Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d3f200da-38c0-36a7-ab36-9d0aff985b10.roa
File:                     d3f200da-38c0-36a7-ab36-9d0aff985b10.roa (raw, json)
Hash identifier:          AMGt/l1r37y+YMwN9Y9CxfGsLF83p3pYGDVc9OwzmUQ=
Subject key identifier:   79:05:90:CC:0F:8B:93:95:6C:46:A3:D4:E9:E5:C5:0B:0C:FB:2E:84
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584088C85A82143AA937761F0100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d3f200da-38c0-36a7-ab36-9d0aff985b10.roa
Signing time:             Tue 10 Jan 2023 12:00:00 +0000
ROA not before:           Tue 10 Jan 2023 12:00:00 +0000
ROA not after:            Wed 15 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        76.223.160.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:88:c8:5a:82:14:3a:a9:37:76:1f:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 10 12:00:00 2023 GMT
            Not After : Feb 15 05:00:00 2023 GMT
        Subject: CN=8ab6005a-cb79-48b6-b394-6694fdfd455b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d3:73:54:6c:0d:f9:3b:4d:65:53:f1:06:4e:
                    ab:29:a8:19:fe:43:aa:80:cd:c9:56:5a:95:de:1d:
                    91:9c:42:a7:8c:07:09:7b:59:e9:73:58:b5:35:8d:
                    69:55:da:7d:27:cf:e3:f5:d0:19:cf:bc:46:17:b4:
                    ee:82:57:0d:fd:4e:af:a0:bf:c4:4d:2f:9e:e8:f2:
                    56:d3:9f:07:cc:eb:c0:c8:cc:00:77:16:55:f8:56:
                    34:47:20:52:f5:f5:53:21:12:f6:4f:4a:94:6b:6e:
                    79:4f:83:8a:8f:c3:fa:b9:dd:83:7e:e3:06:95:4b:
                    86:cc:6a:6b:bc:cc:a1:e9:42:f9:48:03:af:16:7e:
                    d0:94:27:be:35:ed:50:de:76:5d:9d:5e:22:5a:84:
                    ea:f3:42:66:d7:17:07:e3:d6:b7:3d:ec:dd:03:9e:
                    2c:4f:e9:e7:c1:e1:88:47:a8:86:71:2e:75:d2:b9:
                    7c:f1:13:1c:d2:0d:05:27:e3:d9:81:e8:97:2b:71:
                    b3:16:9c:01:d8:d1:b5:1b:83:b3:24:58:a7:0e:10:
                    81:fc:15:e6:a4:08:cb:8c:21:a3:02:1e:e3:cb:19:
                    02:fd:ca:8e:e5:24:4a:0b:75:36:61:4c:51:1d:42:
                    f2:72:4e:91:00:66:0c:1b:fb:db:51:dc:57:83:2f:
                    c8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:05:90:CC:0F:8B:93:95:6C:46:A3:D4:E9:E5:C5:0B:0C:FB:2E:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d3f200da-38c0-36a7-ab36-9d0aff985b10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:1c:39:81:13:5d:5f:bb:07:ab:1f:5b:32:a8:ec:e5:74:96:
         9c:ad:bc:e4:4b:bd:12:6c:6a:e5:c1:80:7d:50:7d:45:97:4a:
         16:26:d9:ba:22:e6:d7:29:ae:70:35:4b:41:11:81:db:02:6f:
         cb:ed:cc:24:d5:10:f2:c7:aa:f5:dd:5a:8f:c2:cc:c4:89:45:
         63:e6:37:a3:e5:cc:eb:36:fd:a0:3b:b5:54:c8:82:39:11:67:
         19:55:57:74:73:29:ce:70:4f:96:3f:dd:74:7f:cc:5e:b9:5c:
         f6:0a:a5:1c:5f:3e:ec:d7:bf:00:65:06:c2:cc:79:5c:51:f4:
         0f:73:f6:9f:35:36:67:e3:f5:19:20:32:b9:a1:d6:1d:d0:ad:
         2f:95:55:92:fa:54:02:de:d3:fa:49:bf:87:9e:dc:14:d4:39:
         07:73:50:e2:81:3a:d7:0e:ba:86:e9:a1:33:71:a3:42:2c:5e:
         e7:03:91:32:4c:2c:53:8f:25:12:b7:c5:1a:05:a8:d6:44:29:
         8d:e7:49:49:f7:6a:60:b6:ff:b5:4c:61:ca:b3:18:88:f6:2c:
         b8:66:b7:01:e9:b8:ea:bf:53:de:5c:40:cc:5b:e0:26:a4:0a:
         9d:2e:0f:0b:1d:5c:d8:93:63:85:5c:c3:9a:d5:a2:33:1a:e7:
         2d:b9:04:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----