Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d0d99b8c-0553-3702-900b-c48bc22f3815.roa
File:                     d0d99b8c-0553-3702-900b-c48bc22f3815.roa (raw, json)
Hash identifier:          srMx8D+IZWctQwP0bqUZj7rpjCCU0q3oXvLxfzm5nbg=
Subject key identifier:   CE:CE:9F:85:DD:7B:8A:FE:A6:D2:A6:45:AE:6A:DC:63:8E:39:C8:DC
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584092AB9A406E4CC25B9D917C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d0d99b8c-0553-3702-900b-c48bc22f3815.roa
Signing time:             Fri 13 Jan 2023 12:00:00 +0000
ROA not before:           Fri 13 Jan 2023 12:00:00 +0000
ROA not after:            Sat 18 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        63.32.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:92:ab:9a:40:6e:4c:c2:5b:9d:91:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 13 12:00:00 2023 GMT
            Not After : Feb 18 05:00:00 2023 GMT
        Subject: CN=bfa7a30e-5d89-44d7-84d2-a4eae09cea8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:10:a8:40:15:9d:2a:d4:89:5e:da:48:41:6d:
                    f7:3e:5e:48:6c:d7:b2:4a:67:3f:bc:46:c7:e1:9e:
                    aa:1c:d8:95:8f:67:bf:9c:93:72:6f:94:b7:f4:49:
                    fc:cc:bd:20:bd:de:09:5a:00:3f:77:1b:d4:10:c9:
                    82:35:39:b5:c1:aa:bc:84:33:fa:35:97:2a:b3:43:
                    d6:74:4d:fd:f0:87:fc:14:ef:c4:47:c9:81:e7:e2:
                    1d:95:11:89:09:d0:d4:20:ef:1e:70:0e:8c:42:3f:
                    05:9a:5d:ff:90:c1:87:86:59:64:e0:22:e7:62:f8:
                    96:ce:d0:e9:38:ed:7f:cf:ff:fe:90:d3:8b:cd:b1:
                    62:ac:6d:8f:1a:fb:0e:14:da:b7:d7:23:f9:de:3a:
                    e3:51:ae:de:ac:30:14:a1:94:04:89:17:9c:55:6a:
                    39:1e:41:f4:ac:b6:b4:f0:a4:3f:92:71:4f:2f:c8:
                    00:93:c3:b1:bb:c6:0a:09:a1:42:a2:ac:d1:db:be:
                    1b:06:f3:81:bd:1b:ab:e4:6d:86:88:7a:63:b8:25:
                    f2:9a:a6:9e:ab:b6:af:5c:64:b5:ec:77:95:9c:5b:
                    a5:40:1a:05:d3:4f:9e:86:83:ef:97:33:d4:8a:6d:
                    78:5f:23:cd:e8:c9:5f:d4:08:ee:57:76:72:38:46:
                    03:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:CE:9F:85:DD:7B:8A:FE:A6:D2:A6:45:AE:6A:DC:63:8E:39:C8:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d0d99b8c-0553-3702-900b-c48bc22f3815.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.32.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:3b:86:2a:21:02:5c:1d:6e:dc:68:62:bc:b0:c8:aa:7c:ad:
         e8:4d:21:9f:5d:dd:ef:e1:6d:1a:a6:10:54:9a:2b:df:4d:80:
         9a:9e:a6:23:c5:e0:db:c2:e1:6d:f3:35:28:7a:0c:8b:cd:44:
         db:0b:fb:bd:f9:98:1a:21:9b:6d:a5:02:e2:4f:df:f4:c3:e1:
         18:59:16:3b:35:29:7f:a2:7e:1f:ce:69:4f:27:4b:af:ba:fc:
         53:3e:8d:d5:2f:5b:fb:39:0a:96:27:e0:9d:41:6d:3f:1f:1b:
         96:47:1a:88:07:d1:89:d3:33:5d:1d:13:d7:02:ab:41:69:38:
         5c:4d:c3:d6:56:79:25:5b:a5:b2:3f:6f:05:c3:81:a5:7b:03:
         0e:d2:bc:d1:ee:e3:0a:11:ab:44:50:b2:39:b1:04:8f:1f:dd:
         00:d7:93:4a:27:2f:1a:83:55:45:71:6a:7b:8a:42:5e:ff:7d:
         7a:55:6f:9d:ed:6f:21:41:0d:78:cb:4f:90:7b:8b:d9:14:c1:
         dd:12:c8:37:86:04:28:ae:5c:b0:d1:d9:0e:3a:66:bb:6e:3c:
         7c:b6:3b:03:11:39:97:4b:0d:77:7f:02:03:ec:8c:af:2c:e7:
         25:74:47:e5:ba:86:fc:0d:72:fe:33:3e:d3:1e:50:fa:de:0a:
         50:aa:61:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----