Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ec945440-26b2-31c9-9d8f-db30647626cd.roa
File:                     ec945440-26b2-31c9-9d8f-db30647626cd.roa (raw, json)
Hash identifier:          /il8pr36D7P/UlAzG2q8dYJFNaweocMvHHp9ixt/cQo=
Subject key identifier:   95:91:D7:AE:AF:F9:20:02:CC:CD:EC:67:AD:4C:94:84:8F:39:51:7C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DA8763EC9C4F981A11B15ED00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ec945440-26b2-31c9-9d8f-db30647626cd.roa
Signing time:             Thu 21 Apr 2022 12:00:00 +0000
ROA not before:           Thu 21 Apr 2022 12:00:00 +0000
ROA not after:            Fri 27 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        99.141.0.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a8:76:3e:c9:c4:f9:81:a1:1b:15:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 21 12:00:00 2022 GMT
            Not After : May 27 04:00:00 2022 GMT
        Subject: CN=1d564e1e-22b8-45bc-b57c-08523844e295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b6:a4:61:a1:30:f2:0d:7e:f9:de:d3:4d:f7:
                    60:ef:24:5e:2c:ef:b7:92:b0:b4:14:48:37:96:5d:
                    7c:3a:29:e8:53:d4:7f:b9:8f:62:39:4d:db:c9:cc:
                    db:08:13:fb:2c:f5:6e:68:7e:0d:94:85:9f:79:ba:
                    77:a9:68:94:71:b3:5f:16:5e:a6:16:43:99:2c:89:
                    bb:0c:f8:dd:58:f5:26:45:9d:f9:e2:61:a7:a2:58:
                    91:2a:00:7a:12:d5:d6:66:04:82:3a:ef:8b:43:6a:
                    d4:04:6e:a2:c6:e1:47:aa:ff:ca:8b:d5:9b:2c:bf:
                    5c:e7:ac:a4:fc:59:bf:75:b0:56:eb:6f:4c:ba:06:
                    14:a9:e8:da:c6:7d:a6:41:dd:99:03:3a:73:55:2d:
                    6d:2d:07:27:72:48:b6:b5:1b:0c:cc:c1:96:10:19:
                    8a:06:3a:e8:82:f1:2b:d1:92:be:a7:a0:b0:2f:71:
                    8d:2c:78:cb:3b:56:5c:d7:f3:68:0c:80:3a:83:52:
                    c1:b2:4f:26:e7:0d:58:40:82:52:1f:b2:e6:00:dc:
                    03:72:8a:ea:e8:8b:74:07:e7:a0:3e:ba:74:89:68:
                    80:4d:60:5b:b3:f8:03:c6:26:d0:a2:e6:53:51:0d:
                    73:5a:34:3c:c8:dc:8c:dd:8c:d1:be:77:86:f6:4d:
                    a5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:91:D7:AE:AF:F9:20:02:CC:CD:EC:67:AD:4C:94:84:8F:39:51:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ec945440-26b2-31c9-9d8f-db30647626cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.141.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:1d:02:df:be:69:4d:26:bf:79:09:eb:8e:df:41:37:61:04:
         65:be:1e:51:75:f5:f0:13:75:e4:0c:8b:84:59:92:8e:08:9c:
         da:36:ab:42:ae:31:34:ee:67:3f:03:dc:6f:dd:42:5e:0f:35:
         24:4a:61:8c:2a:7c:d7:74:88:2a:7e:fc:ab:10:3f:5d:e7:19:
         23:d6:e5:49:02:83:f5:12:de:d6:87:15:99:be:6b:a4:3e:a0:
         93:25:2b:a6:41:35:04:9d:b4:65:d4:7a:f9:5f:ea:6e:12:a4:
         46:61:53:56:39:86:0c:f8:3a:72:0a:bd:a5:41:9f:20:47:ef:
         73:36:b4:d6:f2:26:34:b7:ca:dc:b2:01:f6:f5:55:61:56:29:
         3a:ae:75:65:96:95:a3:9c:30:2a:01:7c:f2:72:48:ce:80:e8:
         de:5c:73:35:d8:d5:f4:47:9e:a7:34:f3:f6:01:7d:06:61:53:
         d4:ae:62:57:9d:79:f7:ee:8b:3b:19:7a:26:6e:62:76:6b:34:
         1b:5c:39:2e:04:b7:c2:13:91:c2:c5:d4:35:58:04:8d:2d:ce:
         d1:4a:34:44:f1:9d:b7:64:04:d8:a9:d5:99:4b:6c:ae:dd:86:
         9a:0c:24:25:b0:dc:bd:c3:ea:62:a1:c7:37:f2:5f:14:aa:f6:
         64:85:90:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----