4:2c:4b:1a:
         a7:97:ee:41:99:f8:99:00:ea:76:07:81:5b:a0:df:c3:9e:9e:
         73:44:00:73:b0:56:19:7f:0f:69:fd:29:83:e0:1f:0e:b6:fb:
         32:b1:d7:06:03:67:72:3b:e4:8f:e7:46:3a:ab:1b:d5:3a:63:
         6f:c3:b8:fd:0b:ac:fc:0e:cf:f0:e1:07:f8:3c:a8:58:c3:49:
         7a:9d:39:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----