Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf526054-8794-352f-950a-4d5449e88c0c.roa
File:                     cf526054-8794-352f-950a-4d5449e88c0c.roa (raw, json)
Hash identifier:          ewmFfvzTHQS2yd9LWZFUCpa//ODDvxf9sSvEHoJ94TQ=
Subject key identifier:   C9:0B:73:40:9C:05:CC:4E:64:6A:35:97:38:E1:42:11:AA:88:DC:CF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840B5F1E51978C15CA44D5F9300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf526054-8794-352f-950a-4d5449e88c0c.roa
Signing time:             Thu 26 Jan 2023 15:12:07 +0000
ROA not before:           Thu 26 Jan 2023 15:12:07 +0000
ROA not after:            Fri 03 Mar 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        157.175.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b5:f1:e5:19:78:c1:5c:a4:4d:5f:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 26 15:12:07 2023 GMT
            Not After : Mar  3 05:00:00 2023 GMT
        Subject: CN=14f1c950-c670-4bf4-be58-972bbf4502a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:74:71:5c:e8:5c:e1:cd:bb:fc:5f:47:73:b3:
                    0c:5a:03:f3:48:37:09:e5:1d:f8:81:0d:10:06:9a:
                    0c:f6:47:90:ad:29:d0:7d:c4:27:da:44:dc:55:66:
                    25:0f:9e:e9:a6:4f:53:70:cd:98:de:5b:2c:4b:74:
                    b7:a4:4c:f5:c2:1e:4e:6d:ba:77:0f:3b:45:54:86:
                    46:14:8b:cd:c2:05:5e:a4:80:66:44:80:88:94:33:
                    79:23:03:9f:31:e6:4d:e5:dd:d0:ef:34:d5:4f:b7:
                    be:d0:89:9f:90:74:2e:69:8a:9b:8c:66:7c:42:d5:
                    b3:ca:6d:89:1a:93:6f:3c:7f:30:a2:ba:8a:97:a2:
                    1c:2f:a4:b6:ad:af:4c:d8:24:6e:cd:de:f8:27:c1:
                    5a:22:84:a8:e0:2b:dd:23:2f:7b:a5:ae:63:d0:5c:
                    da:4b:e7:d6:6e:08:05:36:c2:95:17:f9:d6:dd:ef:
                    db:c7:b2:1d:d3:fa:e5:0e:6f:37:88:aa:db:30:bd:
                    38:93:63:6c:0a:98:f4:03:12:84:74:00:39:24:39:
                    f9:ee:e5:7e:7d:6b:3b:d1:7b:2b:90:d5:3a:41:51:
                    d2:7f:1b:d5:ab:48:3b:9a:f2:22:17:84:8e:f3:47:
                    e1:b9:ec:dd:cd:1d:fd:2f:16:61:7a:5d:e2:d5:d1:
                    87:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0B:73:40:9C:05:CC:4E:64:6A:35:97:38:E1:42:11:AA:88:DC:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf526054-8794-352f-950a-4d5449e88c0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.175.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:88:32:4d:af:56:e9:0c:16:2c:c6:79:c4:48:9b:15:e7:8c:
         70:f5:46:9e:0e:f9:a8:c7:25:44:9d:8c:2d:6d:f7:69:4f:8e:
         a5:3d:fb:90:4f:59:95:5e:a5:9c:b0:89:8d:f8:7a:4f:7f:1b:
         f9:0c:84:28:61:05:8b:5e:d8:b8:cc:ab:b4:f8:90:c9:34:55:
         a0:0e:17:0f:af:ee:94:78:14:83:49:d0:f2:c5:d6:1c:4e:54:
         0f:21:60:43:27:82:3a:fd:2b:e8:67:bf:1f:0f:3f:e1:d8:6c:
         30:fe:f0:3e:17:c0:a7:4d:cc:9f:75:27:47:f8:eb:1e:28:67:
         a2:88:83:f6:30:6d:f6:64:05:42:d6:ca:31:af:7d:43:66:84:
         dc:58:96:d1:98:54:10:a7:48:c7:75:da:08:3f:47:71:71:0d:
         c1:3e:f4:db:89:8a:a2:47:3f:ff:68:f2:46:9a:03:f3:e6:97:
         88:84:99:b3:a9:10:46:e8:4b:48:87:b3:e8:c4:20:a7:a4:7d:
         d2:b0:80:9d:a8:7b:f7:eb:96:0c:8a:76:90:3f:e9:89:c3:32:
         23:b8:26:0f:f0:dc:a4:bd:63:9f:89:94:8b:cd:ae:a1:84:ab:
         64:31:9a:b9:ee:b0:f7:30:1e:77:44:0c:73:79:21:73:d3:1d:
         98:7f:2a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----