Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bce1c850-cc30-3b73-a4d4-a32d9a76aa2c.roa
File:                     bce1c850-cc30-3b73-a4d4-a32d9a76aa2c.roa (raw, json)
Hash identifier:          71WYBY3y/kK/C8xP4azPlEv6FbozhSAbeKXi6EDB89E=
Subject key identifier:   17:E3:A6:BA:FA:8C:F3:CF:7B:3C:D3:DA:F0:A4:27:BF:20:92:F5:A5
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858408F1032E48C3F2E0693CAF3A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bce1c850-cc30-3b73-a4d4-a32d9a76aa2c.roa
Signing time:             Thu 12 Jan 2023 12:00:00 +0000
ROA not before:           Thu 12 Jan 2023 12:00:00 +0000
ROA not after:            Fri 17 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        104.255.56.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:8f:10:32:e4:8c:3f:2e:06:93:ca:f3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 12 12:00:00 2023 GMT
            Not After : Feb 17 05:00:00 2023 GMT
        Subject: CN=5bdd2cdc-a7f2-4be7-b719-ca3c9fa42a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9e:4d:47:22:8b:87:f4:15:8e:5a:fd:17:47:
                    ec:a4:ad:c5:00:09:90:e0:4b:9b:01:a5:51:46:6a:
                    10:18:7b:f0:65:cd:84:cc:a0:2b:51:31:27:41:f3:
                    92:34:ea:ff:8b:44:61:ea:d1:d7:93:70:b5:11:2f:
                    89:86:d2:b6:c8:1e:b8:c9:01:a6:2b:03:2d:7f:91:
                    1a:6c:91:9c:96:0c:75:ae:ef:10:74:8b:ff:04:e2:
                    f8:52:d1:1a:aa:02:54:dd:8b:e3:67:5c:91:49:5f:
                    08:57:e2:d0:f8:ae:55:9e:85:2d:2b:b0:3a:4d:7c:
                    d0:bf:85:63:e5:bd:7f:ec:19:79:c1:88:5a:41:c1:
                    ff:bd:70:4e:1a:cc:41:5d:b0:fb:a3:a8:1a:51:01:
                    74:25:e1:ed:57:6b:a5:2b:21:b3:92:c3:22:28:8a:
                    8e:a3:91:30:87:37:67:5d:ce:92:26:e9:75:92:3e:
                    b8:3e:e0:89:f9:40:c1:12:ea:49:a4:d9:05:9a:ab:
                    89:dc:0d:6b:36:c8:5b:55:6c:cf:a0:98:02:7c:72:
                    e2:54:95:76:28:e9:b5:44:e8:71:44:66:0f:82:62:
                    84:d9:76:90:85:16:11:e2:8a:4f:fd:af:40:cb:b9:
                    52:19:22:2f:f6:8f:38:10:36:b0:f2:b7:90:32:ea:
                    66:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E3:A6:BA:FA:8C:F3:CF:7B:3C:D3:DA:F0:A4:27:BF:20:92:F5:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bce1c850-cc30-3b73-a4d4-a32d9a76aa2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:2c:35:cd:ea:5f:4f:17:1d:83:39:82:be:e2:76:4f:2c:40:
         ec:67:dd:e6:4a:29:58:78:c9:eb:00:5e:67:5e:19:8d:a6:72:
         14:2d:82:41:9e:17:1c:31:ee:d6:07:96:e9:e6:db:c0:e1:4c:
         53:12:77:fc:80:a2:59:df:6b:9d:95:9d:5a:23:43:05:55:59:
         37:e2:4d:29:36:a1:47:b7:39:09:8e:b2:1d:ef:0e:bf:4b:ea:
         5a:eb:bb:12:d5:90:f9:67:06:32:53:86:e0:c9:fa:01:ec:0d:
         c9:b6:0b:9e:55:b0:e9:19:fe:02:3f:ef:39:84:05:76:e6:2f:
         66:52:4f:a5:d9:d1:4b:1a:54:52:56:07:47:6d:74:80:a6:a4:
         1a:3c:bf:40:cd:72:ed:2a:64:4f:cf:f5:44:f3:95:c3:59:2b:
         28:7d:63:31:2d:e6:8c:84:59:b0:f4:4c:f1:99:e0:7d:98:97:
         eb:75:4c:d6:13:f0:38:a7:b7:94:d8:b0:13:1c:3d:60:19:bd:
         85:f4:61:e7:63:b1:e1:b4:99:e1:8c:18:8b:cb:59:b4:a4:e1:
         78:62:0a:bb:5b:86:26:42:4f:fc:f7:cb:b1:f8:b7:e7:e5:53:
         62:a4:67:83:1c:80:85:b7:23:6a:b2:d4:6d:99:ce:4f:50:41:
         6b:22:d8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----