Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b914dbc9-8fc9-309f-a082-d6ca5ba4e469.roa
File:                     b914dbc9-8fc9-309f-a082-d6ca5ba4e469.roa (raw, json)
Hash identifier:          BMRLhfhI4oPiCMacqFYN57P7L11X/It7CX0nupeCROw=
Subject key identifier:   78:C4:63:87:BD:AC:87:7A:17:84:D4:13:91:1F:29:76:4A:47:8B:D5
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840ADBE900905CD8658ED450840
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b914dbc9-8fc9-309f-a082-d6ca5ba4e469.roa
Signing time:             Mon 23 Jan 2023 12:00:00 +0000
ROA not before:           Mon 23 Jan 2023 12:00:00 +0000
ROA not after:            Tue 28 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        139.56.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:ad:be:90:09:05:cd:86:58:ed:45:08:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 23 12:00:00 2023 GMT
            Not After : Feb 28 05:00:00 2023 GMT
        Subject: CN=dd41b065-708e-4911-9170-e07693cfd54b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fd:07:3f:32:fe:77:52:78:6a:91:53:67:de:
                    df:44:29:b2:ef:4d:4f:ba:05:a1:c1:3b:a9:6c:a0:
                    55:a6:65:d9:95:38:6d:15:90:ee:77:8c:e3:66:15:
                    7e:5b:51:64:d0:e4:fc:77:5e:a9:fe:25:71:11:a8:
                    e3:f0:e7:5e:18:f6:f1:c2:f2:0a:85:bd:c5:16:e3:
                    57:56:17:9e:ad:fe:57:ae:a7:30:40:b5:bc:c8:38:
                    41:b4:d1:73:0b:0f:ac:b6:ca:58:5a:f2:d2:8e:13:
                    75:40:3d:e8:26:55:1a:fa:42:19:74:e9:33:d9:f0:
                    51:0a:32:21:d6:0f:2c:19:a4:81:43:6d:a0:25:c7:
                    4d:87:f7:bb:2b:eb:ed:b2:6e:47:f8:24:a0:38:b7:
                    74:5a:8c:de:32:ee:a3:08:c0:82:c6:49:da:48:f3:
                    e5:09:48:6b:e7:2c:9d:58:6f:04:d4:d0:e5:15:45:
                    70:e9:29:6a:02:ed:70:91:2f:40:b7:d6:4f:47:6e:
                    40:d2:46:79:b4:10:80:c8:46:fa:fe:7c:60:4b:f1:
                    ef:fa:50:32:cb:df:08:62:0f:ab:3b:9c:92:82:d1:
                    a5:07:c5:5c:79:c9:7f:25:ea:10:09:7d:fa:38:0d:
                    f2:0a:8d:db:66:88:21:07:7b:52:b9:85:92:20:47:
                    c3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C4:63:87:BD:AC:87:7A:17:84:D4:13:91:1F:29:76:4A:47:8B:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b914dbc9-8fc9-309f-a082-d6ca5ba4e469.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:73:9e:7c:3e:d4:ce:9b:bf:3f:90:13:56:59:7e:c4:84:44:
         03:4a:68:b2:94:a4:50:71:fe:a5:90:12:c3:47:24:f6:1e:dd:
         97:5d:9b:ae:c3:8f:0e:3e:49:71:7b:71:29:af:2b:54:fc:92:
         43:c0:2e:54:de:93:3b:22:9d:6e:91:86:d9:21:fe:dc:21:00:
         6a:ea:fc:cc:98:bd:6d:5b:37:48:f0:9a:4f:3a:a9:d4:da:62:
         47:76:9e:7a:54:30:57:9f:18:ba:f6:68:70:16:27:3c:f7:6e:
         df:9e:26:ea:5b:bc:bb:80:94:06:90:b5:d7:d8:43:bf:d4:64:
         fc:a9:0a:e3:a8:f2:b0:ee:f7:74:ab:eb:0f:b1:15:ef:6f:d6:
         86:4f:41:d8:11:bb:9e:e9:a9:27:65:b0:b5:60:28:12:3c:12:
         09:7c:8e:b9:f6:f4:89:ef:2b:84:e4:14:47:46:c6:e4:bc:09:
         93:e4:5b:1a:44:d5:bf:dd:6c:3c:55:f3:6c:d3:62:f1:e1:2a:
         74:a1:b3:78:fe:07:cb:3d:3f:b1:e5:26:b3:1a:25:14:e3:51:
         98:4c:87:f4:ca:1b:67:b5:bf:c1:95:f7:c6:8d:01:a8:4a:e9:
         f4:69:92:22:57:65:1a:54:69:58:60:88:f4:96:3e:77:c2:63:
         83:00:f6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----