Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e80d9077-9c1c-308a-a515-ed5db9829169.roa
File:                     e80d9077-9c1c-308a-a515-ed5db9829169.roa (raw, json)
Hash identifier:          YVMXOCqxEvmFouSyIt5QNhVAXrY8B9HPA50X72LKNwo=
Subject key identifier:   47:83:AD:F8:3D:A8:98:C9:35:34:F4:F9:48:54:CA:57:F7:C0:C1:D3
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858409F16313E25A51BBD8184F1C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e80d9077-9c1c-308a-a515-ed5db9829169.roa
Signing time:             Wed 18 Jan 2023 12:00:00 +0000
ROA not before:           Wed 18 Jan 2023 12:00:00 +0000
ROA not after:            Thu 23 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        56.122.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:9f:16:31:3e:25:a5:1b:bd:81:84:f1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 18 12:00:00 2023 GMT
            Not After : Feb 23 05:00:00 2023 GMT
        Subject: CN=a6927b48-5927-432c-bd51-3da8b798b2bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:63:df:13:9b:5c:74:53:be:ad:a0:94:1b:a9:
                    3c:4d:7e:2a:c0:4b:f8:c0:6a:72:c3:9a:a5:c3:2d:
                    74:dd:d3:90:af:b9:29:f7:3d:76:a0:0a:16:9b:5f:
                    da:34:dc:27:0e:6f:cf:42:96:52:e3:38:79:01:86:
                    b6:d4:c7:3c:4b:6c:a6:e3:3d:fa:70:43:12:77:06:
                    cc:ff:57:5d:00:35:1a:77:c4:ca:67:38:ac:89:73:
                    24:60:d6:9c:85:53:2a:f9:51:9e:14:a4:65:14:20:
                    dd:74:dd:c6:b6:07:71:58:7c:92:40:a9:cf:a4:69:
                    bf:1c:b3:56:f2:47:fc:25:a1:67:a3:21:2e:51:74:
                    25:80:91:eb:3f:44:c3:b3:c8:18:82:09:bf:7c:75:
                    72:4a:38:d3:80:42:20:12:7a:24:03:4f:c8:fe:0a:
                    e9:6f:d6:70:e2:de:50:0a:e0:2b:2c:fa:b7:b3:16:
                    7c:e0:8f:f6:1e:3d:f3:33:3b:9b:87:ff:a4:8d:4c:
                    5f:ff:2d:99:a7:2a:6b:fe:8f:e7:6e:d1:2c:5a:24:
                    32:90:b0:a0:b1:a7:1c:48:3a:96:c7:d1:4d:92:a1:
                    d8:59:75:92:e3:bf:d1:33:2f:3e:ea:2e:e9:fa:3c:
                    5f:2e:35:23:16:ed:ed:c8:51:dd:ec:44:aa:bb:60:
                    82:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:83:AD:F8:3D:A8:98:C9:35:34:F4:F9:48:54:CA:57:F7:C0:C1:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e80d9077-9c1c-308a-a515-ed5db9829169.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.122.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:f7:f1:62:2f:cc:a0:10:57:30:8a:be:d8:c2:01:f1:0d:38:
         03:2e:5a:5d:4c:88:38:d9:02:cf:6e:21:46:5e:ec:41:c1:89:
         47:90:86:17:51:51:6a:8c:b0:13:5f:bb:1a:85:d0:b7:6b:c2:
         44:0a:83:ec:f5:73:a7:b1:17:f6:37:49:2e:75:89:06:ae:a3:
         a0:c2:51:37:20:5f:d3:de:e5:e5:46:d8:08:4e:ca:28:9a:5a:
         11:75:6a:95:0c:83:08:97:0e:1b:ec:61:24:4c:6b:d6:60:d9:
         aa:d4:1f:66:6e:fe:e2:8a:13:98:c1:bd:ee:af:c6:22:ac:f7:
         a2:bf:bb:c1:db:94:8a:10:36:05:86:62:fc:a8:b3:69:bc:63:
         5b:3e:81:44:73:b1:a3:ea:f4:85:42:49:52:41:e0:6c:ae:b0:
         33:84:88:54:71:4a:16:43:e4:27:a2:68:a3:d5:5d:53:a1:89:
         25:01:c8:04:03:e3:33:fc:20:d2:45:de:b7:b4:eb:42:1c:26:
         48:fe:1f:88:18:ef:5c:13:25:e9:bf:fc:8b:07:d9:56:18:3e:
         f2:b7:17:f3:05:fb:3e:ba:a3:15:84:26:21:d6:e8:79:cb:0d:
         aa:4e:4d:95:76:1d:7d:52:e7:90:7c:d4:5c:de:79:56:ed:0b:
         24:d5:0a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----