Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d230a5f5-a60c-3233-8990-5c796256d587.roa
File:                     d230a5f5-a60c-3233-8990-5c796256d587.roa (raw, json)
Hash identifier:          xeanGndUZ9vCmBNSw9GZwwAzN/CJSKwBDknjZe6iqGk=
Subject key identifier:   B5:C1:FB:D5:AD:32:BE:D6:92:69:D5:1F:D5:6E:7A:2F:20:21:EB:78
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840BC14C3ADE660CCA471C8B300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d230a5f5-a60c-3233-8990-5c796256d587.roa
Signing time:             Sat 28 Jan 2023 12:00:00 +0000
ROA not before:           Sat 28 Jan 2023 12:00:00 +0000
ROA not after:            Sun 05 Mar 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        100.20.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:bc:14:c3:ad:e6:60:cc:a4:71:c8:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 28 12:00:00 2023 GMT
            Not After : Mar  5 05:00:00 2023 GMT
        Subject: CN=a38439ed-1c65-4f8b-952f-bdb7c285c3b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b1:45:d6:3a:72:31:3a:49:83:61:76:98:f1:
                    6e:0c:f6:bf:1c:44:e8:a7:c6:79:1b:a4:f8:2a:5d:
                    83:fb:6d:97:3c:b9:57:80:cc:98:2a:ba:ef:55:e8:
                    ea:a4:1c:3f:3e:6d:bb:7a:c6:e7:a6:fc:48:7d:70:
                    6a:c7:4c:1e:17:ae:d6:7a:47:a8:40:0b:42:4a:49:
                    f1:cd:ac:ac:4b:93:e6:0c:13:b2:a8:1b:f3:40:0f:
                    1f:2b:0b:56:15:a6:11:fe:4e:29:70:0e:a5:3c:dd:
                    45:78:4f:b6:ca:85:4a:e1:17:f0:3c:e7:c3:0a:9d:
                    d7:50:9a:63:a7:bb:bd:55:a0:0d:22:f9:c2:80:9f:
                    af:9a:95:31:28:23:0d:61:37:cd:fc:21:94:11:e5:
                    13:bd:6c:5a:fd:b2:d5:ac:d6:bd:98:3e:f0:c5:7f:
                    cd:a5:ab:41:c1:14:e3:e9:55:a4:5e:3b:cc:34:65:
                    6e:f9:3a:28:54:c5:92:35:0e:14:39:bb:3f:70:1b:
                    d0:22:3b:60:5a:76:0b:cd:ad:27:77:1c:bf:59:d8:
                    f2:c3:55:a9:34:48:65:95:dd:2a:6a:30:16:e5:9f:
                    0d:f1:b0:13:8e:c8:67:a7:b5:5d:dd:9d:5a:c8:2b:
                    87:fe:cc:b6:80:5d:b6:57:66:a7:ee:f3:76:fb:a7:
                    78:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C1:FB:D5:AD:32:BE:D6:92:69:D5:1F:D5:6E:7A:2F:20:21:EB:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d230a5f5-a60c-3233-8990-5c796256d587.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.20.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:1b:51:bb:8c:8f:c6:3d:aa:f6:9f:4b:3d:c8:06:76:ed:f0:
         30:2d:8c:4f:81:b9:89:ff:51:6e:c8:a6:0d:68:46:e2:43:39:
         a9:5c:7e:3b:a5:79:92:23:f5:1a:c2:20:6c:00:54:2c:a9:32:
         86:de:a3:aa:c7:76:f3:f1:ae:e5:cc:52:cc:be:24:2f:42:2f:
         53:f9:c2:22:1d:3c:cc:8d:94:f9:66:d8:e5:4e:7b:cc:34:9d:
         76:76:f9:07:37:28:f4:7d:b2:d5:e4:04:fb:dc:e2:27:7f:71:
         12:4c:95:97:92:e9:55:5b:6e:7f:fa:49:c6:b5:9e:88:70:f3:
         4b:ec:d7:d2:0e:ac:df:58:9f:71:85:4a:82:55:3a:a2:db:49:
         8b:ca:df:ec:2a:72:c1:52:1d:5f:f6:d9:6b:82:7c:e1:a6:5e:
         20:e2:91:f1:94:e5:67:e2:59:7d:36:ef:b2:76:3c:82:be:a0:
         13:7d:72:31:68:a4:0c:18:d6:3d:d6:77:44:5b:15:01:4d:b9:
         f9:1b:11:84:19:63:ca:d5:de:5c:cf:a0:80:a2:12:6c:c9:a4:
         b3:97:d6:1e:3c:10:fe:68:0b:eb:86:9b:ed:fb:30:85:66:03:
         e2:0e:f0:75:b9:be:41:82:2d:62:94:60:bd:90:b0:b4:59:cd:
         82:45:94:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----