Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b2d69893-52ba-304d-abdb-eded694970df.roa
File:                     b2d69893-52ba-304d-abdb-eded694970df.roa (raw, json)
Hash identifier:          sQMUnlmJIxAYhGHeANgkw3f1m/pnSAx6FvsOSMks66M=
Subject key identifier:   39:CA:06:62:68:4B:73:D7:33:EC:EA:97:73:F8:8F:A7:0A:A1:A9:11
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584095852B9C4AA6A504A18718C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b2d69893-52ba-304d-abdb-eded694970df.roa
Signing time:             Sat 14 Jan 2023 12:00:00 +0000
ROA not before:           Sat 14 Jan 2023 12:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        99.87.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:95:85:2b:9c:4a:a6:a5:04:a1:87:18:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 14 12:00:00 2023 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=0ae32f7d-74d8-4540-9cff-73dff938baaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b5:b4:9f:fd:20:ec:7b:ff:d9:57:50:fa:f0:
                    d3:65:51:1d:3f:45:28:df:a1:1c:ab:40:9d:6a:60:
                    79:e3:fd:f3:db:e6:ac:7c:cb:e0:c2:4f:c0:dc:23:
                    b8:c9:c8:39:6a:48:1e:71:10:6e:5f:f5:3d:6f:6e:
                    9b:fd:82:54:1c:6a:38:a8:f1:03:25:c8:5d:71:48:
                    7e:19:26:54:fd:13:7c:e4:7d:7c:c7:9a:d7:82:dc:
                    a6:a9:28:ef:09:d7:ab:2e:48:a8:03:64:11:dc:15:
                    e4:c4:d3:11:38:ec:6b:be:0e:49:f3:9f:2f:43:03:
                    49:dc:97:9c:cf:06:4b:4f:2d:71:9d:a1:25:25:cd:
                    53:92:4f:57:0d:b8:38:cd:92:72:9b:d2:74:ba:3f:
                    29:73:0b:f2:66:4d:08:d5:9a:5e:b3:9e:22:9c:de:
                    1b:45:bb:fa:43:4a:61:f5:cf:c8:cd:f4:25:7c:de:
                    54:9f:bd:b5:9d:3c:5f:4c:9b:8a:32:fb:05:6a:0a:
                    78:6f:14:ca:74:b0:ed:e1:0a:c0:42:fa:e4:40:87:
                    7e:4a:2f:39:b2:8e:be:7f:9c:fe:fa:5c:3a:e9:43:
                    34:3c:ca:36:fd:f2:d3:ef:64:52:44:2f:80:20:6a:
                    f6:9a:2a:7e:3d:6b:86:58:fe:3d:66:af:27:9c:1d:
                    ed:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:CA:06:62:68:4B:73:D7:33:EC:EA:97:73:F8:8F:A7:0A:A1:A9:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b2d69893-52ba-304d-abdb-eded694970df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.87.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:33:ce:05:b1:7d:3a:c3:e7:65:44:a1:e1:d9:2e:a4:8f:51:
         39:df:bb:d1:86:bb:6a:7f:ec:51:49:11:f9:85:b0:3b:59:83:
         37:bf:54:9a:db:f5:97:fc:f2:aa:37:a8:61:1b:c6:f4:7c:05:
         f4:97:ba:0b:12:60:e9:b6:b4:c3:92:b2:f9:81:bd:09:55:68:
         99:0c:24:fb:51:ce:7b:58:1e:49:1d:cc:f1:da:39:c5:50:ed:
         cb:3f:17:42:54:0d:b8:b5:fe:ea:da:13:71:3d:9c:c3:90:75:
         e3:e1:63:a5:f3:58:38:d1:9f:0b:56:2b:ed:5f:0f:3b:9f:72:
         24:56:07:f1:f4:76:fb:d6:06:6f:bd:5b:33:56:bc:85:9a:0a:
         00:f5:20:18:39:e7:26:54:90:86:21:99:fb:11:4c:b6:dd:e7:
         41:f9:45:b0:a8:1b:4e:16:5f:0b:7f:51:d6:58:cf:77:64:f6:
         aa:f6:e6:16:8a:38:d9:cf:31:19:e2:a1:27:76:0f:13:f5:d1:
         a9:ea:7c:b1:16:2e:9d:61:a8:39:6b:97:48:07:2f:5e:a5:b0:
         c9:6a:06:df:04:18:9a:0f:a0:24:15:e1:b6:1e:b7:3c:4c:61:
         a7:3f:c9:cc:47:8e:ad:db:76:6d:f9:3c:f6:71:5b:75:eb:6f:
         21:5d:3d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----