Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bdb55594-272a-3c63-8e08-478485e97736.roa
File:                     bdb55594-272a-3c63-8e08-478485e97736.roa (raw, json)
Hash identifier:          8VaYbhqE3VVe2ay9lpj/Idy/kF55CScHUKyP4BzwHoI=
Subject key identifier:   26:54:E1:1F:50:7C:FC:44:F3:08:6E:6D:14:E8:A6:A0:ED:FA:57:EA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584091210B6811A3EDBA2635AB20
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bdb55594-272a-3c63-8e08-478485e97736.roa
Signing time:             Fri 13 Jan 2023 12:00:00 +0000
ROA not before:           Fri 13 Jan 2023 12:00:00 +0000
ROA not after:            Sat 18 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        68.66.112.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:91:21:0b:68:11:a3:ed:ba:26:35:ab:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 13 12:00:00 2023 GMT
            Not After : Feb 18 05:00:00 2023 GMT
        Subject: CN=1bdcfee4-b550-49d1-a8a3-f2155517e7bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:81:82:7e:d6:82:b2:bf:86:d4:69:a1:29:28:
                    79:39:42:f6:91:4d:b4:1f:ad:1f:4e:79:aa:11:d5:
                    ae:54:b5:c5:b5:ea:65:e2:5a:87:8f:e6:69:89:0d:
                    c0:2e:e6:93:ca:ed:fe:b6:e9:2c:34:33:a2:91:31:
                    1a:90:28:98:8e:30:69:0b:e9:25:68:5e:da:2d:6a:
                    c4:5d:a9:0b:ce:43:2e:41:ee:b4:14:0e:50:e9:fb:
                    40:e3:72:f1:dc:be:e3:c5:5d:e4:e0:30:07:01:b1:
                    2c:a0:9a:58:45:e0:89:f0:58:6c:0a:62:36:0e:b1:
                    d4:a4:34:d1:71:3b:d5:29:fb:fe:96:9f:25:4e:c2:
                    06:1d:f3:0a:46:6c:af:42:ac:f3:05:72:90:c7:52:
                    2b:ac:8d:3a:32:64:01:2b:8b:21:e3:01:8f:20:a8:
                    82:ba:f1:3e:62:7c:f0:4a:97:68:20:5c:c3:cc:92:
                    de:a7:76:f3:d9:e4:6d:65:2f:eb:77:4c:23:43:0d:
                    28:1a:a3:5f:61:7a:8f:1f:56:57:fc:56:f1:33:b5:
                    1b:b6:5c:8e:be:b9:93:8e:3b:41:d3:d5:bb:0e:b8:
                    a3:2b:58:b8:26:a2:6e:d7:bc:13:6d:24:0c:e1:e9:
                    12:0e:b2:71:93:8e:db:80:f7:62:c6:d4:a5:ab:4c:
                    1f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:54:E1:1F:50:7C:FC:44:F3:08:6E:6D:14:E8:A6:A0:ED:FA:57:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bdb55594-272a-3c63-8e08-478485e97736.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.66.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:58:99:cc:b7:4f:5e:c8:ce:b8:b6:3b:24:04:85:f1:16:10:
         a7:40:2a:b3:3e:9c:58:80:35:43:ec:1d:f4:c5:0c:0c:e2:e4:
         b2:34:b3:fe:20:27:5e:5b:42:9e:c0:2c:47:ee:ba:b5:6d:95:
         b8:12:29:6d:f3:a9:2a:40:49:04:05:22:4b:6f:8b:6c:53:9d:
         eb:a0:2b:a7:ac:fc:65:45:6c:4b:5e:63:a4:ab:0b:66:70:df:
         89:34:d0:86:01:97:77:90:a0:ea:7b:ab:95:49:4d:d8:52:e2:
         36:85:72:35:d1:59:29:15:63:6b:18:da:51:c4:88:e8:f7:05:
         cf:c6:da:98:47:48:00:b9:b2:4e:f0:dc:3f:6f:3a:88:d0:0a:
         0e:22:3f:32:75:2a:47:b1:84:04:e6:56:5a:5c:ae:e2:cc:98:
         f2:30:96:ae:0e:1d:7f:9a:9c:7e:97:b2:ae:c2:b9:75:1b:bb:
         0a:dd:09:8b:a6:29:7e:bd:dc:1e:6c:04:68:ea:61:68:fc:63:
         21:30:ff:a7:c8:57:96:13:bf:08:aa:11:c6:ef:a3:0e:61:4a:
         ba:42:72:e7:fc:39:fd:75:6a:ad:ee:5f:ba:5d:c0:2d:44:04:
         3e:5c:86:2e:d2:5f:95:39:8a:b2:42:a1:ef:ac:a8:bb:ed:24:
         d0:8e:37:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----