Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ed25e808-72e7-3406-bc9f-007b1f4e5b1f.roa
File:                     ed25e808-72e7-3406-bc9f-007b1f4e5b1f.roa (raw, json)
Hash identifier:          vcKMd746opaCqGDL0ahob//dneF+DiIuJR6LRJbwKJ8=
Subject key identifier:   F7:4C:A5:BB:88:AF:B5:09:E4:C6:05:43:BC:26:A2:FA:CD:AB:E9:CE
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DCFFB7A39998C8965199AD780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ed25e808-72e7-3406-bc9f-007b1f4e5b1f.roa
Signing time:             Thu 05 May 2022 12:00:00 +0000
ROA not before:           Thu 05 May 2022 12:00:00 +0000
ROA not after:            Fri 10 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        156.4.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cf:fb:7a:39:99:8c:89:65:19:9a:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  5 12:00:00 2022 GMT
            Not After : Jun 10 04:00:00 2022 GMT
        Subject: CN=3e05cc99-1ef5-40e8-8b35-eee097b0d4e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b6:ec:95:b9:44:c6:33:08:b0:db:25:16:bf:
                    11:1d:7c:b6:59:7e:bd:0b:39:e6:4f:99:88:5e:8f:
                    9f:e7:c8:45:5b:83:74:94:b1:d3:5c:c1:9a:ca:a1:
                    d1:e4:7b:ab:aa:3a:eb:75:9e:da:69:ce:28:ac:2b:
                    60:55:68:ae:3f:0c:65:6e:7b:2f:6d:31:91:84:39:
                    ef:da:48:7f:da:e6:68:cb:f9:51:ed:1b:22:9b:64:
                    90:33:93:bf:06:2c:9c:05:71:74:0e:c3:7c:57:41:
                    9f:c2:1e:9f:13:77:af:51:8c:d3:a7:9a:77:3f:47:
                    ed:55:f5:27:48:78:e6:4f:f1:af:6a:0d:bf:aa:87:
                    a2:c6:6e:3f:d3:0d:88:b9:f1:40:c5:4e:2f:94:4f:
                    0e:c1:0a:12:76:d7:76:e3:42:b5:2b:ca:a6:b4:b9:
                    3a:1a:be:8e:12:a5:92:3c:4b:22:a9:c6:12:bc:f3:
                    2d:8f:ff:ca:8f:53:ba:3a:74:08:7b:15:ba:ea:8a:
                    9e:c2:81:e3:79:35:06:5c:b6:1a:af:3d:1a:ec:7d:
                    b0:d6:f8:28:65:d8:56:02:22:7b:84:17:d1:f4:3f:
                    ee:6a:30:7f:15:a6:93:48:86:7c:5f:29:15:23:2d:
                    e3:8b:88:eb:12:5f:57:5f:5f:60:fd:0a:35:cb:a5:
                    38:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4C:A5:BB:88:AF:B5:09:E4:C6:05:43:BC:26:A2:FA:CD:AB:E9:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ed25e808-72e7-3406-bc9f-007b1f4e5b1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.4.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:3e:45:4b:86:f3:9c:a9:8b:22:f0:cc:f0:c8:70:98:a1:25:
         05:64:7e:3d:68:90:b6:3b:7f:f6:41:3f:dd:eb:94:f7:ae:2c:
         ab:c0:d6:7e:a7:eb:fd:f3:9e:c7:35:70:b8:5c:a3:c6:bf:04:
         2e:c5:6f:21:2e:1a:59:8a:d5:6d:e1:6b:b3:b7:b1:71:74:62:
         61:50:01:19:54:3b:a6:bf:5b:79:f3:99:f5:d6:f9:30:0c:64:
         9c:55:f9:3f:89:fd:e2:f8:22:07:c6:75:19:33:fa:14:3c:72:
         37:0e:15:74:03:dc:fe:ff:de:c3:60:d9:9d:58:39:ef:cd:8a:
         2e:b1:d4:4e:19:a6:e7:a3:ad:e5:45:aa:1e:b0:cc:39:86:eb:
         8e:12:46:67:72:de:b2:f8:5a:b2:6b:f3:0a:94:0a:7e:5c:dc:
         0b:e9:be:f0:8b:d5:37:45:01:7b:3d:c7:59:5a:c3:e7:79:38:
         41:0a:cf:0f:b2:c7:82:bd:b9:56:14:fd:4f:d4:d1:27:ab:28:
         a6:1a:b0:37:4e:17:b9:b2:46:7f:fc:67:cb:0e:95:0e:37:94:
         eb:fd:a4:5e:9f:b5:2f:fb:5e:5d:ae:4f:e8:50:13:2a:20:a1:
         33:2c:a1:cc:04:a6:47:c7:b6:fb:d0:a3:6c:e3:a2:8f:ed:05:
         cf:95:d5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----