Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d0a57c17-c316-34fc-8a1c-ca890da19beb.roa
File:                     d0a57c17-c316-34fc-8a1c-ca890da19beb.roa (raw, json)
Hash identifier:          TLNEgSnIEk14D7jvIbpQLJtN7o6UrGxIViggsipQhqI=
Subject key identifier:   9B:21:8F:35:0C:D0:B4:02:98:2D:B6:24:78:EB:DA:89:C6:70:F0:C6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840D1B74833B5D9E3548AFF4600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d0a57c17-c316-34fc-8a1c-ca890da19beb.roa
Signing time:             Sun 05 Feb 2023 12:00:00 +0000
ROA not before:           Sun 05 Feb 2023 12:00:00 +0000
ROA not after:            Mon 13 Mar 2023 04:00:00 +0000
asID:                     14618
IP address blocks:        168.157.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:d1:b7:48:33:b5:d9:e3:54:8a:ff:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  5 12:00:00 2023 GMT
            Not After : Mar 13 04:00:00 2023 GMT
        Subject: CN=ffadda8b-99a2-46ba-a587-392dc9f40747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:67:52:36:16:36:a8:c5:25:74:e3:01:be:f1:
                    35:79:6e:f1:f4:65:55:cf:54:5a:08:39:58:8f:fa:
                    8a:e8:21:a3:06:0c:81:6a:b0:cc:51:49:0d:21:d2:
                    83:6e:b9:89:8b:34:d4:2d:07:71:c9:db:19:52:49:
                    54:bc:c7:e8:cf:f9:26:48:8c:bc:17:0f:03:d1:d2:
                    82:9c:de:4e:13:c3:8d:1a:b1:b5:3e:15:3f:7d:cf:
                    a3:c3:e9:bd:dd:46:cd:6b:53:55:ff:e3:61:ba:2b:
                    ea:09:28:08:66:d6:a7:e9:42:ee:0b:8f:26:e3:e1:
                    d4:9c:8d:18:fc:0b:28:87:9b:95:5b:ce:91:ce:e4:
                    68:a0:ed:b4:80:37:21:aa:77:dd:97:6d:20:a1:b0:
                    28:84:bf:d8:d0:f6:0c:18:e7:c5:0c:54:b4:2f:23:
                    08:3c:f3:f3:f9:c9:42:4e:23:04:72:d3:98:1c:1f:
                    00:23:09:6e:19:49:6f:8d:63:06:6a:6e:b5:60:5c:
                    f4:a7:72:3c:09:d4:57:3f:43:d4:b8:49:45:90:46:
                    80:91:b2:e3:ad:86:50:04:9d:5e:d4:14:80:77:53:
                    65:f4:d0:d1:2c:a2:f4:ac:65:cd:f4:fa:a1:c9:c2:
                    92:83:48:4d:71:19:01:51:7b:9e:27:d6:2d:6b:91:
                    33:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:21:8F:35:0C:D0:B4:02:98:2D:B6:24:78:EB:DA:89:C6:70:F0:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d0a57c17-c316-34fc-8a1c-ca890da19beb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.157.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:3e:46:2a:d7:d2:b8:6d:4a:22:b2:07:05:48:2d:4e:c1:35:
         5a:ad:72:14:d8:c2:5c:28:91:de:cf:2c:13:d2:dd:33:82:57:
         78:99:6e:eb:67:06:43:ca:31:5b:fb:da:f6:25:e9:dd:f2:2b:
         85:44:7c:c3:93:d9:56:de:83:74:0b:87:8a:08:08:60:88:8f:
         cd:8f:1d:fd:85:25:f6:5d:8f:ea:ba:24:a8:ed:c8:1c:e1:97:
         83:2b:a9:23:1d:ec:23:bf:f3:cc:0f:e6:de:15:19:0a:6d:03:
         71:5d:f0:9a:94:ef:2d:9a:50:96:44:9e:ba:f1:c6:c2:81:23:
         44:77:15:78:2d:3f:50:2d:96:5c:9f:1e:90:74:4d:3e:d3:02:
         1b:cc:e1:bf:3a:4d:18:5f:7b:d9:34:87:6d:e9:12:49:39:f3:
         f7:bd:e9:92:ca:c2:93:f8:5b:3b:43:ee:1c:d9:1b:7c:36:6b:
         c2:29:51:6f:18:f6:b3:f0:db:79:98:68:2c:dc:44:3b:ff:c8:
         30:2b:e4:8d:49:b4:83:82:e6:ff:5d:72:d5:c5:7c:a0:1b:2c:
         85:16:44:dc:ff:01:a0:c8:2f:da:2f:c2:f2:6f:61:52:7c:f8:
         3e:81:3a:82:62:72:8c:96:40:63:54:01:5d:6f:1b:13:47:dd:
         af:dd:23:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----