Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d3a242a9-0c14-3a0b-a163-978df3fa5ce5.roa
File:                     d3a242a9-0c14-3a0b-a163-978df3fa5ce5.roa (raw, json)
Hash identifier:          0tewnOu7tsXJEEF7iudF3ZyASLdRXQE4NkqQBzRykxI=
Subject key identifier:   1E:1A:94:C0:75:D8:68:35:40:4E:31:29:5D:D7:0C:AC:76:00:A9:63
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584048A8E4AC452F50E87CA085C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d3a242a9-0c14-3a0b-a163-978df3fa5ce5.roa
Signing time:             Sun 18 Dec 2022 12:00:00 +0000
ROA not before:           Sun 18 Dec 2022 12:00:00 +0000
ROA not after:            Mon 23 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        192.43.175.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:48:a8:e4:ac:45:2f:50:e8:7c:a0:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 18 12:00:00 2022 GMT
            Not After : Jan 23 05:00:00 2023 GMT
        Subject: CN=151fd726-2355-4671-a289-dfecad1dd22b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:58:c6:04:2d:df:59:19:6f:f9:d9:c1:c2:45:
                    55:d5:f0:eb:a9:4e:73:7b:bf:dc:78:ef:dd:7f:8e:
                    a3:01:28:cb:af:db:d3:9a:ab:c1:bf:05:4d:0f:1a:
                    6f:6f:27:19:59:d1:6d:27:d7:fa:e5:b5:88:d3:5c:
                    aa:1a:94:fa:e1:cb:c2:45:61:26:8a:4d:0f:27:e5:
                    a5:93:ec:5c:3c:06:bd:66:4c:60:16:99:91:b2:75:
                    15:aa:59:22:96:92:ba:e1:6a:09:35:a8:61:ba:9c:
                    ac:7f:0b:d3:d9:01:7c:0e:25:89:96:4c:24:04:19:
                    91:bf:96:fc:53:4e:da:76:33:e9:2a:dd:f4:b6:ff:
                    e8:57:69:e3:25:d2:8a:a1:60:b5:8a:ec:6d:f2:3d:
                    de:78:9e:f5:19:db:e8:12:e2:13:ec:3f:6d:40:60:
                    b9:b4:ba:45:16:8a:9e:31:1c:8f:e6:d5:dc:04:d7:
                    06:11:62:c1:b7:7f:8e:19:06:74:df:aa:0d:21:7d:
                    0f:88:a3:d1:04:d7:8e:c5:ba:68:10:47:25:85:7f:
                    87:7f:5e:da:bf:26:a3:48:a6:ae:97:50:0a:1f:a0:
                    07:8a:c1:c9:6b:83:38:79:50:bf:f7:4d:4c:9e:af:
                    82:62:ec:bc:74:00:f8:bd:37:d7:f3:b7:fb:81:e4:
                    d2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:1A:94:C0:75:D8:68:35:40:4E:31:29:5D:D7:0C:AC:76:00:A9:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d3a242a9-0c14-3a0b-a163-978df3fa5ce5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:d7:8f:07:46:61:7d:9f:34:4b:c6:4d:fc:7c:5f:33:27:b2:
         9d:5e:29:e3:97:95:62:1a:0e:73:42:b6:a9:26:66:7f:e3:d8:
         26:2a:74:17:10:3a:db:35:5c:a7:fe:3f:8f:d4:fb:b1:6b:50:
         cc:c1:69:b0:0a:aa:7f:a5:6c:d1:29:19:ce:0c:ef:29:78:74:
         9f:23:57:85:5d:29:9b:b3:3b:df:ef:62:f7:69:8e:1f:34:70:
         6d:27:27:6e:89:0b:dc:de:33:ba:d5:d6:44:6b:35:a1:c5:fc:
         0e:7b:7c:b1:ab:cf:a3:4a:54:60:3e:d9:5a:c7:8f:a0:4c:de:
         dd:f7:60:26:77:e5:48:2f:c2:84:ac:1c:e8:6d:7f:dc:5a:cc:
         3f:82:87:95:f1:85:8b:6d:2c:34:10:c0:2c:e9:4d:6c:a1:ce:
         8d:8f:3e:b3:0b:bb:2a:b0:3b:21:e1:f7:05:58:94:1b:e1:81:
         0f:00:3c:6d:2a:5d:6a:62:80:b8:07:e0:aa:91:de:ee:fc:6b:
         80:29:b9:09:6e:21:d5:24:96:db:dc:3a:a1:b8:c8:56:2b:a5:
         16:6a:ac:1d:ff:51:f1:7a:42:36:64:37:50:54:d2:87:47:f0:
         a7:e7:40:cf:f3:0d:2d:c7:ab:f6:20:7b:a3:b2:f2:dd:0c:49:
         3b:3d:7a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----