Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/04abf161-03d0-3be2-a886-aa3fac0ab9fc.roa
File:                     04abf161-03d0-3be2-a886-aa3fac0ab9fc.roa (raw, json)
Hash identifier:          puWmxLRSdRjoHH5oazcmDA5FUFPNbH5fnw9YUIMwnOo=
Subject key identifier:   0B:84:88:76:33:B4:ED:E6:0A:27:E7:E8:FA:E0:A8:26:97:DC:7C:7C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E085758D691227C37CDE50180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/04abf161-03d0-3be2-a886-aa3fac0ab9fc.roa
Signing time:             Wed 25 May 2022 12:00:00 +0000
ROA not before:           Wed 25 May 2022 12:00:00 +0000
ROA not after:            Thu 30 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        168.241.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:08:57:58:d6:91:22:7c:37:cd:e5:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 25 12:00:00 2022 GMT
            Not After : Jun 30 04:00:00 2022 GMT
        Subject: CN=3395915a-5d15-434c-a314-f13ab7ce70c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cf:d4:e5:3f:90:30:e7:e4:43:7d:87:d9:bb:
                    98:f0:4b:eb:b9:af:1c:f0:76:99:9f:85:d7:ba:e4:
                    91:d8:24:7b:bd:5f:e6:c8:81:4c:b8:cc:eb:19:59:
                    71:6a:cb:96:c7:4e:37:cc:f1:b8:a6:13:05:53:38:
                    da:42:3f:9d:94:1e:96:2e:be:c6:9c:06:58:25:dd:
                    74:b7:3c:48:4f:ad:63:c2:8a:c8:de:d4:a8:b4:b3:
                    22:b3:37:e6:90:30:b4:17:85:63:37:23:36:94:c7:
                    6f:f7:80:f5:7c:f7:34:ef:4d:fc:c7:4d:06:e8:b4:
                    3c:76:61:10:8d:30:3b:13:5b:03:83:fb:18:be:e5:
                    bb:cc:9f:88:87:6c:02:54:62:0d:85:e9:c1:60:8e:
                    10:8d:a8:16:f9:3b:07:15:ba:9e:f2:0c:19:95:ca:
                    29:0d:0e:8e:1b:2a:69:cd:50:a9:e0:2f:17:2d:98:
                    54:f1:d1:63:bd:38:7b:9a:ee:70:1d:d5:a4:5c:4b:
                    55:dd:fe:52:de:3c:f2:d1:63:03:8d:bb:a1:10:e6:
                    a6:31:d6:b0:a5:ac:f0:37:88:4c:de:e0:62:93:5c:
                    70:94:ec:aa:81:0c:11:6d:59:3f:53:33:eb:c3:ed:
                    d1:6c:cd:a7:9f:b4:da:85:89:c3:c2:9c:85:91:81:
                    e0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:84:88:76:33:B4:ED:E6:0A:27:E7:E8:FA:E0:A8:26:97:DC:7C:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/04abf161-03d0-3be2-a886-aa3fac0ab9fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.241.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:80:16:28:ba:9f:79:b2:52:7f:a4:3b:3c:59:04:54:81:bd:
         14:91:86:20:bf:cf:af:c2:e0:b8:1f:5d:22:02:25:d6:17:ed:
         9a:dc:fc:9e:63:38:e3:d9:8b:88:29:fc:a4:92:dc:5f:c0:b7:
         aa:e4:ed:db:d3:40:e9:e4:36:55:8e:55:f1:70:7b:eb:70:25:
         db:79:3b:23:bf:5e:7c:dd:e9:6d:ba:4f:5e:00:38:ad:5b:b8:
         71:4e:85:d3:a4:81:05:25:d0:29:6d:7c:5d:58:9c:3f:15:33:
         84:6d:25:dc:39:e3:b0:34:6c:ba:68:26:ef:d4:68:bc:99:e3:
         df:fe:4e:0a:ec:30:84:bc:4f:9d:d3:a2:08:ea:c4:0f:56:76:
         9f:30:f1:a9:d8:58:74:24:32:01:2a:16:be:30:17:6b:f5:68:
         76:40:a9:c2:8f:43:b3:80:83:61:ff:dc:db:c4:a9:d4:be:16:
         16:4d:e7:e7:7e:fe:c0:44:3d:e4:a2:aa:b4:98:20:82:ff:ef:
         8d:4c:c9:ce:57:88:fa:83:5c:8a:6d:92:00:58:a9:ba:e6:06:
         e6:fb:41:fd:a7:39:51:74:17:fe:3e:f4:0f:4c:f3:0a:5d:80:
         f4:7d:80:2c:e9:e6:e4:34:ab:55:a4:68:a0:06:6a:d0:b5:fe:
         94:52:46:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----