Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d84ee76d-8a15-3366-aaeb-b40d2a0179c6.roa
File:                     d84ee76d-8a15-3366-aaeb-b40d2a0179c6.roa (raw, json)
Hash identifier:          t1tixsxUcn3y/cUnf7znk1RCnMiVDVGm3FCs3YyKBkM=
Subject key identifier:   FD:CC:58:FF:F3:8C:26:83:A0:77:B4:18:ED:88:43:5D:D4:30:E2:5E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858409128670467CBCEB453AAC5A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d84ee76d-8a15-3366-aaeb-b40d2a0179c6.roa
Signing time:             Fri 13 Jan 2023 12:00:00 +0000
ROA not before:           Fri 13 Jan 2023 12:00:00 +0000
ROA not after:            Sat 18 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        23.20.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:91:28:67:04:67:cb:ce:b4:53:aa:c5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 13 12:00:00 2023 GMT
            Not After : Feb 18 05:00:00 2023 GMT
        Subject: CN=b1022909-93d6-48da-827f-a823690f33ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:30:87:41:63:93:bd:fc:ca:19:5b:4f:27:33:
                    9d:4e:cb:40:f3:e7:1e:64:27:1f:6a:05:26:99:10:
                    ce:c6:04:8c:8e:ce:37:e9:0e:c5:f5:bb:3e:b0:1f:
                    3f:49:8b:9b:39:c7:f2:9c:de:20:7a:72:b1:9b:f0:
                    e4:6e:e1:14:72:67:4e:23:65:a4:82:ff:b6:08:81:
                    ab:bf:e8:7a:94:f0:f5:7f:c9:36:c2:86:8e:0d:6a:
                    0b:62:f9:d6:df:1a:0d:dc:c9:fa:da:11:21:d1:4b:
                    86:de:c7:7e:1c:7e:ac:2a:74:52:b5:c9:1d:57:9f:
                    11:fc:27:c2:34:71:ab:3d:68:c4:85:00:81:67:61:
                    e8:f2:f0:38:8d:77:a5:16:1e:fa:79:71:8c:30:88:
                    5a:b9:83:9f:ff:26:eb:21:f6:b3:09:99:2d:d0:8f:
                    28:97:8b:67:44:64:2b:76:9a:2e:bd:df:79:5e:c9:
                    e9:07:f6:0a:f5:b2:b0:da:a0:77:38:0d:7b:c8:b0:
                    25:7d:11:0d:f1:a9:c2:0b:f6:ae:f3:25:de:4f:92:
                    e7:4d:17:2c:43:06:2e:8c:51:31:08:f1:93:8c:a7:
                    8e:c9:0f:d1:06:a7:1e:b5:6a:3a:93:d9:12:af:a6:
                    00:20:09:6e:14:31:27:5f:ab:eb:43:c6:3d:83:2b:
                    ac:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:CC:58:FF:F3:8C:26:83:A0:77:B4:18:ED:88:43:5D:D4:30:E2:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d84ee76d-8a15-3366-aaeb-b40d2a0179c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.20.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:3c:a0:90:8a:a3:bb:26:e8:4f:c7:ae:ed:2e:51:e1:e0:34:
         19:bd:65:e6:26:38:41:bb:4a:4f:2a:ea:9a:10:dc:ec:57:13:
         50:49:6e:db:79:7c:8f:c1:ce:ab:7d:c5:d5:f5:44:30:d7:c2:
         9a:af:ec:b4:63:5c:1f:19:80:df:25:7c:8f:1e:73:b9:33:2c:
         5a:93:69:f4:36:b2:09:c8:28:b0:5a:bc:ca:bf:ca:83:8e:c8:
         fe:34:00:79:9d:21:be:d5:68:fd:ff:99:e5:75:cd:13:17:ab:
         90:48:5e:5f:da:b3:48:0f:bd:6f:41:a1:2c:d1:1e:05:29:ad:
         8e:1a:88:5b:6d:f3:70:f9:a3:c1:d7:7c:a5:a6:2e:d0:e9:40:
         a8:43:a3:3c:d3:d6:cd:3a:72:44:46:93:c8:49:63:ac:e5:ac:
         d1:9b:5b:31:2b:cd:37:7b:00:45:31:14:ca:63:44:2e:79:b1:
         1a:36:fb:41:5f:d6:e2:fb:2c:e1:eb:25:90:73:4a:b2:7e:07:
         b1:23:a7:7c:bd:e2:72:4f:c7:d4:33:ad:8c:68:d9:c8:11:2c:
         ca:d9:79:8b:40:96:76:8f:3b:c9:4b:13:c3:d2:b5:aa:b1:2d:
         df:51:c9:51:8f:35:10:46:b5:9a:a8:3c:ab:62:aa:bc:ae:88:
         23:1b:b6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----