Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/00680db4-805c-3026-a2d2-d22d3a16315a.roa
File:                     00680db4-805c-3026-a2d2-d22d3a16315a.roa (raw, json)
Hash identifier:          86K3WRRe/Ntv4iCiqghZOwv0J4KWEvs2mVmYIQif3wY=
Subject key identifier:   29:C3:E8:83:9E:82:26:B1:5A:48:C0:7C:C3:7E:1F:21:09:40:32:5D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FA58C0C21358A21FED6D01640
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/00680db4-805c-3026-a2d2-d22d3a16315a.roa
Signing time:             Fri 21 Oct 2022 16:30:08 +0000
ROA not before:           Fri 21 Oct 2022 16:30:08 +0000
ROA not after:            Fri 25 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        54.6.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a5:8c:0c:21:35:8a:21:fe:d6:d0:16:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 21 16:30:08 2022 GMT
            Not After : Nov 25 05:00:00 2022 GMT
        Subject: CN=40539098-a56f-4ad6-a8f3-57445d604dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:fa:8c:a2:25:b5:42:98:dd:c1:94:8d:d7:e5:
                    a1:21:b7:eb:90:a1:03:b1:40:e4:9e:03:50:ff:bb:
                    15:eb:fa:97:6f:51:76:53:14:57:e8:cb:42:08:40:
                    7a:30:89:1d:be:7b:8d:5b:e0:19:5f:e3:53:e9:5a:
                    55:72:b8:73:de:c6:17:88:00:06:e8:9e:93:bb:c7:
                    e9:af:e6:60:1b:35:06:3d:57:1c:34:c9:f9:0a:27:
                    0c:12:04:e7:3f:c7:eb:b7:8f:5e:cc:7d:74:2b:b9:
                    ed:3e:20:c1:b3:ee:8a:67:fc:d6:e9:c8:c7:33:71:
                    94:9f:27:ce:cc:2b:ac:1d:81:ec:08:e1:d2:88:07:
                    64:ec:9a:73:73:b0:31:3a:b7:68:eb:c6:f9:38:41:
                    27:21:51:82:37:5b:18:22:b7:f9:84:5c:55:80:c7:
                    c6:07:c7:7f:29:a5:50:e9:99:b6:0d:51:79:47:bf:
                    e6:99:55:7d:06:3a:4f:10:91:07:36:83:85:2f:db:
                    90:52:d7:df:b9:1c:1b:4e:c4:ec:68:0c:f2:0d:c9:
                    2f:26:34:95:d1:a9:88:46:36:c3:4b:ea:a1:14:0d:
                    fa:b1:12:20:57:14:7c:14:a5:86:58:14:f4:e7:56:
                    be:39:ef:34:72:9a:af:85:74:01:f0:a6:8f:43:16:
                    6f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C3:E8:83:9E:82:26:B1:5A:48:C0:7C:C3:7E:1F:21:09:40:32:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/00680db4-805c-3026-a2d2-d22d3a16315a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.6.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:3d:97:dd:2b:51:77:e5:f9:c9:50:10:dc:56:5c:2e:f0:72:
         54:a8:0f:96:cf:60:ed:fa:71:06:f2:c8:d8:b4:5f:13:76:0a:
         f2:dc:2c:6b:85:d8:f8:c3:7f:8d:37:16:9f:89:61:c5:8c:67:
         8d:d4:5a:4b:1f:a8:5d:a1:e9:91:aa:7c:1a:5e:39:57:ab:aa:
         23:ae:49:59:33:3e:66:4c:c4:30:78:4f:b5:d0:ba:f8:70:86:
         ce:bc:1b:ca:04:75:d2:94:35:88:49:8d:03:75:9a:58:31:3c:
         8e:40:59:66:af:bc:93:34:f8:56:3d:ae:4f:7f:77:3a:41:80:
         3e:07:4f:9d:22:c9:e1:99:01:69:57:6f:7d:e7:08:9b:2a:f6:
         12:4a:59:8e:3c:75:5f:75:4b:5a:21:ea:38:e6:1c:24:43:1b:
         5c:57:bc:b6:2e:2f:c3:8c:ee:6e:4d:82:31:71:18:d6:62:b5:
         d8:7d:b6:1c:9a:4f:bf:2e:b1:5f:ff:3c:52:a0:4b:a2:8b:6b:
         7a:37:5c:91:6c:00:ca:63:89:e6:cd:61:dd:d2:2a:4e:9b:5a:
         94:f0:6b:73:62:44:4f:65:1e:29:18:f2:44:62:83:21:cd:dc:
         9f:4a:e5:c1:e8:88:c0:65:0f:6c:ed:bc:86:5c:e3:fb:36:b7:
         f8:a2:59:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----