Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/faba3692-b46f-3fce-b49c-664d9a147867.roa
File:                     faba3692-b46f-3fce-b49c-664d9a147867.roa (raw, json)
Hash identifier:          G4dsrGEKn1t3n0PQyqgUFjTbP52bGHJLHbsB1IzWz1I=
Subject key identifier:   09:0A:26:F3:11:CC:06:14:71:6C:45:BB:1F:4C:EF:D9:C8:F6:9A:3E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584091E261E8360B92522F255200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/faba3692-b46f-3fce-b49c-664d9a147867.roa
Signing time:             Fri 13 Jan 2023 12:00:00 +0000
ROA not before:           Fri 13 Jan 2023 12:00:00 +0000
ROA not after:            Sat 18 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        67.202.0.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:91:e2:61:e8:36:0b:92:52:2f:25:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 13 12:00:00 2023 GMT
            Not After : Feb 18 05:00:00 2023 GMT
        Subject: CN=579255a1-d452-4663-b864-500b8d101dbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:22:42:7e:e3:a3:34:de:21:7b:ce:c7:7e:01:
                    d3:ba:e2:30:45:52:51:3a:bc:92:14:1b:ac:ae:e6:
                    59:22:bf:51:a3:30:3a:74:b5:f1:26:40:77:15:30:
                    74:4a:2c:fd:7e:d1:45:c7:bd:b1:f0:92:0d:48:22:
                    4d:6b:84:7e:5a:e7:39:61:2a:13:d3:a0:35:4d:c4:
                    97:75:d6:fb:c7:b2:01:8d:19:08:5e:42:f3:24:14:
                    1f:a8:92:15:25:85:f2:b8:a9:41:27:5a:dc:e3:6a:
                    56:d3:a9:f2:cf:12:66:8e:4a:ce:26:f2:00:3c:9c:
                    36:3a:ad:5c:56:4f:01:de:94:53:cc:6e:25:e7:56:
                    f3:64:81:55:38:5d:f2:c9:f0:1b:4c:ff:2e:f8:05:
                    c3:b1:1a:a9:8b:8b:28:b5:99:b6:d8:bc:5a:97:36:
                    c5:a6:dd:06:84:80:58:ad:56:8c:93:6c:55:18:aa:
                    ca:55:60:6b:66:95:12:86:84:eb:38:56:9d:33:ad:
                    48:ac:35:4c:5d:cf:09:29:7e:30:1f:18:ea:4e:25:
                    7a:28:92:16:58:9e:61:a0:80:de:38:db:d9:4e:70:
                    3d:86:e6:f9:83:4b:6e:ad:7d:4a:1b:44:7a:be:b7:
                    81:7c:3c:03:12:11:8b:a5:f5:2d:25:42:a4:1f:13:
                    02:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:0A:26:F3:11:CC:06:14:71:6C:45:BB:1F:4C:EF:D9:C8:F6:9A:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/faba3692-b46f-3fce-b49c-664d9a147867.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.202.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:e2:15:49:81:00:ef:f5:8f:e1:3c:59:c6:1c:7d:be:aa:b4:
         16:d3:39:ec:0e:2a:9a:6d:9b:71:18:bf:9a:d0:63:74:bf:4a:
         49:d9:52:0b:e7:a2:f0:25:a9:99:28:8f:58:68:3c:66:a1:57:
         65:01:38:62:34:8c:76:24:22:9d:2e:41:7c:36:a7:3e:ef:7e:
         b1:6d:f7:92:9d:67:d4:a1:76:a9:91:57:dd:1a:69:e3:04:a0:
         41:c1:75:fd:41:9a:86:a6:2b:31:1d:3d:3e:37:81:5f:2c:f8:
         22:73:5a:de:1d:2a:7d:21:d5:48:d3:26:6b:0c:d7:f5:8c:41:
         5d:b4:3b:e3:d1:b0:8b:21:c7:f3:14:c0:db:1a:b2:9c:3a:41:
         c3:6e:ae:b8:00:a0:a1:ea:74:8d:58:30:d6:ff:c1:a5:e3:b2:
         80:d1:61:c8:5e:52:c2:96:81:16:b6:6d:3a:cb:c3:41:f8:00:
         5e:36:52:26:0d:1d:7e:8d:0b:2d:cd:2e:be:82:15:70:41:8b:
         64:e4:f8:1c:72:29:4d:e9:02:cc:0d:8c:67:f9:f3:9c:bb:b8:
         09:07:c8:80:d3:34:92:dc:e9:25:37:1e:f9:5b:03:08:f6:63:
         f3:d0:9f:5d:f1:ed:32:1c:2e:30:23:89:fa:9f:7c:e9:08:0b:
         db:17:56:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----