Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d3b99145-6520-3797-bba1-9dc480b5a4d3.roa
File:                     d3b99145-6520-3797-bba1-9dc480b5a4d3.roa (raw, json)
Hash identifier:          Ze65zkc7lDH3DSKIm80btocSHqIuIIShv49ei6KTEtQ=
Subject key identifier:   EF:C0:53:1D:A6:36:8C:70:41:9C:86:02:AD:84:0C:76:70:1C:AE:95
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840900D9ADE27B7F7625CF6EB00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d3b99145-6520-3797-bba1-9dc480b5a4d3.roa
Signing time:             Thu 12 Jan 2023 12:00:00 +0000
ROA not before:           Thu 12 Jan 2023 12:00:00 +0000
ROA not after:            Fri 17 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        194.148.64.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:90:0d:9a:de:27:b7:f7:62:5c:f6:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 12 12:00:00 2023 GMT
            Not After : Feb 17 05:00:00 2023 GMT
        Subject: CN=ec5804cd-ec0b-4090-add9-352cd50693e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:35:08:ac:5b:16:58:60:ab:b1:d3:fd:ac:ee:
                    51:43:b0:78:ea:0f:c9:d0:45:1b:1e:0e:93:55:1f:
                    4b:a0:e5:bb:d9:ad:6c:74:a7:87:12:58:8b:74:05:
                    c0:fb:20:65:8e:ad:14:3e:ef:4e:45:47:40:31:38:
                    a0:7c:93:ab:ca:86:7d:5a:e5:a8:49:8e:c4:d0:20:
                    66:ca:eb:2d:73:6e:f3:c3:67:96:9e:57:52:11:22:
                    74:a7:da:bb:96:6b:0b:e6:68:97:8b:91:42:d9:a4:
                    8b:96:fa:4b:47:9b:68:eb:27:91:3f:8e:db:84:ea:
                    d4:68:49:62:9b:47:a8:69:14:f1:f9:8e:98:2f:f8:
                    3c:4e:ea:f4:11:80:e1:b5:18:89:44:6a:3e:70:25:
                    84:db:c4:d5:14:36:b5:5a:44:16:e8:e2:5a:6f:ea:
                    08:e4:6e:26:2a:6c:76:92:34:3b:be:96:a7:01:f1:
                    b2:65:83:c4:26:d0:fe:25:f7:22:f8:d0:25:dd:a6:
                    3c:a6:f4:4d:f9:c7:07:9a:35:70:9c:7f:9a:cb:c9:
                    af:1b:a8:b1:db:59:ea:80:b3:e4:94:b2:24:63:fe:
                    47:e3:d1:41:44:a3:29:f9:79:be:fa:6c:29:b3:c9:
                    ab:b4:80:1c:f6:aa:a3:6d:d2:eb:b2:53:4f:ad:03:
                    81:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C0:53:1D:A6:36:8C:70:41:9C:86:02:AD:84:0C:76:70:1C:AE:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d3b99145-6520-3797-bba1-9dc480b5a4d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.148.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:d0:7f:11:51:42:d5:b2:ba:fb:da:7c:e7:ed:03:9e:79:b9:
         3e:c6:9e:73:70:c5:b3:3f:62:59:af:e6:25:7d:b6:3d:fa:24:
         1e:42:d9:b4:07:9e:f7:40:80:a4:58:fc:36:6a:35:14:fc:08:
         83:79:e0:96:72:39:39:1f:25:95:66:32:fa:46:87:71:9b:0f:
         2f:6b:bb:b2:4c:8e:bf:f5:4f:d5:79:90:00:46:c7:08:7f:30:
         83:c1:db:29:98:2d:e1:b9:84:1b:c1:cd:ac:9b:0d:a0:42:1a:
         3d:cb:e5:89:b3:00:1e:f6:86:bb:d9:b1:6f:ca:19:28:74:c4:
         da:01:9d:20:48:bc:f5:53:81:7f:9c:38:fb:35:38:d5:74:f8:
         b1:bb:a6:5a:f9:d1:b6:cf:ce:d1:10:58:ac:fc:9f:ee:2a:7f:
         bd:5f:14:d6:0f:f6:44:42:30:e4:9c:4e:df:d7:ea:e2:08:3f:
         a1:88:3d:a8:aa:f4:d8:d5:a1:df:5b:8b:7d:1e:82:b0:03:22:
         07:6b:e6:cb:d6:1c:c7:c3:b6:28:5b:7c:12:7f:94:26:7d:89:
         7c:d3:77:e9:cf:d5:47:a9:bb:62:0a:51:75:87:dd:c9:d0:dc:
         4b:74:f9:85:43:61:10:61:2b:ac:85:97:c6:c4:d0:e7:c0:1b:
         74:e7:42:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----