Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/037b5e1b-f85e-33ff-8cd1-28f848abcd8d.roa
File:                     037b5e1b-f85e-33ff-8cd1-28f848abcd8d.roa (raw, json)
Hash identifier:          UxijKLxm9pAOMdnW9sBcnDtOy+7sqI7sN1tLSSAwogs=
Subject key identifier:   C9:F7:F0:0D:C6:EB:98:92:D6:C9:77:8A:6B:B8:5F:E9:49:13:48:BA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D5A87744D0300350E5B367A40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/037b5e1b-f85e-33ff-8cd1-28f848abcd8d.roa
Signing time:             Fri 25 Mar 2022 04:00:00 +0000
ROA not before:           Fri 25 Mar 2022 04:00:00 +0000
ROA not after:            Fri 29 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        173.228.160.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:5a:87:74:4d:03:00:35:0e:5b:36:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 25 04:00:00 2022 GMT
            Not After : Apr 29 04:00:00 2022 GMT
        Subject: CN=ee6e7f8e-0eef-43cf-ac54-27def9b79a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1a:a8:10:3b:7a:f5:7e:84:75:72:0c:cf:b3:
                    1e:5d:e7:52:02:84:0e:19:96:58:7b:2b:b4:fe:89:
                    0d:a7:86:40:38:01:7f:b8:b6:0f:9d:0b:f9:e5:8b:
                    7b:77:55:51:81:ec:5e:d8:ab:d3:f3:03:c8:a0:c8:
                    25:dd:37:4d:f7:ae:2d:f2:ce:8e:ba:09:3a:06:e8:
                    7c:1f:a2:f7:61:c9:4e:fe:f6:23:f3:95:4b:6e:fa:
                    1a:1d:5c:c8:fe:e0:d4:78:7e:bf:5a:ea:ca:1e:bd:
                    07:91:da:c4:20:4c:61:1b:44:07:5f:3b:a9:9c:f7:
                    33:a3:80:01:4f:17:ab:d2:5f:ec:fe:22:e4:32:2b:
                    0d:a5:98:27:93:d9:ac:f7:5c:f8:97:88:02:34:96:
                    5a:12:22:9a:14:9a:59:2e:c3:68:c4:e5:3f:e6:5a:
                    1e:d6:36:6c:bd:93:b9:d3:e6:c9:13:e4:c6:b4:e2:
                    62:26:9d:36:33:ce:dd:b7:96:da:82:76:c0:6a:d3:
                    25:43:a0:ae:0c:3f:11:ec:a8:63:05:82:56:53:d4:
                    06:27:6c:85:e9:5f:24:64:27:97:74:09:bd:f8:9c:
                    d7:45:1e:b5:05:81:f5:30:92:5a:37:a1:2f:49:c7:
                    9b:46:16:ff:75:78:c5:ec:e3:88:78:58:c0:2a:50:
                    ff:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F7:F0:0D:C6:EB:98:92:D6:C9:77:8A:6B:B8:5F:E9:49:13:48:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/037b5e1b-f85e-33ff-8cd1-28f848abcd8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.228.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:d0:c7:fc:95:c2:24:4e:d5:5f:23:0d:64:95:42:85:28:f2:
         1e:11:54:57:62:3c:fc:3f:a9:52:bb:97:33:47:f7:1e:e2:b1:
         81:6a:b4:ad:98:32:c5:30:40:36:11:84:3b:22:98:4c:9f:0a:
         8d:3a:d3:b7:4b:16:9f:30:66:a1:a2:7e:d4:7e:57:fc:ef:e9:
         ee:81:2b:60:99:e6:14:0d:67:37:88:21:e6:d1:fa:99:04:12:
         d4:32:ae:63:21:09:10:15:24:d9:4b:98:3b:3f:aa:c6:e8:35:
         98:3d:77:e2:3f:e5:4c:a9:cf:ed:3c:af:6a:26:9a:8a:b0:62:
         f8:b1:7e:76:9d:62:b3:54:96:26:0e:63:60:82:c5:1c:89:56:
         86:3c:3a:47:13:db:d9:f9:5d:f3:4d:e3:0c:4f:c7:bc:75:13:
         03:29:44:b9:4f:c5:8c:56:6d:e1:2a:46:3d:00:c7:e1:89:aa:
         85:b0:11:64:a4:d8:f3:15:71:d3:2d:31:18:d8:d9:88:00:fb:
         f4:ef:fd:6e:22:04:26:61:48:ed:eb:0f:69:c3:10:35:8a:4b:
         36:4d:43:87:6a:58:ea:b5:9b:52:8e:f5:88:72:90:3e:f5:61:
         28:c5:c6:21:67:fb:bc:7e:8f:32:38:75:e9:d4:fd:7b:31:f1:
         ba:f2:08:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----