Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/11002b30-353e-3384-9420-2019d1febe86.roa
File:                     11002b30-353e-3384-9420-2019d1febe86.roa (raw, json)
Hash identifier:          ILSrzHqdJNiQ0l4vSCmYng3z4VcLhOhi+Pdcw4q+4mY=
Subject key identifier:   42:C1:34:83:FF:59:5B:13:45:D7:0E:7C:D2:E5:20:DD:D9:8B:95:98
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584044538D028FE3A9D187968410
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/11002b30-353e-3384-9420-2019d1febe86.roa
Signing time:             Fri 16 Dec 2022 12:00:00 +0000
ROA not before:           Fri 16 Dec 2022 12:00:00 +0000
ROA not after:            Sat 21 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        99.77.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:44:53:8d:02:8f:e3:a9:d1:87:96:84:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 16 12:00:00 2022 GMT
            Not After : Jan 21 05:00:00 2023 GMT
        Subject: CN=e98f9ec9-d6e9-4c85-ab66-ed4c521f43cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b0:4c:bf:67:22:32:b3:9c:03:ec:25:02:2c:
                    73:03:62:fa:e8:49:95:15:4d:14:7c:a4:a9:04:e7:
                    ba:35:eb:72:0b:15:82:0b:e5:1c:0a:06:d2:45:37:
                    24:69:93:fc:0e:0f:4c:da:ba:68:d2:b2:e7:f6:21:
                    02:5c:85:78:d5:47:04:05:03:75:1a:11:97:f3:1a:
                    b6:5f:3f:95:53:f5:d1:5d:3d:84:87:8f:77:86:f3:
                    30:9e:68:e8:ab:c2:04:1b:12:b5:54:1e:70:c4:34:
                    63:cf:e8:5c:bd:b7:5d:66:cc:81:1c:9a:81:14:2c:
                    e5:ed:1f:50:d2:dc:60:4a:54:88:e0:7a:13:ed:c4:
                    72:df:22:8c:35:fc:ad:eb:5b:44:4d:d9:83:c6:b2:
                    5d:a5:ac:de:09:1e:6d:e7:1f:b4:6f:18:37:5a:20:
                    53:6c:30:3e:b9:b0:56:8b:09:7d:f7:2e:ec:5d:f3:
                    0b:83:05:bf:0b:e6:1c:d0:c4:15:c6:98:15:e0:6a:
                    d7:bb:ef:97:98:6d:0e:65:f1:b8:4b:e2:cf:9e:91:
                    b3:10:a1:16:87:42:39:08:94:a6:de:1f:e5:35:8e:
                    2d:8d:c9:e6:2f:2a:c2:78:8e:ee:63:65:cb:e7:13:
                    f3:ae:58:54:54:f9:5d:b5:7f:fd:ef:b1:1d:bc:7d:
                    93:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C1:34:83:FF:59:5B:13:45:D7:0E:7C:D2:E5:20:DD:D9:8B:95:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/11002b30-353e-3384-9420-2019d1febe86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:29:11:d0:2d:17:5f:b2:80:d7:82:b9:02:64:c6:c8:d2:f0:
         e7:4f:10:8a:d6:55:f7:25:26:b1:66:b9:4f:8d:e9:88:bd:04:
         02:93:3f:a7:e1:fd:9d:64:ea:2d:b7:31:b2:a1:37:b8:3d:97:
         49:d7:4d:bf:3b:e7:46:97:91:4e:24:ed:43:b9:6e:ea:01:cb:
         e6:1f:e7:90:ae:45:34:a3:a8:70:08:e5:58:8f:5c:31:94:b9:
         26:95:7a:37:6f:93:1c:df:d1:84:67:b0:c1:b3:7f:9e:0e:32:
         9a:f5:c4:2a:7a:f9:85:95:3d:73:36:b1:46:54:49:c6:6d:ac:
         37:b3:c7:08:e9:da:c0:51:13:42:f6:49:7a:b0:1f:ed:4b:44:
         37:98:d7:4f:7a:2a:25:77:bb:68:42:6a:94:61:cf:f6:d4:03:
         76:bb:e7:5f:bc:01:bd:b2:78:02:22:25:87:6a:7e:60:ba:90:
         c2:e6:c9:e3:35:54:b3:2f:e4:73:d5:00:3e:b2:88:30:7c:d5:
         3b:8b:42:e2:27:4f:4b:b1:48:66:49:6e:5f:75:33:02:69:47:
         5f:98:8c:43:32:86:fa:9d:88:59:29:64:26:cd:b8:5e:13:00:
         d0:38:84:e3:0f:06:49:45:41:48:f3:bd:91:1e:8f:ee:59:1a:
         07:dc:22:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----