Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b97981e5-1a2f-32de-9d33-a7c969fcd501.roa
File:                     b97981e5-1a2f-32de-9d33-a7c969fcd501.roa (raw, json)
Hash identifier:          WGqq0Nngp14iEwrXbpR3JC+ma4iVrXsUFem1mbtzfVE=
Subject key identifier:   19:BE:A9:90:40:05:82:1B:9F:0B:20:F2:4D:89:DF:4F:6A:5B:AC:28
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840BBFE625C6FE1CD1E22F5B180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b97981e5-1a2f-32de-9d33-a7c969fcd501.roa
Signing time:             Sat 28 Jan 2023 12:00:00 +0000
ROA not before:           Sat 28 Jan 2023 12:00:00 +0000
ROA not after:            Sun 05 Mar 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        75.101.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:bb:fe:62:5c:6f:e1:cd:1e:22:f5:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 28 12:00:00 2023 GMT
            Not After : Mar  5 05:00:00 2023 GMT
        Subject: CN=c8298ddd-78e8-4fc2-8c97-b1139aa223ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:da:4d:a4:0b:4d:06:be:f6:eb:25:8d:91:ea:
                    2b:f3:bf:eb:5b:2a:22:44:f9:a3:61:02:72:25:50:
                    bc:30:37:7c:54:bf:da:24:86:38:09:c5:9c:50:35:
                    03:fd:01:7c:2b:1a:6e:5e:9d:95:e6:1c:0b:01:5d:
                    14:20:84:6b:4e:5e:ef:ad:d6:93:57:f0:39:5f:c8:
                    8d:aa:ea:fa:b0:ce:3c:6a:6a:97:34:43:bb:92:74:
                    a6:d8:70:56:ea:03:a2:53:77:88:d3:23:cd:36:df:
                    6d:be:55:20:bb:e0:13:bc:b8:03:25:c6:a8:7e:76:
                    96:7b:9f:4e:11:fa:57:09:e5:be:1d:54:51:fb:14:
                    d9:e3:46:58:fc:de:62:26:ea:63:6f:4c:13:4d:6c:
                    ed:0f:cc:fe:0b:62:4a:a9:17:19:e6:33:50:a1:d3:
                    0d:98:56:52:8e:dc:57:3b:e4:56:e6:00:12:b7:ab:
                    87:08:4e:8c:72:6c:aa:68:a6:e1:cc:fe:8f:4a:17:
                    1c:2c:a1:0f:af:91:7a:a1:ee:0d:40:5a:05:cd:61:
                    f3:04:a7:cf:e6:39:e3:63:1b:05:c9:96:f2:d6:21:
                    26:36:29:bc:0c:1d:ec:e2:32:99:7f:9e:30:f3:ca:
                    98:04:ad:b7:e4:05:5d:dd:56:4d:db:0a:84:e0:5f:
                    53:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:BE:A9:90:40:05:82:1B:9F:0B:20:F2:4D:89:DF:4F:6A:5B:AC:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b97981e5-1a2f-32de-9d33-a7c969fcd501.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.101.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:5b:ea:5e:5f:28:50:0b:37:83:e4:36:41:3c:bc:d7:a9:a4:
         bf:fc:e7:42:05:76:ce:a8:8f:8c:e9:69:a5:bd:c7:7b:b0:3a:
         8b:43:98:64:40:e4:e8:36:a4:d9:d4:39:f2:12:5a:b5:e8:56:
         db:d5:56:83:17:48:f7:51:60:9f:20:2d:fe:8b:5c:62:ec:2a:
         bc:16:79:2e:e2:d7:c8:52:b2:d4:9a:f9:b6:93:8d:ad:c9:e8:
         05:1f:b4:69:2a:9a:5f:d2:f5:42:13:ce:44:62:2f:ef:75:6d:
         da:97:2c:c5:66:9c:c4:25:3c:fb:83:33:c3:0d:6a:b4:0f:9f:
         eb:b6:ac:2d:64:ac:31:45:da:7d:da:68:2e:98:29:d5:08:04:
         f5:ab:8e:c7:0e:94:a3:60:20:9b:0c:b5:c1:a4:be:f0:6d:dd:
         40:b6:1a:2c:3f:11:7b:47:47:65:66:23:bd:9c:bd:4b:d1:10:
         f7:9a:5f:87:fb:0e:64:10:9a:f6:27:ac:75:a4:de:8a:6e:e1:
         9a:1e:3b:6e:65:11:58:83:bf:98:80:79:ff:f1:7f:d8:4f:af:
         40:cf:42:ba:e0:35:44:32:36:26:72:5e:3a:02:12:9c:ce:c7:
         17:a6:e1:48:64:de:8b:1f:c8:45:88:09:32:3b:1d:4a:1c:f8:
         ec:1b:c8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----