Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0cd66a88-7e1b-3196-be72-229cea41b8c6.roa
File:                     0cd66a88-7e1b-3196-be72-229cea41b8c6.roa (raw, json)
Hash identifier:          HiYTad/KgCssDJFt70rh5YsxcLPmGg0XhfOPWwoNSso=
Subject key identifier:   78:85:B9:23:1F:54:07:73:55:67:C2:CD:F3:B3:91:17:69:D6:E0:DA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DCB88D5B10C9E97AC0ED09180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0cd66a88-7e1b-3196-be72-229cea41b8c6.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Thu 09 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.132.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cb:88:d5:b1:0c:9e:97:ac:0e:d0:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : Jun  9 04:00:00 2022 GMT
        Subject: CN=c7ab3d07-8ba5-4d4b-aa71-31bfb03cb906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:81:e1:71:16:3c:b2:66:c9:17:bb:c7:49:bb:
                    8b:ae:e6:bf:98:88:f6:39:2c:8d:7e:ab:88:7b:0e:
                    65:9f:c1:fb:5e:7d:9c:ca:d1:aa:92:17:dc:b2:6c:
                    ce:d5:67:c9:fc:1c:4d:eb:a6:26:cb:63:ef:f2:42:
                    71:51:91:e9:16:cd:60:50:60:40:d8:69:4c:b1:02:
                    7f:80:ea:ff:8e:1f:3e:c3:5e:12:1d:98:dc:bb:19:
                    74:57:d6:32:24:4a:94:dd:66:92:e5:5e:75:7b:3b:
                    20:c5:1f:96:c2:f9:fc:e7:7a:09:53:e0:18:96:c4:
                    a1:1e:1d:1c:c3:9b:f3:03:05:82:d0:be:06:28:0c:
                    27:40:78:ce:9c:42:8c:ad:8c:3a:bf:7c:51:49:9c:
                    67:2c:ab:df:85:a8:f7:e9:2c:d4:cb:0d:83:ee:ee:
                    7a:06:65:19:52:81:cc:75:03:97:72:c5:9b:a3:1e:
                    b8:3d:a9:ce:a2:e6:98:e8:b4:d6:61:e3:b6:28:18:
                    ab:7a:c6:0e:8b:03:d3:05:8c:29:f6:75:b7:f6:73:
                    35:fb:1c:7c:c7:fb:eb:bb:db:9e:81:26:19:3a:24:
                    83:2e:f9:a0:6b:55:1b:6c:65:bd:01:83:6d:c9:5a:
                    19:af:80:43:39:fc:42:6d:d3:06:39:7e:45:a5:41:
                    ee:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:85:B9:23:1F:54:07:73:55:67:C2:CD:F3:B3:91:17:69:D6:E0:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0cd66a88-7e1b-3196-be72-229cea41b8c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.132.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:9e:b6:17:e1:06:be:4c:b6:8f:3f:74:3b:d6:6d:c9:b9:e6:
         a0:fd:92:c0:b1:04:07:b9:4f:b7:b6:a1:1e:8a:a7:f5:c8:69:
         45:4e:c8:79:44:23:7d:df:90:73:4f:ec:78:4e:ce:0f:cb:e8:
         de:9d:d4:83:2c:ab:f8:0e:a1:86:74:aa:a2:01:a6:fd:15:a3:
         79:12:3e:9c:91:7b:ce:1f:89:86:4b:e5:59:e0:37:64:b6:d5:
         55:0d:3c:6b:6e:0d:bd:ef:ef:9b:5f:ca:5f:62:dd:bf:fe:dd:
         b2:6c:de:af:06:0f:be:f9:c4:30:bd:f4:9e:d9:41:96:e1:f1:
         8c:71:4f:02:b3:a5:bd:b7:09:36:a8:5b:3a:90:85:73:59:af:
         82:6d:c9:a5:94:46:51:44:37:5d:19:9a:9f:ed:6b:48:88:d4:
         d5:fa:e0:46:f7:db:3d:9d:2a:a0:d3:cc:af:d0:44:23:e3:b5:
         9b:42:a7:b0:32:53:09:c1:cc:33:04:b3:a9:2d:7e:67:7a:e9:
         1a:1f:d9:1c:6c:06:bf:dd:b1:3b:0c:c1:d3:c9:8d:1d:20:b1:
         cc:92:d5:e7:5e:37:9e:04:4b:00:ec:bc:06:f2:73:fb:8f:e2:
         eb:e1:34:10:32:3c:21:09:9f:9e:0a:25:db:f6:d5:15:65:a9:
         08:04:3d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----