Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e675cb2b-c9af-3890-9606-57630c016d2b.roa
File:                     e675cb2b-c9af-3890-9606-57630c016d2b.roa (raw, json)
Hash identifier:          V0Q1CJHKO54vxGJGGIMuM++jTVNjJj1/COvAI0ixi3w=
Subject key identifier:   F4:54:BE:51:5B:78:9D:75:A3:04:F6:26:29:AB:79:57:70:E4:5B:C9
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840511F2E8B2B92C7D3CA7C4D00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e675cb2b-c9af-3890-9606-57630c016d2b.roa
Signing time:             Wed 21 Dec 2022 22:15:08 +0000
ROA not before:           Wed 21 Dec 2022 22:15:08 +0000
ROA not after:            Thu 26 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        56.123.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:51:1f:2e:8b:2b:92:c7:d3:ca:7c:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 21 22:15:08 2022 GMT
            Not After : Jan 26 05:00:00 2023 GMT
        Subject: CN=90a320cc-5913-4274-aa64-3e9ed2f6378d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:52:a1:6a:61:9c:bd:fd:31:e3:d0:1d:b0:e1:
                    7c:ae:56:3f:51:62:69:f2:a5:d4:bd:4f:b1:60:d4:
                    a3:9d:a0:5f:40:b0:ae:2a:11:b5:e8:51:cd:c9:4d:
                    22:22:96:5e:56:6c:41:74:b6:30:b6:16:e2:b0:d1:
                    5c:75:43:85:aa:04:91:0e:73:c1:81:09:49:2d:9b:
                    6e:c9:14:33:a5:e9:da:ee:d6:b7:94:03:df:4b:00:
                    69:b3:d4:ba:84:40:5f:7c:12:cb:4a:8f:24:59:4e:
                    09:cd:ea:eb:cb:f9:0e:8e:4b:b2:75:3f:9f:db:40:
                    de:ce:7a:54:d9:fc:a1:2c:bc:c0:df:28:6b:9f:a9:
                    c5:39:25:fe:fa:12:5b:8f:01:f1:9d:d0:80:06:eb:
                    e1:ec:38:89:49:9c:c7:a9:0c:44:91:b0:78:ed:ed:
                    80:5a:7d:38:59:e9:3b:9b:a3:3f:95:ce:07:1c:f5:
                    f2:12:90:12:2b:b1:ae:59:04:00:6c:0c:98:f9:f5:
                    5f:31:0f:cd:ce:1c:99:b9:54:9c:2d:4f:42:6f:c2:
                    5b:e1:04:4f:de:49:c4:34:f7:e5:01:a9:87:78:ed:
                    67:9f:f0:d9:26:b0:e2:3c:28:2a:9c:ae:54:07:b8:
                    4a:7c:6a:b7:e1:18:a2:43:83:36:d2:69:9d:4d:00:
                    60:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:54:BE:51:5B:78:9D:75:A3:04:F6:26:29:AB:79:57:70:E4:5B:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e675cb2b-c9af-3890-9606-57630c016d2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.123.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:96:09:2f:30:07:c5:f2:94:73:83:d0:c6:f3:22:06:9b:c4:
         ee:ca:a4:fb:8c:7e:d2:48:7c:1e:37:79:d8:e9:ba:5c:36:48:
         a0:c3:fc:f1:dc:10:62:40:1b:69:fa:35:1d:97:86:e4:5a:7f:
         d7:91:ca:14:a3:ca:f4:05:6b:03:bf:d9:d7:b0:c1:16:50:07:
         bf:f2:c5:e3:6f:d1:fa:ee:41:d2:65:bc:7a:12:16:2d:25:49:
         41:ca:15:81:9a:89:4f:f5:66:04:86:03:bc:b4:4c:de:3d:43:
         3a:dd:e2:dc:fd:09:15:ff:a5:91:a2:90:06:68:da:85:1d:73:
         9f:af:ee:78:94:7e:12:a3:49:2c:6b:0a:f0:8c:e5:81:6f:ef:
         f6:95:9f:42:fa:ef:ff:37:c9:5a:f5:c6:ed:c7:07:b5:a9:9e:
         d3:1f:46:2e:16:b1:a1:87:46:4e:fe:50:aa:9c:32:4e:a3:38:
         47:24:f6:64:aa:54:d5:25:19:d6:bf:98:8d:06:67:10:cb:68:
         56:54:fb:95:d2:ea:ed:21:6f:ad:68:78:23:c9:4f:6c:a6:1f:
         b8:99:32:c2:01:55:a5:56:d2:c6:e3:d4:1e:10:8c:8c:3d:e2:
         5d:bf:9e:14:cd:53:74:d8:b1:82:37:02:f3:65:fa:96:5a:7c:
         16:41:ca:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----