Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0518c885-ea19-3d6e-a845-7a8916d552d1.roa
File:                     0518c885-ea19-3d6e-a845-7a8916d552d1.roa (raw, json)
Hash identifier:          Adghjref7DZvUs9qWBE41k/XYt8qzKiWFkMWe35T20g=
Subject key identifier:   EF:6E:9E:47:FF:E6:96:CA:6B:2B:25:79:7B:69:C8:EA:F2:90:1A:E1
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CE4F50C7ACFF62C7684D6F420
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0518c885-ea19-3d6e-a845-7a8916d552d1.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        130.80.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e4:f5:0c:7a:cf:f6:2c:76:84:d6:f4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=07742012-a774-4aeb-9980-0ad9e90364d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e1:09:58:d7:72:1c:2e:b2:69:7b:0e:8f:bf:
                    15:2a:db:fb:6e:c1:20:33:ed:37:f1:69:2e:c0:bb:
                    71:c0:9d:e4:9a:45:ce:ce:a3:a7:12:59:81:76:50:
                    24:0d:3c:29:e6:24:4d:d9:47:bc:19:52:32:94:d7:
                    c2:92:52:33:ba:cd:27:60:62:0e:83:6c:98:74:49:
                    03:1a:5c:2a:a1:4a:8f:fe:0d:9f:08:94:a4:4e:a2:
                    d2:27:34:cd:eb:ef:d7:e2:72:b1:f9:51:bb:02:9c:
                    9a:71:0b:87:38:ab:f3:09:f3:52:90:f9:0a:79:d8:
                    a0:c5:c1:b5:9b:c5:07:89:87:65:ee:6a:21:31:a0:
                    2e:f6:65:01:07:bc:3e:23:2a:8b:6a:79:c7:80:08:
                    d5:0b:70:f8:5e:60:97:18:7e:21:d8:1a:87:70:22:
                    40:7c:5d:c8:87:0e:56:62:f1:39:35:ee:99:71:d1:
                    d2:6d:4d:a8:11:77:ad:a5:d1:db:51:18:e1:7b:ad:
                    00:2b:28:aa:f8:d1:d3:bd:f7:49:07:66:90:17:6a:
                    c2:fc:d3:e1:98:e9:9e:b5:cc:93:41:5e:c1:36:c3:
                    34:36:de:dd:3d:96:f2:a7:82:05:68:32:42:59:a8:
                    66:88:e4:b8:ef:44:b6:08:df:01:6f:0c:a2:cd:78:
                    db:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:6E:9E:47:FF:E6:96:CA:6B:2B:25:79:7B:69:C8:EA:F2:90:1A:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0518c885-ea19-3d6e-a845-7a8916d552d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.80.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:30:fe:07:e3:bb:a0:26:6c:6a:25:a5:b9:34:69:e2:5a:9c:
         03:94:d7:5e:6f:ae:b4:49:7a:52:73:5f:a8:9e:16:4d:ba:c0:
         52:82:b9:cd:2f:99:13:ba:32:71:84:a3:ca:c1:77:e7:b6:8e:
         f6:09:4d:ea:05:40:cb:e4:ba:b6:71:fb:78:27:ab:26:d8:d7:
         d4:7b:f8:24:a5:61:da:d9:9a:7d:66:5f:8e:21:2d:e2:2c:3d:
         43:b7:35:cc:7b:f0:bc:85:b6:38:61:2c:1d:3a:48:28:4f:aa:
         7c:09:62:86:e2:d8:e0:26:65:0b:71:a3:e9:9d:95:62:f5:9d:
         36:17:ef:e7:1b:a8:a3:e0:a1:9e:af:eb:7c:bf:4b:d1:90:6c:
         98:9f:da:c8:7a:7d:b6:c1:85:79:8d:ac:29:50:82:2b:da:51:
         c0:92:81:7e:03:0d:a4:dc:82:b5:9e:cc:d9:bc:c6:b9:57:50:
         f2:d2:65:f2:eb:e9:20:6a:a3:7a:1b:b7:23:6b:93:96:58:4a:
         60:b7:d6:13:6c:a3:ea:d8:ec:ec:4e:c9:9f:93:fc:69:8a:27:
         1c:30:7a:d5:4a:38:44:1e:1f:31:83:23:52:11:5a:c5:17:ec:
         ce:63:1c:88:bc:6a:5d:bf:b8:52:1c:48:42:8d:1c:cb:d7:98:
         12:18:cd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----