Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c794b863-47fc-35be-a05c-05eef2d4ca7c.roa
File:                     c794b863-47fc-35be-a05c-05eef2d4ca7c.roa (raw, json)
Hash identifier:          KhYcJFMIM8gIyz6Vg+3c9w2Ri4x4FknumkZS4h0HjJY=
Subject key identifier:   0F:E4:0A:CA:7E:EE:B7:DE:72:51:5E:A2:43:4F:37:2A:DC:51:B7:0B
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840D4D3F4F801C9FA63FAFE4C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c794b863-47fc-35be-a05c-05eef2d4ca7c.roa
Signing time:             Mon 06 Feb 2023 12:00:00 +0000
ROA not before:           Mon 06 Feb 2023 12:00:00 +0000
ROA not after:            Tue 14 Mar 2023 04:00:00 +0000
asID:                     8987
IP address blocks:        20.142.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:d4:d3:f4:f8:01:c9:fa:63:fa:fe:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  6 12:00:00 2023 GMT
            Not After : Mar 14 04:00:00 2023 GMT
        Subject: CN=dd7ac08e-01fc-4de6-b8fc-bc6f6f4b7af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:11:cf:32:c8:9c:ff:4b:45:f7:8c:c6:fa:35:
                    b1:df:be:4d:92:36:c2:b6:61:cb:31:cb:1e:ea:a2:
                    38:63:05:0e:63:4f:a4:0b:14:b2:55:79:83:7e:0b:
                    64:5f:52:e1:45:84:cf:f5:bb:02:b3:b9:79:e7:fd:
                    57:5a:c3:27:0d:99:c0:aa:b7:bf:cd:70:ec:b2:98:
                    62:e2:06:b4:b8:0c:83:8e:37:70:f0:43:c8:3f:1b:
                    30:df:5b:2b:39:c7:22:9a:d5:5f:68:5e:1b:5c:45:
                    31:25:75:68:89:eb:8d:9b:e1:a3:f4:fd:7b:6e:07:
                    57:e3:24:9c:3a:e6:37:19:54:de:c8:97:be:1c:21:
                    d7:eb:2b:2a:5e:c4:3f:6d:fc:95:95:89:df:8c:55:
                    73:92:5b:01:24:a6:6f:1f:e6:be:98:31:1c:aa:13:
                    98:8c:31:93:c9:9c:7c:84:f8:04:6c:c1:fd:1b:06:
                    bc:fb:85:4e:dc:bb:5c:29:b0:5c:c1:1f:a5:e9:d3:
                    be:92:06:fe:cf:a7:14:41:9d:00:0a:97:15:a2:fe:
                    7f:3f:7b:89:32:23:1a:05:b8:f1:35:28:67:5f:20:
                    16:01:95:e8:35:37:d7:6e:6e:d3:e7:e3:72:56:18:
                    71:e1:37:f7:f9:db:c2:56:06:03:aa:f5:d1:54:b3:
                    1b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E4:0A:CA:7E:EE:B7:DE:72:51:5E:A2:43:4F:37:2A:DC:51:B7:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c794b863-47fc-35be-a05c-05eef2d4ca7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.142.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:a4:12:93:0d:b0:17:64:7a:27:7b:3c:c3:ac:f3:67:aa:e1:
         49:a9:34:f6:d7:cf:81:31:35:62:67:f1:e4:ba:3a:58:bb:88:
         34:9d:83:9a:d9:9e:67:5c:09:67:57:d4:de:9c:0f:d0:33:09:
         24:02:23:24:e9:4f:b6:82:d9:d1:b4:3a:51:55:38:b1:d0:d8:
         18:b3:c2:c1:8c:b7:dc:06:bd:f6:49:47:de:d5:5b:fc:b7:74:
         cd:bf:af:82:74:dd:be:82:dc:c7:ee:78:26:8e:ce:62:7a:d3:
         a0:e9:e4:b5:e6:74:85:75:b7:9f:36:bc:a4:7b:19:d4:91:a1:
         d1:fa:48:f5:1b:8c:f2:7c:f7:a7:a2:2f:96:87:75:b7:a6:ce:
         1d:82:8f:91:12:d0:d0:dc:2d:0a:4a:c0:ac:3c:b7:a3:41:cf:
         1e:ea:58:f8:b5:4f:bd:89:57:31:b5:ff:5a:9c:d0:03:74:be:
         65:fd:ef:d2:e4:e9:a5:1c:5f:6b:25:c0:f4:c1:8a:42:cf:2d:
         6b:c8:fe:47:7e:51:f3:7c:c0:33:51:d5:bb:49:8e:71:39:4c:
         a9:ed:57:53:34:63:28:b6:fe:f7:e2:8d:30:ba:09:1e:d2:5e:
         05:fa:88:71:6a:19:bd:e8:c2:c0:06:c9:00:0d:7d:4a:f7:28:
         39:37:47:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----