Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cd07e1cf-9cd5-319e-9870-b2ee225e1246.roa
File:                     cd07e1cf-9cd5-319e-9870-b2ee225e1246.roa (raw, json)
Hash identifier:          UXyPXRnlTAIHay9zv78XD/k/iKlHl/bIuwVyO0Dc67Q=
Subject key identifier:   54:F4:FD:70:81:BA:B9:F2:E4:A8:08:E8:E8:57:5B:35:68:27:2A:2C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840A1F771A498FBFE45FC1D6780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cd07e1cf-9cd5-319e-9870-b2ee225e1246.roa
Signing time:             Thu 19 Jan 2023 12:00:00 +0000
ROA not before:           Thu 19 Jan 2023 12:00:00 +0000
ROA not after:            Fri 24 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        182.28.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:a1:f7:71:a4:98:fb:fe:45:fc:1d:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 19 12:00:00 2023 GMT
            Not After : Feb 24 05:00:00 2023 GMT
        Subject: CN=1eee3e50-e6d6-4af1-ad2a-3ce696304d9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b9:58:00:19:d5:a4:f3:fe:31:57:6d:1c:3b:
                    1c:79:b9:28:62:a5:6e:c3:5e:76:3e:5e:92:e9:3d:
                    0d:46:2e:42:b1:b6:e1:8a:75:86:b4:5b:cb:73:33:
                    ca:0d:a2:7c:ad:a3:be:82:1a:84:77:ae:50:96:b3:
                    c4:59:3d:23:bf:4f:0e:ad:5b:d5:ee:f1:95:8d:bc:
                    51:32:99:8f:fb:a7:07:8f:12:25:a0:40:1a:3e:19:
                    52:c9:9e:3d:2d:9a:d3:06:82:11:cd:63:eb:72:7a:
                    46:2a:86:49:0d:66:02:a6:bc:a9:d2:39:ab:86:8e:
                    7a:5b:62:a8:fa:d0:a3:05:a3:d0:b9:e8:31:82:cc:
                    b3:36:00:4f:b3:8e:1f:e5:fe:f6:56:9f:2c:8f:45:
                    fd:aa:8f:9f:5e:f3:9e:96:ca:57:fd:67:82:89:c6:
                    01:7a:3a:4e:76:cb:87:20:1a:c1:dd:7e:a0:ac:3f:
                    a4:20:72:c6:1b:90:47:8e:8c:5e:75:69:cd:03:c5:
                    9d:37:a4:91:09:04:46:d6:19:29:0c:7e:04:0b:32:
                    46:80:9e:ca:8a:f4:5f:f6:08:9c:2d:e0:1d:72:fa:
                    0d:33:40:9c:b5:99:1b:02:e3:b1:54:bc:0d:6d:20:
                    5d:7a:fd:cf:79:ff:fc:6f:85:9a:f1:5d:b7:62:37:
                    42:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F4:FD:70:81:BA:B9:F2:E4:A8:08:E8:E8:57:5B:35:68:27:2A:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cd07e1cf-9cd5-319e-9870-b2ee225e1246.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.28.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:52:97:b4:3c:4b:4e:48:6e:00:2e:8b:01:dc:cc:59:60:0f:
         7b:b8:44:28:9e:32:18:21:e2:56:f5:de:db:be:b3:06:15:93:
         2a:b4:14:e3:17:cd:97:74:0b:69:df:11:d5:6e:e7:18:87:67:
         0a:1d:19:36:d8:80:4c:b4:8c:c1:8f:ea:ca:f6:22:29:da:0f:
         9a:6b:15:96:bc:a4:b3:25:ac:5c:00:3a:96:e0:75:4d:4c:4e:
         21:a9:cd:ed:b7:6e:a1:5b:f6:61:c3:3b:5d:53:0e:17:9b:e0:
         99:0e:65:b2:c5:54:3c:21:29:21:70:ab:02:22:1d:9a:7f:6a:
         62:aa:d1:83:f6:1b:d6:0f:76:0c:d7:95:9e:19:b2:22:89:66:
         32:18:38:92:5d:f8:e9:93:66:a9:80:90:d9:d0:47:9b:a9:ce:
         69:0b:af:cc:d9:51:43:40:72:f2:66:51:4b:d8:f6:a8:17:69:
         b1:a7:a2:a3:08:51:d2:63:93:ef:72:68:d1:7b:96:ce:35:db:
         2a:3c:2b:f7:c4:96:0f:a1:83:7b:83:71:de:2a:1f:3b:5e:eb:
         17:e1:ba:43:9b:14:3b:39:59:29:fe:81:57:fe:dc:de:f2:5e:
         91:6b:c1:71:03:45:2b:ad:16:b9:5f:3b:0b:be:2c:3d:bc:a5:
         2b:a2:10:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----