Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f69eca25-5a70-3146-9fad-80ac321b42e1.roa
File:                     f69eca25-5a70-3146-9fad-80ac321b42e1.roa (raw, json)
Hash identifier:          vkTpo9Z1rPfnoAzdVjJkA71vFPblRTzZj7p8RgMsm74=
Subject key identifier:   AF:80:CA:0C:AD:B9:4F:AE:C2:CD:55:FB:FA:C5:17:69:0F:AF:87:10
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840864F5ED90A795FF0C437BBE0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f69eca25-5a70-3146-9fad-80ac321b42e1.roa
Signing time:             Mon 09 Jan 2023 12:00:00 +0000
ROA not before:           Mon 09 Jan 2023 12:00:00 +0000
ROA not after:            Tue 14 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        68.158.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:86:4f:5e:d9:0a:79:5f:f0:c4:37:bb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  9 12:00:00 2023 GMT
            Not After : Feb 14 05:00:00 2023 GMT
        Subject: CN=236dfccd-b41e-496c-9fc3-7953dd6adcb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:98:69:17:28:9c:67:df:74:69:43:24:48:14:
                    65:ed:c5:96:37:3c:1b:b8:82:63:3b:68:0b:10:c7:
                    11:79:1f:e5:23:2b:8a:00:9b:09:1b:ae:6b:54:65:
                    7f:41:3a:c1:df:84:e9:4c:fa:d0:c3:be:f9:4a:0e:
                    d2:46:79:6f:c2:87:d9:f4:0b:5c:a1:bb:a8:b5:3f:
                    31:9c:d3:96:bb:2d:39:e3:20:7c:1e:27:ff:9a:00:
                    07:21:a5:69:99:13:30:18:ec:fa:82:78:c7:03:8f:
                    28:54:b6:7b:5a:fd:6c:73:68:1e:c4:a2:fa:12:36:
                    24:e0:b0:ce:31:24:13:fa:4a:1b:1e:d5:83:26:b1:
                    63:88:86:e7:61:a5:8b:ab:86:ae:6f:c0:81:d0:7c:
                    43:8b:6c:d5:3c:24:cf:9f:c5:81:bf:e4:0b:a0:b0:
                    6b:4f:1e:c0:d1:c2:df:a6:e7:85:aa:67:20:4b:6d:
                    ab:e3:cb:8c:cd:ac:dc:fa:c1:bb:71:8f:94:a2:2d:
                    e1:82:76:08:8b:d2:ee:e3:ea:d1:0f:c7:f8:0f:bd:
                    db:d6:bc:4d:29:25:78:9a:8e:ad:69:51:b4:a5:98:
                    b7:89:7b:7a:02:ab:5e:71:5a:6d:6d:5e:68:a1:e9:
                    ae:33:55:c8:8f:41:8f:c5:fa:9e:58:89:c7:5e:c4:
                    bd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:80:CA:0C:AD:B9:4F:AE:C2:CD:55:FB:FA:C5:17:69:0F:AF:87:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f69eca25-5a70-3146-9fad-80ac321b42e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.158.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:a2:7e:3e:cb:09:19:3b:b7:72:9d:9b:19:b5:2b:26:f2:7f:
         82:d3:20:e9:05:3f:23:d6:e1:7a:ef:01:4f:4a:71:28:5e:c1:
         a9:0c:91:4c:6a:79:51:82:70:6e:91:1b:0b:25:f6:15:46:84:
         84:f2:c5:15:6b:12:4b:9c:f4:46:f5:ca:db:a7:9a:e7:ff:f1:
         b6:32:b3:a4:0f:78:dd:bb:1e:57:5b:85:c4:31:6e:f5:1e:3d:
         7f:c0:61:b2:37:e3:d5:c1:cf:ef:5d:26:06:b3:0e:16:9e:bf:
         e6:43:de:04:6f:6e:a1:38:89:2d:a1:d0:3e:b1:d4:d1:d9:fb:
         fa:f6:f9:d4:f9:46:61:7e:da:11:21:c0:57:ae:5d:44:d1:7b:
         78:2c:a4:eb:0a:47:7a:03:10:a6:a3:4d:31:2c:f1:02:9b:8f:
         14:74:98:05:28:ce:01:b4:eb:d0:0f:f7:c9:bc:da:73:cc:d7:
         3a:d1:90:6b:66:96:63:b6:53:f1:11:8c:97:2f:56:08:4c:32:
         3f:40:57:69:f4:64:d3:10:51:55:83:fb:59:71:a9:46:d1:e3:
         f8:da:4b:0e:62:a7:d5:b3:62:9a:58:6d:08:02:3d:7d:54:b8:
         12:4b:7d:8c:4f:e4:19:f7:61:60:4d:c2:67:c4:a5:42:ba:1d:
         31:b3:3b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----